Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: 6i6pMnNVP8I38rWldCUEua/HtewRimA482P5h2NDjEI=
Subject key identifier: 31:9B:8A:92:0B:45:8E:D5:89:98:CF:57:BA:73:B0:C1:71:E4:40:2F
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 0196428C9E92C47A14F2E4CBF803886DCF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 14FB
Signing time: Thu 17 Apr 2025 07:00:33 +0000
Manifest this update: Thu 17 Apr 2025 07:00:33 +0000
Manifest next update: Fri 18 Apr 2025 07:00:33 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: P6QqxMQzkSpVKseJnooNG4JewFSQ74VVQ02H3Pjbbg4=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8c:9e:92:c4:7a:14:f2:e4:cb:f8:03:88:6d:cf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Apr 17 07:00:33 2025 GMT
Not After : Apr 18 07:00:33 2025 GMT
Subject: CN=319b8a920b458ed58998cf57ba73b0c171e4402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:5a:c9:7e:bb:c6:49:fe:b7:9b:e8:64:28:
b7:fd:0a:5d:b8:9c:20:f6:2e:17:d6:ad:04:c2:5c:
e1:79:54:df:14:b8:ce:17:2f:e6:b3:e8:e7:7a:38:
f5:11:22:4d:f5:fe:9b:98:c0:35:a1:aa:a2:db:f2:
70:67:69:20:0b:d4:0d:ad:3f:5c:ea:9b:05:9c:a7:
43:84:be:49:ab:db:87:e3:9a:bb:47:32:17:12:e0:
dd:6a:c3:09:82:e2:89:fa:09:e2:33:b5:ae:76:2d:
7f:bf:2c:2a:b2:dd:07:d4:38:2d:5e:c8:56:82:42:
38:28:83:e4:bf:ba:95:79:7c:11:df:06:47:f6:50:
29:3f:39:90:95:5f:e2:95:c0:ee:e2:b8:f6:ba:9e:
aa:85:ed:30:b1:8c:08:be:cb:98:1e:04:c5:20:e0:
06:46:af:1c:63:9c:a8:40:89:71:b9:4e:3c:01:ff:
bc:ba:b4:8e:74:90:0e:58:e8:9f:8e:d1:75:f9:e3:
31:83:61:35:41:ac:3c:03:22:11:61:27:e4:f3:a3:
53:7e:49:3a:72:93:38:ee:62:0e:3d:7b:14:e3:53:
d4:a8:af:4d:4f:ce:f5:24:e8:85:7f:f2:9e:3b:51:
27:dd:85:3e:1c:5a:f3:e7:94:f3:a7:d8:f2:a1:b6:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9B:8A:92:0B:45:8E:D5:89:98:CF:57:BA:73:B0:C1:71:E4:40:2F
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:83:db:8b:7f:73:44:25:01:6f:f3:5d:f3:ed:21:05:04:
a4:3d:ea:39:8a:76:27:dc:fa:9b:72:bd:ba:4d:59:4b:d1:6a:
da:5a:29:71:d7:65:c7:36:52:51:a5:98:5a:ef:8e:17:0e:c2:
e8:2a:33:c6:32:bf:8b:37:85:61:c1:ec:cf:e1:9e:46:6a:6e:
da:0e:88:bd:a1:23:63:c1:e2:42:2c:0c:dd:81:3f:0c:29:e4:
54:38:ee:43:e8:71:34:c5:8f:b9:90:e7:e1:6f:e6:f9:5e:fa:
73:eb:9a:0d:0e:ff:9e:44:04:21:a3:9c:2a:9e:ed:b6:ff:d1:
14:90:61:f5:81:6a:17:a6:19:93:88:ab:d0:20:37:e1:ed:49:
86:72:60:fd:c7:b2:aa:c5:6d:2f:35:9d:d1:00:df:bc:81:69:
cc:ce:50:ff:c0:ba:59:a2:d1:48:90:2d:91:f2:f0:26:66:46:
8d:0d:3e:73:3a:74:66:24:35:c6:79:ad:3a:5f:f5:e4:c5:fa:
7c:47:11:4a:99:fd:e9:2d:7b:59:ea:69:e3:2b:b0:9f:75:9a:
0b:86:b7:18:0c:ae:2c:8e:5d:d7:de:b6:70:e2:2d:48:43:17:
68:18:9f:83:f8:65:62:65:c5:d3:b0:30:8a:cb:84:4c:d2:33:
ff:91:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:28:16 2025 by rpki-client