Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: 1tXf3MrSSPtj4zGaXPmL/XtwPDbWNYlmmFjXc7Ak4ZM=
Subject key identifier: 12:F9:30:6F:C7:19:3D:80:D6:19:F6:1A:51:63:73:3C:FB:6E:11:FB
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 019659145E739F7EAB3A3ACDB4457A8CAC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 16:00:29 +0000
Manifest this update: Mon 21 Apr 2025 16:00:29 +0000
Manifest next update: Tue 22 Apr 2025 16:00:29 +0000
Files and hashes: 1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: jBS9PCHuxr0IP3t/ITXGoUWRVJ/wvG/WvI/8vlcuaks=)
2: stcblJCloKrq21i-3tGdy209Cks.roa (hash: sV8E479KWjrK8MD/w/N9wPnQZDPeZCzIYkOl03vwH+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:5e:73:9f:7e:ab:3a:3a:cd:b4:45:7a:8c:ac:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Apr 21 16:00:29 2025 GMT
Not After : Apr 22 16:00:29 2025 GMT
Subject: CN=12f9306fc7193d80d619f61a5163733cfb6e11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:a5:27:0f:86:ed:a6:47:e4:90:de:8c:d0:
aa:97:1d:74:51:ce:c6:d6:09:06:8b:81:4a:ce:82:
5d:d7:af:90:80:87:c0:d9:f6:69:6a:2b:af:87:0d:
a9:c1:da:64:3a:22:4d:7f:28:9e:d5:11:2a:d5:d6:
f5:d2:e8:78:bc:2b:cb:bd:f3:90:34:b2:a6:b8:79:
52:32:0b:c1:e8:b9:d0:2c:77:c6:eb:31:59:70:af:
99:0e:72:6e:2b:db:a6:15:3c:9e:5f:ae:cb:f9:c6:
b9:2a:0f:98:b0:c6:86:82:ff:a0:71:b9:27:57:17:
4c:7b:cb:de:65:e2:35:1f:48:53:1d:2e:6e:97:20:
11:2e:b3:3f:d4:05:67:da:d1:5f:3f:7a:02:27:37:
74:4e:3d:b3:91:63:76:7b:1e:02:b3:79:11:90:6a:
3d:3d:87:9c:7e:09:b5:38:15:7a:29:39:b7:ee:4f:
f2:2b:aa:84:d1:53:c0:6d:a2:91:a6:bf:f7:eb:20:
85:e1:77:4b:57:1d:cc:20:0c:0b:4d:8d:ec:5b:33:
5b:cf:11:6b:8c:0d:05:6e:5d:3d:47:0a:f0:24:0e:
ae:c8:7f:fd:6b:3c:14:a3:5a:47:0d:67:1f:67:ed:
bb:08:cf:4a:19:ee:d9:7a:4c:c2:5a:2e:a6:d0:31:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:30:6F:C7:19:3D:80:D6:19:F6:1A:51:63:73:3C:FB:6E:11:FB
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2f:d8:3e:e2:95:23:51:f2:c6:7e:c1:a9:34:84:75:08:4b:
56:ea:57:a3:0f:cb:73:14:68:56:de:ed:f7:4d:80:7c:72:de:
71:83:17:57:41:73:24:7a:38:7b:61:c0:07:43:ce:35:ed:d4:
b1:82:60:7d:57:4d:0f:96:78:82:b5:64:49:b3:2e:ea:c1:d1:
5c:bd:72:3d:0a:72:1e:2f:89:3a:4c:0a:40:80:26:72:b4:b3:
77:6b:52:44:1d:6c:bc:3b:d0:eb:ad:68:73:38:57:8e:6a:33:
1c:7f:8b:e2:fd:7b:b8:4b:c2:b1:1b:cf:be:f9:56:01:a8:2d:
5a:28:95:8d:3c:4b:15:c0:d7:e7:b3:68:d6:48:72:9e:19:90:
28:f5:2e:64:90:23:2a:c9:26:7e:c0:02:2d:6e:4a:8a:73:18:
2e:97:4f:ab:b9:a4:ed:9d:c6:62:2f:9e:61:e8:bb:e0:68:56:
85:06:9d:c8:1c:ee:53:fc:a9:f1:da:2a:be:e8:28:b2:f7:57:
c8:df:87:15:ae:33:cc:34:54:72:6c:70:40:0a:80:58:d7:e1:
24:25:cf:81:72:07:c9:43:4f:e0:02:cf:d8:dc:6d:7d:71:6d:
d9:23:a5:a8:f9:40:f6:a8:f8:20:aa:d6:e0:e3:77:9d:52:94:
68:57:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:39 2025 by rpki-client