Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: jGvTtRIe8s5sLWkcfdecOiE9pmB5a2c0sX05udJS/SM=
Subject key identifier: 2A:94:23:2B:7C:BF:22:52:07:F1:42:44:4D:E7:57:9E:7A:82:B3:FF
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 01964F6D87C913BFD913B58D97BED2260EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0D97
Signing time: Sat 19 Apr 2025 19:01:40 +0000
Manifest this update: Sat 19 Apr 2025 19:01:40 +0000
Manifest next update: Sun 20 Apr 2025 19:01:40 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: HdLmsqIFDZY2utyOzDGJp2AuE4pNjLriKD7Gi3jmx24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:87:c9:13:bf:d9:13:b5:8d:97:be:d2:26:0e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Apr 19 19:01:40 2025 GMT
Not After : Apr 20 19:01:40 2025 GMT
Subject: CN=2a94232b7cbf225207f142444de7579e7a82b3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:b2:45:3b:f5:43:bb:99:e1:89:c2:78:59:
80:c5:d1:ae:70:fe:a2:f1:12:9c:b8:50:69:2b:36:
34:f8:1a:ab:ba:56:ab:f7:32:af:7b:d4:6e:cc:17:
41:7e:0f:8d:7a:e4:1d:30:e4:4e:8b:e9:06:97:07:
c3:ed:2d:8a:46:be:a0:0e:dd:28:8c:04:00:6e:11:
4a:99:ce:14:ca:f0:56:6e:25:f5:aa:9e:79:b2:5c:
a0:cc:ec:b5:a9:ab:4d:79:b8:95:8b:b5:09:71:a7:
3e:97:7a:48:e1:a0:65:fb:aa:06:ba:7e:bb:b0:03:
53:3b:5b:e7:ed:7e:d2:10:69:87:c6:e1:bd:0d:67:
de:5f:f6:66:f0:87:5f:a3:77:61:f3:25:c8:e5:86:
a5:29:d9:95:0c:f7:e4:21:67:78:88:d3:5d:c5:8a:
ae:ad:a6:61:4d:71:b0:fa:43:ef:1d:18:9f:52:5c:
0f:b1:76:68:15:36:56:db:3d:0b:84:e0:05:4d:cf:
f7:23:19:0a:91:c2:81:bb:88:f7:77:cf:78:83:cd:
f2:47:7c:b3:ca:11:77:b2:fb:84:c0:26:95:60:a6:
cb:23:a4:06:d5:cf:03:be:9a:bd:55:83:ca:3d:ef:
53:c1:4c:98:24:06:16:77:9c:3a:98:97:c3:64:2b:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:23:2B:7C:BF:22:52:07:F1:42:44:4D:E7:57:9E:7A:82:B3:FF
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:c7:e2:1b:fe:4f:e4:c9:40:5a:e4:15:06:c3:e0:23:25:
39:d3:3a:7a:48:1c:bf:3a:66:63:e1:83:f1:c8:49:ca:2c:59:
f6:1a:5c:7d:65:4e:36:d8:a2:64:14:d4:9a:b0:d3:1f:42:4d:
f0:d9:47:3b:a6:e7:05:20:92:ec:bd:b0:dd:1e:b2:55:c9:fa:
4d:da:9b:21:e9:0f:82:ee:43:97:d5:24:b9:93:64:14:52:fa:
24:ed:48:b9:4e:30:4b:f2:79:38:3f:08:4c:37:1d:e1:71:ce:
e4:af:e1:01:40:a0:df:1a:e4:9d:6a:5b:ee:bb:71:ee:3b:03:
73:cd:ce:9f:1b:72:9e:e2:ed:ba:13:10:30:45:cd:81:dd:b5:
27:72:cf:43:de:34:e3:52:13:2c:4e:0a:fc:4d:1a:06:6e:dd:
a4:9b:62:5c:c0:b9:ce:af:d3:2e:d5:75:1b:c0:75:b7:81:24:
05:26:61:01:ad:47:1f:01:96:71:de:7d:a9:0d:a0:49:5a:2d:
cb:d1:e1:6c:ac:b9:e4:42:a2:c8:4f:be:5e:97:1c:d8:3d:1b:
f2:63:ae:49:7e:58:69:d1:7c:df:19:37:a3:41:1b:f3:2f:7e:
e0:f5:2e:c3:67:51:d6:39:83:2b:2f:2f:18:2a:31:c5:3f:a5:
93:e6:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:46 2025 by rpki-client