Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: p/KXlKk5Sux9yuo25MfAXkER/KKm+ADwbn/ksB25I4Y=
Subject key identifier: FF:18:F8:09:01:35:B0:A7:5E:F1:97:37:4C:E9:8B:FC:6B:25:8F:8F
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019650ECB6C7796DD3093AD7940690A6E4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 03C4
Signing time: Sun 20 Apr 2025 02:00:12 +0000
Manifest this update: Sun 20 Apr 2025 02:00:12 +0000
Manifest next update: Mon 21 Apr 2025 02:00:12 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: 18kAaaTVFPlurbXg5Ei+lrjg1ZUTXPoG6hm9cheDnJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ec:b6:c7:79:6d:d3:09:3a:d7:94:06:90:a6:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Apr 20 02:00:12 2025 GMT
Not After : Apr 21 02:00:12 2025 GMT
Subject: CN=ff18f8090135b0a75ef197374ce98bfc6b258f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:7f:a1:29:47:55:9a:c2:3a:c7:8f:f3:9a:
21:02:21:b7:49:92:31:6f:11:20:c6:76:fa:8f:df:
40:6a:c5:a3:aa:df:a5:57:96:47:dc:3d:55:96:7e:
d2:69:72:05:1c:89:27:49:aa:9d:db:dd:7f:02:62:
43:60:b8:a0:cf:47:0f:1d:d6:70:81:81:cd:f5:d9:
cb:f8:6d:cd:d9:ea:60:a3:ad:f0:18:a6:68:b4:f5:
3e:81:8a:e5:b2:0f:03:d2:86:de:b5:74:e9:cf:0f:
fc:66:a4:e0:2a:3d:d0:2a:f1:3a:6e:71:62:85:64:
79:a6:c3:22:bb:3b:71:74:80:1e:f1:06:b5:11:fb:
62:59:71:28:ca:00:c6:10:10:0b:97:e2:3f:a8:b5:
2a:43:9c:a7:67:d0:78:62:8c:39:f1:0a:ae:49:9b:
b6:ca:90:0d:3b:fc:f8:1f:08:e1:51:da:c3:de:f8:
52:f7:45:40:23:98:29:5f:de:3e:60:5d:c2:c7:f6:
ad:b7:2a:1e:06:63:32:19:2c:69:54:70:ce:0b:88:
83:53:f1:52:a8:cb:f7:4f:45:0c:6d:1b:bd:bb:6e:
60:3e:01:79:87:4b:ff:09:33:10:d1:e7:a5:09:62:
b0:79:3e:3c:06:62:11:90:91:f3:93:cd:f2:79:9f:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:F8:09:01:35:B0:A7:5E:F1:97:37:4C:E9:8B:FC:6B:25:8F:8F
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0f:24:18:d9:74:54:d9:53:12:3b:60:f8:31:a0:14:19:de:
b3:be:e5:14:26:6e:28:b0:64:e5:04:5f:f7:ce:c1:17:74:c9:
33:41:8c:79:47:ef:77:06:e1:8f:68:bc:ca:a0:d1:eb:d8:11:
c3:da:13:89:45:5b:01:34:b1:e3:c7:5f:3a:bb:ef:24:90:f6:
21:a1:b0:d9:25:dc:8d:6a:1e:88:0b:45:70:6b:b0:e3:bd:fd:
33:5f:e2:38:2d:62:85:35:c1:59:50:af:12:c9:a6:43:7a:ed:
80:b3:3a:67:a5:d3:25:65:ff:82:fe:02:19:23:71:a5:7a:45:
33:c2:33:bf:5a:95:50:2a:7e:7d:d9:e5:9b:e7:c0:2b:cb:dd:
f3:24:96:18:15:ae:ea:01:46:8a:39:a4:32:28:08:46:4e:82:
3f:a3:b3:4c:b2:0e:58:13:e2:78:6b:98:a7:6d:da:8e:f9:59:
ce:ef:c7:79:17:b0:01:fa:c4:02:28:a2:0c:c3:84:ee:ae:64:
1c:35:c4:d0:ae:6b:cd:82:9e:6f:2b:d0:60:7a:6b:bf:11:67:
b6:c4:78:74:3e:dd:ac:e8:6d:24:b9:6e:9b:2a:e1:37:e1:3e:
5f:f0:d5:3f:e4:75:71:38:a9:e0:3f:e5:35:51:1f:d6:d6:40:
1f:f5:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:28:57 2025 by rpki-client