Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: 4sa2gK9FSybuUOjJYM+MystCuapkvedrd3+978Ed3R4=
Subject key identifier: A8:BE:E1:A9:24:5C:D8:F5:F9:4C:C1:65:55:E7:52:A5:08:BF:C7:B8
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 01963F54E86B086C49C5FFF630C26B53FAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 08DB
Signing time: Wed 16 Apr 2025 16:00:51 +0000
Manifest this update: Wed 16 Apr 2025 16:00:51 +0000
Manifest next update: Thu 17 Apr 2025 16:00:51 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: 5PySa480agjFpYAUJOmuMOnddWkphi3r+zusyPM023Y=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:e8:6b:08:6c:49:c5:ff:f6:30:c2:6b:53:fa:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Apr 16 16:00:51 2025 GMT
Not After : Apr 17 16:00:51 2025 GMT
Subject: CN=a8bee1a9245cd8f5f94cc16555e752a508bfc7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:cc:d1:a7:13:a1:47:00:5e:45:0c:7b:ca:
39:b9:e0:fb:55:75:e5:8e:a5:c6:73:7e:e3:c6:64:
6d:f1:26:fb:18:a9:ef:28:2c:51:be:2d:cd:c1:c2:
f3:07:6f:3b:a6:dd:9c:50:f5:35:21:7a:ac:cc:d7:
21:ed:56:c1:26:e2:48:10:39:2e:86:53:0b:b0:82:
11:48:ff:79:65:10:af:ac:4f:1f:68:e9:51:1f:42:
3d:96:d0:e7:61:d2:f7:74:a8:00:0b:bf:40:20:2b:
0e:ef:3f:3e:12:a3:34:37:4b:3b:9e:da:26:40:a4:
be:e5:a9:ee:55:b8:48:c7:dc:1b:d4:0b:f4:28:1e:
58:db:75:b9:b3:8e:43:63:2d:eb:be:f7:2f:32:65:
e8:2c:ba:09:18:99:c7:09:7e:78:23:f2:bc:d9:46:
1e:fa:f9:6d:8b:5c:d2:82:fa:fd:73:bd:4e:ab:2a:
90:d6:5a:ab:70:d3:ba:95:b6:b4:25:c1:96:9b:28:
32:00:ee:c7:5c:2d:a1:6d:0f:f3:ea:7d:d2:0a:ff:
62:23:76:c2:8b:52:37:3d:c7:16:c3:59:a8:09:11:
f1:59:3e:f4:24:74:31:42:18:38:8f:4d:4b:0e:94:
ab:cb:fd:eb:61:c4:45:af:4d:19:9e:67:ce:88:d4:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:E1:A9:24:5C:D8:F5:F9:4C:C1:65:55:E7:52:A5:08:BF:C7:B8
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c6:ec:cb:3f:b5:73:28:83:36:a3:19:75:c8:3f:cf:5d:f3:
bb:af:0d:1d:34:71:d5:c2:a8:58:7c:22:f6:59:c6:fe:ca:65:
43:26:22:92:41:8f:7a:0b:f5:b4:2d:19:87:19:38:e4:ae:be:
2a:48:f4:7b:bb:3e:5b:4a:2e:58:1f:3b:68:f0:90:d1:88:cc:
18:2e:20:a2:db:6f:50:34:ac:1e:04:1e:e7:d5:98:e7:c1:77:
a4:89:b5:d6:06:bc:2c:e0:29:33:80:92:71:fd:cb:8f:92:90:
e7:a3:e7:26:1a:eb:28:c6:b7:79:fb:2e:90:1f:33:5f:01:37:
ea:80:2b:d0:40:c9:5a:7f:99:9e:90:10:f1:42:79:a4:b0:7c:
b3:74:51:a0:04:c5:7a:dc:e1:46:7b:37:82:fb:95:86:27:20:
c1:69:fa:bd:09:3e:53:fb:a8:8c:04:37:3b:e6:a3:ed:55:d3:
bb:80:fe:44:e6:64:f3:d3:bf:84:d0:f5:0e:ee:fc:99:03:45:
f5:22:57:a9:7e:11:0c:dc:ee:92:5a:00:d9:a5:aa:03:81:3e:
45:4e:f2:8a:9a:04:7e:1d:0c:03:6c:b9:e9:6f:8a:09:b1:d2:
f3:a5:46:1b:44:3d:6e:b2:94:74:20:a8:06:fb:b4:d1:1d:bb:
26:84:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:31:53 2025 by rpki-client