Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: +YotfsD46QLFXqj0/vdKaCtoujcv7LroMWGNICbT1KM=
Subject key identifier: DC:34:2B:C1:81:FF:35:4B:5F:C6:32:39:C7:99:F5:0A:70:BD:D5:60
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01965312030A92CB2A73874A4C80466AD5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 12:00:11 +0000
Manifest this update: Sun 20 Apr 2025 12:00:11 +0000
Manifest next update: Mon 21 Apr 2025 12:00:11 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: IuxTh6Iv+jYEoVI0W5JPSPg5IrCfqrgspJrB2756DZs=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:03:0a:92:cb:2a:73:87:4a:4c:80:46:6a:d5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Apr 20 12:00:11 2025 GMT
Not After : Apr 21 12:00:11 2025 GMT
Subject: CN=dc342bc181ff354b5fc63239c799f50a70bdd560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:33:95:2d:07:1a:ef:ef:78:ea:1d:81:92:
d6:05:fc:68:49:19:f8:93:72:74:a8:d8:fb:80:4d:
39:c6:5f:b7:be:ea:f3:e8:7c:ef:b5:52:13:4b:38:
85:a3:84:03:ca:4c:df:58:c8:1c:88:dc:b6:f7:26:
d8:d0:50:02:19:62:5a:98:3d:c9:57:69:b8:cf:87:
b4:be:65:9e:b7:6c:ed:75:7e:63:ca:0f:37:84:75:
8e:2c:74:05:c0:68:93:76:8d:14:34:bd:7a:9c:53:
1a:2f:ef:e0:81:f3:d8:6b:3f:5d:79:85:8e:49:b8:
09:49:4f:b4:db:14:4d:8a:04:96:be:70:4b:31:59:
3e:33:a7:3a:8c:98:36:eb:e4:45:e4:ef:c1:d0:ce:
19:4a:95:99:47:07:9d:97:b6:7f:36:95:a3:be:44:
d4:91:27:b3:a8:10:ae:74:c6:1d:9c:95:23:c1:e5:
0b:e2:d7:1b:72:d5:72:ab:32:c9:b5:f6:37:b4:dc:
52:e5:e8:68:bc:8c:e9:59:b8:cf:8b:a7:d9:b7:76:
82:7f:e2:c8:39:c6:7a:6d:ad:e2:2b:f3:8e:7d:f2:
75:3b:43:d9:32:61:44:e9:42:57:65:ed:02:7a:f1:
21:be:e9:79:46:76:09:a8:7e:9b:9f:54:ab:19:fa:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:2B:C1:81:FF:35:4B:5F:C6:32:39:C7:99:F5:0A:70:BD:D5:60
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:37:5f:61:a8:63:7e:45:7c:a1:94:0d:b4:8b:b6:d3:6f:11:
ca:d0:80:f9:6e:db:30:44:7c:64:31:12:c2:98:2a:df:90:7a:
92:3d:85:ba:3c:39:c4:cd:04:06:b8:03:5d:be:c4:2f:7f:89:
e5:ad:51:51:2f:c8:7e:0e:68:49:55:29:a6:16:ba:17:1f:e6:
f1:4a:ed:fd:58:8d:89:03:ee:3d:bb:8e:fe:b0:94:27:e9:ab:
87:95:fd:ee:4f:88:12:d1:84:e7:a0:f0:d2:32:ce:78:04:05:
f2:a7:e7:68:38:10:c6:a7:ff:f5:33:0c:4c:98:a8:6f:8f:ee:
a7:64:14:ce:40:64:fa:0a:63:8e:39:bc:39:28:b3:e3:94:80:
ac:b6:6b:16:be:25:76:f9:7f:41:3d:7a:98:e7:8a:53:d4:ee:
d7:83:0b:71:35:f2:76:3f:af:d9:2d:bb:5b:9b:7f:27:fc:b0:
8b:49:ab:b0:fa:6e:4c:8f:1c:14:04:94:b9:46:6b:80:22:7b:
f0:18:e3:5d:08:5c:10:7f:a7:95:0e:79:c1:9e:90:98:a4:8e:
97:f2:b8:65:df:06:51:17:ee:d6:eb:37:cf:e1:7f:61:6c:0d:
51:32:06:18:6b:66:f2:24:2a:4d:31:a9:08:0b:44:0f:2f:29:
cd:25:ec:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:13 2025 by rpki-client