Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: 6Ms11yu1dMoyX3H9fw71Bz3awIJH9iaveDK5WfRS+kM=
Subject key identifier: 1E:C8:73:F4:EE:2D:EF:40:3A:6C:15:AD:2E:DF:95:96:12:90:42:72
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01958C2973F224364920BFBC16FF9EDA76E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:21 +0000
Manifest this update: Wed 12 Mar 2025 21:01:21 +0000
Manifest next update: Thu 13 Mar 2025 21:01:21 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: qBNhCFM7DOK7jhT9o3fYyWMC5JnqVzeA+af3YOOLoIc=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:73:f2:24:36:49:20:bf:bc:16:ff:9e:da:76:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Mar 12 21:01:21 2025 GMT
Not After : Mar 13 21:01:21 2025 GMT
Subject: CN=1ec873f4ee2def403a6c15ad2edf959612904272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:92:2e:c4:c8:26:0b:a6:ed:ca:ef:86:09:
65:29:db:31:94:73:52:09:4a:01:42:26:99:2d:d5:
38:93:28:3c:ad:8c:05:61:72:ed:5d:fa:e6:ab:45:
cb:07:bc:14:d2:fe:db:5d:40:b2:1f:07:4a:af:e4:
6f:18:81:9c:fe:fb:26:0b:89:8a:aa:c2:bf:d6:d5:
5f:a6:0a:24:55:4e:54:9a:ee:ca:f7:02:f1:34:50:
88:7d:60:df:85:bd:26:94:8d:c9:13:5f:93:11:44:
0f:3b:03:99:f3:5c:fe:77:50:98:83:e4:2a:d9:05:
21:e6:54:f3:52:e6:dd:33:b2:1a:a5:7b:0d:1f:c8:
e6:3d:05:b5:f4:d2:b6:e9:26:eb:1a:b8:b6:15:c9:
ef:11:99:0d:2c:20:12:7c:74:8e:73:cd:90:cb:6c:
b0:36:fd:f5:7b:d0:4f:c9:63:e9:5f:2f:cd:6e:95:
d3:39:9f:09:8e:eb:e5:a0:2e:c6:f4:9c:8f:1f:6a:
9c:a8:cd:7e:07:57:a6:7e:95:a9:6e:50:b9:64:01:
13:bc:a6:1e:a3:14:79:76:41:51:3c:7b:e4:14:35:
c4:68:72:21:b1:f8:e0:a5:10:22:80:4b:24:e5:9a:
9d:41:f3:b3:02:fe:be:1d:ed:14:ab:d6:a6:39:d3:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C8:73:F4:EE:2D:EF:40:3A:6C:15:AD:2E:DF:95:96:12:90:42:72
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b6:79:72:fb:d9:8e:d8:98:e3:51:e8:9c:c3:9c:f2:5e:74:
dd:e1:22:c5:f3:0c:17:99:33:c0:0b:a4:06:b9:e2:22:b3:d0:
7a:2d:d8:6f:4a:f9:af:9a:25:71:2b:cf:71:c6:98:55:43:6a:
9b:35:6b:29:02:f0:4c:2c:23:0d:f4:06:24:1c:24:5e:58:48:
33:00:82:cf:c8:de:94:98:eb:a4:4f:df:6f:9f:cf:d6:cf:9d:
a4:c4:83:75:52:5e:36:d4:e2:63:9c:d5:8c:09:11:6a:67:f1:
57:14:e7:74:c4:d1:58:e0:74:77:a2:54:23:74:3c:ca:43:3e:
01:22:88:09:87:1a:2a:45:88:4c:92:be:51:d1:f3:11:e7:df:
52:d9:80:b7:f0:ec:6f:66:17:d2:f4:d8:10:d5:79:b7:fe:85:
e0:53:c1:17:69:84:8a:c0:03:a7:af:6e:9e:14:3b:5b:03:b9:
cd:3a:66:d5:d7:b5:19:64:75:4c:21:bc:6c:71:c6:78:ac:2c:
a9:52:80:02:7d:07:25:a8:f1:a0:04:af:ce:2e:54:ed:18:eb:
af:0e:18:08:17:11:0d:03:b9:a4:35:66:fa:8a:1d:ed:ad:42:
e5:d9:c7:1f:9e:35:f3:70:f7:b8:12:82:b9:89:a0:80:76:dc:
8e:70:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:30 2025 by rpki-client