Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: oZZQNVmvmfKmOW8VGbTbsLtNgKipDVt9IBkdl4iYQ28=
Subject key identifier: 7F:EC:B6:33:14:2E:88:ED:62:42:A0:2D:2A:AE:A7:C4:D5:C2:EF:33
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01960F7B3873B330DFDF553C5D9F2D98566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 09:00:55 +0000
Manifest this update: Mon 07 Apr 2025 09:00:55 +0000
Manifest next update: Tue 08 Apr 2025 09:00:55 +0000
Files and hashes: 1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: pqcuk4LJKyrapuyPbusuBWHg/2G70mufOt1kfhCwim0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:38:73:b3:30:df:df:55:3c:5d:9f:2d:98:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Apr 7 09:00:55 2025 GMT
Not After : Apr 8 09:00:55 2025 GMT
Subject: CN=7fecb633142e88ed6242a02d2aaea7c4d5c2ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:49:9a:3d:08:1b:00:82:20:2f:fa:d6:74:
6b:22:e8:2d:54:43:6b:b0:a6:1a:c7:32:4d:2b:01:
2a:12:d4:b7:05:6d:e1:b4:81:35:71:27:18:07:0b:
33:07:e5:a2:8d:66:f5:b7:ab:85:e3:f8:be:73:e6:
23:ac:ed:3d:ed:04:4a:02:6f:87:1e:b3:6a:3d:fa:
f9:ad:b4:fa:82:5c:4f:c2:ad:f2:e8:f4:19:37:ba:
a0:d9:45:ea:da:64:98:70:23:d2:23:ee:4d:4f:30:
d5:08:58:a4:74:dd:b2:38:69:98:67:63:8a:c7:21:
50:9c:69:e7:0b:1e:90:9c:74:f4:11:a2:2b:96:f3:
bb:91:9c:b1:4c:52:56:38:63:8a:bb:18:cd:69:68:
a4:88:fc:dd:dc:73:7d:0a:b6:50:86:89:ad:e7:11:
b8:cb:e4:1a:d5:2b:6d:61:0d:40:88:f1:50:80:eb:
23:22:63:b6:cb:d9:bf:9f:fd:ec:f7:b3:d2:e4:25:
a2:ce:21:3f:ac:93:d9:d7:d8:23:4d:bb:f6:5f:0e:
4c:d8:32:4e:50:63:7d:28:49:0e:db:60:c0:31:44:
60:72:d3:99:11:dd:84:56:9c:5b:91:e6:0c:2f:c8:
41:50:b6:df:2a:46:b2:32:35:df:17:ea:81:84:4d:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:B6:33:14:2E:88:ED:62:42:A0:2D:2A:AE:A7:C4:D5:C2:EF:33
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:89:cd:85:5e:55:ef:32:e5:9e:f4:bc:8b:9c:96:ae:23:fa:
e4:fc:8c:e3:29:fb:f0:7b:4f:19:41:cd:68:c6:c3:a3:c1:dc:
79:f4:bf:3e:59:73:3a:4c:d1:0d:61:b3:3c:c5:b0:e8:2f:08:
1c:02:78:07:23:61:e4:8d:b1:0b:17:84:87:58:a7:9b:f2:f9:
e3:97:f4:5e:b8:dc:3b:5a:b1:14:f8:7a:a2:7f:15:0b:fc:36:
9e:5d:89:e2:c2:29:49:c8:53:7f:02:ca:93:c7:b8:55:5f:02:
9c:92:48:84:34:d7:84:63:83:d5:31:83:08:4d:10:ca:ea:49:
5b:66:77:30:16:55:7b:a4:77:f5:0f:45:1b:29:93:d9:d5:e6:
f2:fd:fe:0e:b7:d5:90:c1:b3:27:22:1e:6f:02:78:cc:cc:4a:
8c:db:1b:27:88:ff:86:3c:4d:8a:38:7a:b3:e6:50:ce:fa:fa:
89:2e:ed:4a:5d:6c:25:e2:6c:04:5e:ce:88:4c:c0:73:34:71:
98:e2:65:b5:8e:8b:31:00:18:9c:0f:e2:b6:ef:42:83:8c:91:
61:4b:6c:c8:61:4a:1c:74:20:ea:26:ee:6e:cb:b4:3c:63:49:
4e:2e:8a:9e:b0:e3:46:8d:f7:e1:1b:fe:e9:57:a3:46:18:6c:
ab:7d:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:23:54 2025 by rpki-client