Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
File: XU_MyZTpQTHcEb_JXGRYWzReAfU.mft (raw, json)
Hash identifier: PdhApSplYsvj1JKOtP4zuvkLvUAL44EcBhY9exCCh8s=
Subject key identifier: E3:0B:A4:29:A6:67:AD:D6:58:62:7E:DE:08:10:1B:79:D1:88:14:8C
Authority key identifier: 5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
Certificate issuer: /CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Certificate serial: 01963E796D06D792E5CB8CAFAA7E435FB447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 12:01:07 +0000
Manifest this update: Wed 16 Apr 2025 12:01:07 +0000
Manifest next update: Thu 17 Apr 2025 12:01:07 +0000
Files and hashes: 1: 1-QQKoKkBsfVHiC7zwZN32LAwqdI.roa (hash: su6NuoB2BV5792mo+Gkr7XFZc0UAJCglrf+FguhXwQA=)
2: 2N-7q5TUgtNJjxm0U-P63yRLHRY.roa (hash: G9pkPwLHZYXpkwsIscu0rjXE3l/R0/mrWBJWr5iNXtU=)
3: XU_MyZTpQTHcEb_JXGRYWzReAfU.crl (hash: GxuY0rt7g22xhl8Yv1r/GEBcGFed7eZecALyScckBMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:6d:06:d7:92:e5:cb:8c:af:aa:7e:43:5f:b4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Validity
Not Before: Apr 16 12:01:07 2025 GMT
Not After : Apr 17 12:01:07 2025 GMT
Subject: CN=e30ba429a667add658627ede08101b79d188148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:b4:e1:dc:a9:4a:6c:01:d8:f6:e4:1e:04:
fc:4d:5b:18:73:48:e7:cb:98:c8:dd:f3:c8:93:78:
78:68:e0:d9:f2:af:32:62:72:c4:bf:e9:4d:9e:a7:
ce:f0:83:59:93:1c:00:b9:9c:ea:15:02:8f:04:79:
16:52:67:c1:72:8e:e3:ea:16:13:1d:93:8a:a3:b2:
9e:2a:d9:bb:be:2e:18:cb:78:14:72:ce:8b:ef:90:
01:a1:41:0c:06:48:d5:f7:c8:d3:be:14:78:bd:d8:
e3:bc:97:5d:ac:b8:c6:8f:85:36:63:5a:02:84:a3:
13:60:6e:23:94:34:02:71:52:b5:a2:7e:68:8d:90:
57:bb:68:d0:f5:73:ab:a8:e4:85:52:89:4a:80:ad:
3a:4a:0c:ce:00:7b:ae:9a:58:a7:cd:f3:fd:c6:ca:
9c:88:19:7f:d6:1a:c6:26:37:3d:d6:56:f5:96:21:
3b:90:ec:e4:0e:2f:a8:f6:86:50:52:0d:ae:1a:5f:
1c:74:7b:a7:ab:c9:d8:a7:47:fa:22:e1:d9:b1:28:
3c:18:1e:34:44:de:8f:92:2e:b9:a7:c9:70:94:02:
31:a6:5a:60:97:67:70:60:02:dc:31:1d:fc:20:54:
f4:3e:46:b5:9b:4f:50:29:e3:99:ed:c4:3c:e8:92:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:A4:29:A6:67:AD:D6:58:62:7E:DE:08:10:1B:79:D1:88:14:8C
X509v3 Authority Key Identifier:
keyid:5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:9b:4c:03:f5:73:3b:83:de:6c:12:03:2e:c3:68:35:b5:
dc:6e:3e:c0:9f:04:7b:e5:f3:0e:f5:c6:f6:ea:5e:3b:1f:47:
30:08:37:94:2b:10:77:b8:59:d1:0f:88:0e:b6:0b:9c:61:ae:
86:8b:2d:cc:3e:a9:35:17:aa:36:f4:da:ae:7d:1f:bc:bb:a9:
3f:9b:95:c4:0b:5d:86:8e:09:1f:da:39:ab:21:0a:1a:1b:4c:
ea:12:91:e0:cc:a1:7f:6e:a5:11:14:5c:a8:91:99:8f:6b:4d:
29:2c:d6:1d:d1:35:05:6e:08:7d:09:3c:41:38:8d:38:bc:ed:
17:f3:30:f7:ea:89:08:8a:2b:2a:05:5d:e7:15:69:10:fb:20:
8f:cb:f6:7d:f5:f5:01:ba:13:df:55:64:80:d6:c5:a7:d4:44:
ff:c9:26:ee:dd:41:8c:76:27:cb:36:c0:8b:85:c9:80:89:1a:
cf:97:9c:b0:0a:cf:70:d9:c0:07:13:75:a3:71:3a:f5:0b:43:
13:a2:02:5c:58:e7:c3:ee:b4:b6:ff:04:92:c8:6f:1e:66:65:
36:72:78:cc:a2:14:43:8b:89:67:bf:70:15:d6:4d:b7:8b:a9:
8d:f8:61:4b:21:bb:2c:a0:90:a5:a3:5c:f7:e8:46:70:36:77:
10:ee:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:43:50 2025 by rpki-client