Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: csB6PMESvymUf7rCxMWPHYaAQG+UJLBB2x0M5kHegng=
Subject key identifier: E9:16:3A:E1:FB:7A:2B:DD:03:C9:70:AC:4B:55:B3:41:82:96:90:AD
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019578D8B0F9DF7738076A304A8B53218589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 06AF
Signing time: Sun 09 Mar 2025 03:00:21 +0000
Manifest this update: Sun 09 Mar 2025 03:00:21 +0000
Manifest next update: Mon 10 Mar 2025 03:00:21 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: vFFk/90Ko9IITdIHOdIyvOtn+UubW9e7jXx6FL6vWHc=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:b0:f9:df:77:38:07:6a:30:4a:8b:53:21:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Mar 9 03:00:21 2025 GMT
Not After : Mar 10 03:00:21 2025 GMT
Subject: CN=e9163ae1fb7a2bdd03c970ac4b55b341829690ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:0b:65:84:db:cd:fd:95:ae:87:37:19:6f:
01:f0:64:c8:99:a8:a6:ff:89:67:37:04:48:1f:43:
c7:52:32:e6:ca:05:a6:49:3e:f2:80:06:9c:3d:01:
c9:95:d0:4c:9b:b0:10:6f:4b:23:80:90:18:17:c3:
33:a8:15:ba:c7:aa:c4:10:b8:b1:da:1e:50:5a:7c:
82:89:68:4e:36:43:86:d9:89:53:ee:9e:54:5e:e8:
32:29:b4:7c:3d:ec:88:f3:72:a3:08:3a:75:f0:f5:
ca:4c:1c:0e:ed:40:6d:37:a9:a6:07:df:53:55:30:
d5:aa:36:73:4a:e1:d6:de:ce:6b:a3:17:e7:79:d0:
69:9a:7b:22:9a:7a:9f:48:3c:09:8d:16:82:cc:fa:
86:0e:c5:e9:ee:8f:54:d0:f9:fe:79:77:5e:77:49:
6d:33:54:bc:b3:1d:fb:b4:c8:60:f2:d0:6a:f3:ec:
f4:1d:63:1c:b5:93:06:60:8b:48:1b:26:f7:36:5b:
da:22:af:af:5c:32:55:b9:f0:29:e9:49:3a:9a:40:
a4:57:67:8e:5e:07:6c:48:84:d3:b3:1b:ed:b3:3e:
5a:6e:e7:38:7c:44:db:21:fd:03:2e:46:77:ba:10:
44:1e:17:0f:a3:47:ab:27:40:fc:c8:d5:dc:7c:e4:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:3A:E1:FB:7A:2B:DD:03:C9:70:AC:4B:55:B3:41:82:96:90:AD
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:ab:69:eb:36:5b:10:63:82:5e:dd:17:0e:8e:e7:28:3e:
b9:90:76:d9:47:a9:0a:f8:69:02:9b:38:36:e0:5f:fd:36:45:
33:99:d8:d7:eb:23:03:54:ad:1c:08:c2:2e:d0:b0:04:95:5b:
88:08:c3:02:b2:ad:92:f7:08:d1:e7:d9:81:f8:9c:83:8a:41:
dc:c5:d4:6f:ae:c2:59:9c:fe:f5:31:bb:6c:60:aa:c5:99:69:
1c:df:ea:ad:6c:a0:8b:76:ec:aa:6f:e8:89:68:6c:e4:1b:23:
4f:6b:b7:af:72:36:fd:de:90:79:51:ad:55:7f:dc:fe:68:12:
74:a5:3d:c4:f8:2c:eb:f0:b9:68:a7:22:d1:ea:30:2a:b1:7f:
93:2e:8f:8f:9c:36:39:3a:c8:68:c1:e3:c9:3a:94:60:74:7f:
49:b4:6d:cd:87:9b:32:d8:67:c8:46:b1:9f:89:e7:b7:4a:c7:
11:e0:0a:90:19:16:89:8c:65:f1:75:0e:e7:07:6b:6b:74:11:
61:2b:cb:c3:d7:6a:ed:55:b5:01:dd:fa:da:8a:4a:3f:74:01:
19:42:16:ec:40:c2:9a:6c:b9:b1:0e:a2:f7:09:d6:27:56:46:
a4:96:f0:b8:49:b0:09:e5:e6:7e:82:f0:04:35:74:c8:5a:7f:
cd:04:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:50:29 2025 by rpki-client