Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: P1y/Lsin9wGiqY4iNCZbZSJtPFVfZULniNz7k6RPakY=
Subject key identifier: 83:74:5A:97:38:CB:63:3A:7C:8C:06:48:10:22:5F:59:DB:48:E2:BA
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01964556B7D4CDA5CDEA5091E6D579DD3E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 20:00:33 +0000
Manifest this update: Thu 17 Apr 2025 20:00:33 +0000
Manifest next update: Fri 18 Apr 2025 20:00:33 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: Ujb83ZTK76q9GIHqC+iNGaooGlZQZt3UTEij/dZI3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:b7:d4:cd:a5:cd:ea:50:91:e6:d5:79:dd:3e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Apr 17 20:00:33 2025 GMT
Not After : Apr 18 20:00:33 2025 GMT
Subject: CN=83745a9738cb633a7c8c064810225f59db48e2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:80:7d:97:9b:8a:a6:1f:cb:a4:c1:9e:c6:
f0:04:d6:cf:b0:78:bd:36:79:58:9c:ac:e9:e9:2c:
2b:c9:06:23:57:a6:43:1d:8a:1b:18:6b:ac:23:2a:
38:e5:41:56:27:8c:e0:21:50:92:29:b5:c3:f1:0b:
3e:0c:4e:28:6d:08:4e:72:90:7e:5e:72:87:f1:47:
0c:70:cb:cd:40:fb:9d:37:b5:89:5f:da:a3:ab:90:
a7:4e:55:18:a7:6d:ef:57:e4:e9:99:28:31:6d:9e:
d1:ea:5e:9b:81:b2:7c:e3:27:e0:41:0c:eb:53:f9:
08:f6:1a:33:43:af:f6:d0:fc:02:aa:4a:88:c9:75:
10:62:9b:8c:84:0a:c7:23:b2:0d:c5:7c:1a:61:2f:
7c:b9:5b:7d:04:69:0f:d1:4b:18:58:99:7c:54:7f:
01:88:b9:48:bc:8b:ad:d8:c8:5d:da:db:b8:74:e6:
89:a5:3d:35:66:cd:b3:6e:c8:97:d8:cc:3d:77:12:
2f:16:e6:52:f8:ac:1a:d6:71:64:00:bd:9f:c0:dd:
47:fe:3b:37:c0:25:2b:ba:98:c4:ac:f7:59:48:4e:
4b:26:f1:18:43:d4:22:4f:f9:07:27:91:88:99:71:
ca:29:5b:36:84:1a:09:5c:43:5f:1a:f7:d5:bb:7a:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:5A:97:38:CB:63:3A:7C:8C:06:48:10:22:5F:59:DB:48:E2:BA
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3d:7f:7a:a9:86:56:08:3d:86:ab:8d:5e:d1:dd:b0:e7:e6:
af:7c:94:83:75:7d:9d:ab:d1:d3:e1:d2:9b:42:c9:f4:c3:0f:
f5:c0:76:5c:a1:7c:cf:84:45:47:9f:4e:89:08:5b:b7:3e:26:
6c:8f:13:6c:ff:bb:e3:a4:22:5b:b0:93:68:f9:ee:d1:ba:b8:
a7:3d:9a:b0:6f:c1:5d:cd:4f:2b:b6:3c:b1:f2:10:ee:a5:b6:
a0:a7:a0:9a:2f:b2:03:25:d4:13:44:59:ee:3b:9a:aa:28:eb:
df:68:26:5e:b6:d3:fa:f0:aa:12:41:bb:b2:e7:14:48:a1:0e:
bb:b7:dd:0e:f0:5f:02:38:5c:c6:a1:bb:f2:a8:aa:89:7f:e4:
5d:20:17:27:a6:3a:16:d5:97:f8:0a:5b:9c:52:e4:5c:42:d3:
a4:1b:c9:9e:e4:49:e4:4c:90:15:0c:72:74:d7:35:8d:7a:99:
ae:e6:73:eb:03:3d:e1:17:a2:d6:0e:b5:54:04:66:e2:7b:b4:
59:18:5e:5b:83:14:32:14:25:35:9f:03:b4:6f:8d:15:6a:60:
39:62:e7:4e:21:b0:0a:d4:97:52:51:32:53:7c:45:fc:1e:62:
20:ae:3c:45:ba:73:b8:3f:e3:b2:7f:ad:04:69:19:45:65:14:
ce:d0:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:35:05 2025 by rpki-client