Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: yZZyRkeH8hNc72Ry8lGiBpN8GQgT0kFfqiY2C5WFHpE=
Subject key identifier: A8:6D:D4:36:80:05:C3:9A:AB:66:83:34:A0:1C:8E:F7:84:44:83:25
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01964F6CD2251F28B7D2AB2E6A1BBAA14CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0A04
Signing time: Sat 19 Apr 2025 19:00:53 +0000
Manifest this update: Sat 19 Apr 2025 19:00:53 +0000
Manifest next update: Sun 20 Apr 2025 19:00:53 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: obCl8kWK6qDg0yQAB8DVhmXCXk4nzhLyE/NeOQZwIjA=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:d2:25:1f:28:b7:d2:ab:2e:6a:1b:ba:a1:4c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Apr 19 19:00:53 2025 GMT
Not After : Apr 20 19:00:53 2025 GMT
Subject: CN=a86dd4368005c39aab668334a01c8ef784448325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:a7:ab:7c:0c:30:6b:14:92:ea:e2:cf:5a:
05:dd:c2:77:28:62:1d:f5:a9:d5:f6:5f:3c:96:71:
33:d5:87:84:21:e0:02:1f:68:0e:df:ec:87:c0:2a:
8f:f5:c9:66:1c:49:1d:fa:fd:32:8d:c2:af:c3:65:
e9:a3:fd:8d:ed:32:44:e2:d5:6b:52:56:0e:e0:21:
74:89:33:66:85:84:02:1d:4d:a9:81:2d:73:a2:f0:
e4:8c:cb:35:c5:4f:94:5a:b4:9b:7f:f9:af:74:69:
0d:66:54:94:19:be:ab:3b:a0:70:67:5d:c8:26:74:
0b:a6:ae:4f:fa:9e:93:06:1a:82:94:a2:63:12:97:
85:eb:73:a2:5c:86:5d:c0:91:53:4a:f3:f4:6f:ee:
74:4d:27:72:1e:ee:87:90:9d:08:ee:9f:3d:8d:15:
2d:52:21:e8:81:50:e7:dc:57:3a:d6:23:7c:64:76:
f5:14:ae:56:41:6b:86:2e:04:2c:42:68:b4:fc:24:
3e:79:ed:74:b1:32:49:61:18:12:b5:b2:73:e2:97:
bb:c5:02:0f:a7:74:83:98:a5:e2:f3:a7:54:ed:28:
ae:dc:7d:ed:55:fd:6c:33:98:f1:a5:4a:05:0a:0a:
cc:7e:68:a3:b3:1a:a2:73:0c:c7:c2:b7:9f:c9:b1:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6D:D4:36:80:05:C3:9A:AB:66:83:34:A0:1C:8E:F7:84:44:83:25
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:56:3a:2f:42:e4:b8:67:29:49:1f:31:d1:4d:f9:fe:a8:39:
08:b5:83:d8:41:da:33:00:17:8e:df:36:c7:9c:49:2f:46:d4:
55:52:b2:07:6e:42:20:54:0a:a3:f6:9a:d9:f2:27:87:2e:d2:
f2:a9:03:fe:59:05:2a:1f:08:01:f5:a6:15:03:89:fe:ea:01:
8b:43:ed:a6:87:9a:a2:82:00:cc:9c:39:1b:a5:5d:c3:52:84:
88:b5:ae:d9:22:a0:40:0f:92:01:bc:26:c6:96:29:bb:05:7f:
60:d0:3f:c1:41:fb:f0:e6:ef:44:9f:96:3f:4e:21:00:aa:3e:
0b:b7:9a:66:1d:91:46:c6:d8:26:af:60:19:91:05:21:95:0c:
58:0e:6d:e9:83:2a:2a:69:26:d9:df:96:97:b7:cc:d6:2f:96:
69:9c:5a:87:0b:8f:43:ff:ec:a4:5c:07:19:f6:dd:16:c9:b1:
cf:b4:14:93:f3:f8:21:a8:5c:34:97:e9:92:51:2e:c2:e5:51:
71:df:32:7b:06:6f:62:85:2c:99:b3:7a:26:cc:4c:dc:5b:a3:
43:d2:1b:45:1d:a7:12:4f:0d:8f:58:11:5b:8a:40:e0:48:84:
4a:cf:6e:6f:82:fe:70:d3:05:fe:ab:56:f6:96:56:16:a0:ed:
1e:4f:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:08 2025 by rpki-client