Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: JILyv6Ymo2Hbu8aEugxcq0ji5A6heF0mdOJGsJ6dq3k=
Subject key identifier: 62:9D:58:BA:24:42:81:42:86:E1:D2:12:3D:74:5E:40:75:E5:F5:48
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019652A4CAD96F974CF905CDDBAC360096C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 06C1
Signing time: Sun 20 Apr 2025 10:00:53 +0000
Manifest this update: Sun 20 Apr 2025 10:00:53 +0000
Manifest next update: Mon 21 Apr 2025 10:00:53 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: eyQOO3tDRVdmPWcu6dOR7j0c/hWqM39j4EH4qxqzUW4=)
2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:ca:d9:6f:97:4c:f9:05:cd:db:ac:36:00:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Apr 20 10:00:53 2025 GMT
Not After : Apr 21 10:00:53 2025 GMT
Subject: CN=629d58ba2442814286e1d2123d745e4075e5f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:29:70:12:67:8a:7e:c8:f7:97:f6:95:f1:bf:
a4:30:62:10:88:83:00:69:ae:77:6d:de:8a:dd:f5:
55:43:5c:96:0a:f7:51:4d:af:32:aa:41:4e:23:99:
a3:89:4b:9c:07:1b:c0:ed:3a:b8:b8:b6:2c:81:6d:
f4:4a:d3:3e:02:0b:b6:42:11:b1:21:84:a6:2c:b6:
a0:64:31:0d:bd:79:1c:e7:b8:16:76:52:ce:4f:60:
99:3b:d2:12:f0:40:59:e2:e2:6b:5a:c8:99:c4:e1:
d5:51:8b:d5:c6:fa:07:56:b6:d4:30:45:e8:38:a1:
0f:a7:50:f4:32:4d:2e:31:fe:ee:19:e1:01:d2:13:
1d:9b:5b:c7:9e:2e:cb:e5:f6:54:06:7f:e6:27:ad:
f7:83:3d:69:89:50:7f:fa:61:17:0f:66:85:55:be:
dd:51:61:26:a0:8f:4c:d7:24:8c:29:f5:ab:11:52:
a5:4f:9f:8e:0c:d8:b8:c0:c3:3b:94:71:44:95:c1:
f7:64:ad:4f:b8:32:44:83:94:4e:5b:8d:67:9a:0c:
a8:54:39:e8:f2:97:20:40:4a:38:de:18:fe:84:e9:
2d:2c:8f:9a:d6:06:a0:c1:73:0c:4c:6c:48:2c:0a:
d9:84:d7:62:52:61:bb:bd:39:16:d4:83:87:cd:60:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:58:BA:24:42:81:42:86:E1:D2:12:3D:74:5E:40:75:E5:F5:48
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:0f:bf:eb:c6:bf:e8:3e:34:f8:30:21:19:20:29:8d:cf:
8d:95:d5:c2:a1:d1:56:f0:73:4f:4c:73:a5:e0:5a:50:a9:59:
29:51:1c:56:c6:bf:62:b5:d8:e8:b9:b1:29:de:cb:00:8e:07:
ad:0c:29:57:6d:b7:bd:36:e6:4f:80:91:f0:b1:17:6e:bd:63:
28:bc:71:84:69:f5:33:80:8a:72:93:c6:46:43:f4:d1:4c:eb:
c4:b3:d5:95:53:86:65:eb:87:9e:3b:a0:e3:13:da:ee:b8:28:
ba:2f:03:f4:db:33:88:eb:12:f4:1c:af:d5:f2:e5:df:b2:51:
f7:ea:5c:17:5b:da:9f:3d:14:10:3a:5e:52:9b:09:36:9a:00:
49:8c:e1:28:2e:54:ca:c7:03:48:f8:53:70:d9:e9:7a:9b:29:
61:66:aa:42:b0:3d:18:78:a5:7d:4e:80:90:34:62:23:4a:91:
f2:fa:cd:82:dc:f0:5c:50:cb:f3:8d:15:69:f3:b7:9a:8d:dd:
67:cc:53:23:96:10:4b:7d:99:ed:46:1c:cc:45:62:60:a1:f1:
4c:6d:fa:41:f9:8b:1f:4f:e5:53:c7:e7:ef:de:71:d6:f1:7d:
6a:a2:22:17:bd:d6:8d:3b:cd:19:6f:24:d3:c7:0e:3c:0e:b4:
18:e1:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:15 2025 by rpki-client