Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: J2hKUylbw9w8H9f+56aT9dhDX+M8z1157g/q+PYRSFo=
Subject key identifier: 6A:9B:E2:89:4B:C9:46:30:DA:59:9C:3F:76:78:F3:83:89:B2:55:3F
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019611A12668972E1A72A2763FC478AF36A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0871
Signing time: Mon 07 Apr 2025 19:01:35 +0000
Manifest this update: Mon 07 Apr 2025 19:01:35 +0000
Manifest next update: Tue 08 Apr 2025 19:01:35 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: aGAGRP0p+H+i5nFFg4sCD30CctSyls6Mp3S6u3OpxaQ=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:26:68:97:2e:1a:72:a2:76:3f:c4:78:af:36:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Apr 7 19:01:35 2025 GMT
Not After : Apr 8 19:01:35 2025 GMT
Subject: CN=6a9be2894bc94630da599c3f7678f38389b2553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:9d:13:8b:03:a1:5f:8c:1a:d3:36:2f:40:
34:ea:4f:34:91:b1:f0:fb:ba:aa:d3:14:7d:e8:a4:
9a:c3:a7:bb:9c:5f:75:99:9c:cf:0a:ef:21:7e:ac:
d4:41:33:1e:ab:91:0e:74:13:7f:05:d4:26:31:5a:
f2:e2:89:6b:62:c0:db:f6:74:47:de:61:01:3c:ff:
42:d4:a0:9a:e9:10:5b:ad:e5:3d:28:29:3b:ee:99:
85:ac:13:24:76:af:43:c8:b0:c7:da:6f:da:2b:1f:
76:66:4e:26:b4:00:fa:48:7b:92:f7:56:7b:e4:82:
33:de:fd:4f:0e:99:06:ac:18:e7:11:eb:64:f5:e2:
a1:e8:e0:86:34:61:62:a6:3c:4a:c9:4a:ef:2c:f5:
6c:04:e9:9d:5f:e7:b7:06:81:de:4f:ee:41:5c:25:
f6:56:46:0b:46:5b:0b:9e:94:ad:24:d0:06:8e:6f:
d9:6d:8d:cc:45:2b:8c:ee:d7:61:08:c6:2c:46:b5:
0f:cd:4d:15:04:9e:d1:7d:bf:6f:d5:b2:2b:cb:c8:
fa:39:41:ec:7d:37:bc:31:d8:cc:1d:5d:61:3d:14:
db:6d:ec:42:07:2e:36:c8:61:b1:8b:0e:81:61:56:
b5:a6:ce:99:7e:1c:6f:38:00:d5:9f:56:78:f9:31:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:E2:89:4B:C9:46:30:DA:59:9C:3F:76:78:F3:83:89:B2:55:3F
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:3d:68:a6:71:6a:f2:be:74:ec:16:3d:97:de:4c:ba:d7:
59:eb:c4:97:9f:c7:42:08:3a:e2:3c:1b:df:09:ac:84:68:c7:
12:ec:66:df:5b:ef:30:b3:41:cc:e1:02:6c:6d:69:49:37:e7:
49:7f:19:ee:58:fa:83:2b:f7:5c:1c:ba:30:cc:b6:e5:0d:94:
07:ee:b0:f3:04:e0:d4:5f:6d:15:e9:8f:9f:5d:b1:14:bf:d0:
ee:ce:a9:f1:77:4d:d7:68:1e:ae:00:58:e4:ea:e5:50:31:07:
23:94:89:1a:e9:40:8f:5d:9c:dc:64:f1:35:59:9a:ad:f6:9c:
c0:58:35:3b:89:f0:08:d0:7d:ca:ee:5e:f1:49:e3:42:9f:72:
5a:7c:03:cd:7c:3a:ec:5d:0c:af:3b:37:c5:ee:43:9e:8f:1d:
6f:60:51:17:d6:e7:59:ad:5d:96:83:0f:a3:ec:ef:51:ff:63:
23:9b:a6:79:e9:d7:ff:f7:e0:1a:93:7c:be:d3:87:77:69:b0:
ed:f5:c0:f2:4b:fa:2f:77:05:be:2e:e6:7f:b8:fd:6c:fc:f9:
09:6f:ad:cf:22:0a:78:c5:19:6e:8c:69:11:1f:25:50:d8:bf:
7b:57:93:57:b8:cf:85:e0:64:ef:03:99:7a:db:b5:c6:5c:77:
24:d8:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:25 2025 by rpki-client