Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: vyDz3ViZ/SXdVGk9IiakD1GbsR41G9C9zOEO/+KbvPk=
Subject key identifier: 07:05:E2:AE:E7:C4:42:2C:EE:7F:CF:5D:80:AA:8D:38:6C:A4:43:66
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 019643D68316EB50FB5E8DB22A5E7ECF006F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 0EF0
Signing time: Thu 17 Apr 2025 13:00:53 +0000
Manifest this update: Thu 17 Apr 2025 13:00:53 +0000
Manifest next update: Fri 18 Apr 2025 13:00:53 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: ZPxfCnFub8bXo+1izC5h6K6RK4DY9ReLvAAXK5sbZeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:83:16:eb:50:fb:5e:8d:b2:2a:5e:7e:cf:00:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Apr 17 13:00:53 2025 GMT
Not After : Apr 18 13:00:53 2025 GMT
Subject: CN=0705e2aee7c4422cee7fcf5d80aa8d386ca44366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:6f:06:83:d9:17:3d:eb:03:c1:8f:8b:af:
19:00:1f:7e:98:0b:b5:d3:1f:40:a2:8e:e1:0d:05:
b2:3d:27:20:6a:34:af:cc:5b:a7:cf:63:2b:e4:b2:
6c:bd:43:ff:3a:6d:63:7d:aa:f0:22:40:0e:c6:72:
c4:67:56:b5:40:d6:2c:80:41:11:37:46:a5:5b:60:
db:48:30:30:dc:29:5a:6f:7c:c4:40:8d:87:35:3a:
72:b9:26:73:49:92:ac:08:9e:ee:8e:45:b9:f4:37:
57:b4:8d:3a:62:25:e9:f2:e0:78:cb:4e:49:75:eb:
71:88:73:c7:46:6e:b5:ac:5b:60:72:b5:a8:5c:c4:
6d:5d:d2:d9:ba:50:1b:83:a3:24:24:e0:de:7f:0d:
46:64:20:bb:9b:8d:42:ca:cc:03:39:97:f5:a6:e5:
86:d9:8c:e3:e3:3e:47:3d:69:54:09:98:14:07:81:
9c:f9:1d:93:59:e5:b3:8a:2c:e5:86:01:d3:0d:1c:
21:ab:a1:e5:9a:41:fe:d6:2b:1f:99:fa:b3:a8:a9:
a0:66:63:99:6c:d1:b4:5c:43:92:8b:9e:d1:3a:0f:
6f:74:c8:eb:62:6e:1b:e9:27:04:6b:25:94:3e:4a:
9b:d3:00:fd:b5:c3:4c:27:c8:62:c4:a7:80:67:75:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:E2:AE:E7:C4:42:2C:EE:7F:CF:5D:80:AA:8D:38:6C:A4:43:66
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:39:67:a6:5d:40:33:48:29:d8:17:19:81:7e:7e:a0:07:
a3:ad:46:31:4d:aa:66:4d:51:cc:90:e3:13:b6:d3:1d:07:89:
ef:03:0c:a8:2b:e9:d8:a8:bc:9f:2c:ce:96:87:41:92:f1:6c:
f7:45:e5:a9:e4:28:94:1d:34:b0:67:49:0d:0e:62:17:49:18:
35:a2:ef:a7:12:b3:af:65:f0:49:82:8c:94:3c:00:b9:6a:cf:
7d:36:e8:1d:69:2e:e7:7f:86:4f:40:11:27:12:f1:dd:7e:d8:
61:bf:79:a1:51:25:bf:7a:4b:9a:0c:15:6f:34:5b:bd:c1:98:
98:f1:87:80:e3:80:94:a6:18:7d:3e:07:c1:b7:a4:56:b3:49:
e4:61:49:69:4f:71:75:8d:d8:cd:0b:b9:dc:26:8d:c8:80:be:
a7:9b:c6:2a:b7:b0:df:94:3a:eb:67:34:b5:ad:c6:70:37:41:
96:1a:02:d7:52:2b:03:96:6e:3e:5f:14:51:1c:31:b6:56:4e:
9a:95:5b:3f:7e:a5:80:00:72:37:48:bc:84:e4:bf:82:10:18:
87:03:37:e4:80:9e:d0:35:b5:39:e7:f9:19:fe:65:32:ba:44:
b6:e3:9b:f4:1a:b2:d1:4c:3b:13:9d:a4:f2:3f:00:0a:2f:ca:
31:ad:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:20 2025 by rpki-client