Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: Urul7C/uJDmzblHQloZzrTntDcfi/SHkLtLkdNUuQMw=
Subject key identifier: 2A:A0:C2:BF:A5:CA:CD:8C:3B:F9:87:E5:7C:C3:B8:60:2D:DC:A2:25
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019644E8F6A9483D2F50EA744214F83B9506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 14FB
Signing time: Thu 17 Apr 2025 18:00:40 +0000
Manifest this update: Thu 17 Apr 2025 18:00:40 +0000
Manifest next update: Fri 18 Apr 2025 18:00:40 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: H6cPmMdFT1xSNC8cR7pVqjFocWD2+W9jZBADWgs6dc8=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:f6:a9:48:3d:2f:50:ea:74:42:14:f8:3b:95:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Apr 17 18:00:40 2025 GMT
Not After : Apr 18 18:00:40 2025 GMT
Subject: CN=2aa0c2bfa5cacd8c3bf987e57cc3b8602ddca225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:37:13:b1:e2:71:bb:48:51:13:ae:23:86:
e0:4d:17:ba:86:6a:66:8a:8d:81:86:ad:43:5f:2f:
7c:67:4e:bb:b8:e4:26:c9:98:fb:55:05:fb:05:f3:
f9:eb:d1:85:76:f4:36:c4:29:22:4f:52:f5:2e:c0:
f0:df:96:22:64:c6:22:52:a8:b5:25:90:2d:87:5a:
9d:4c:ba:b0:c1:54:c6:f1:05:e4:82:79:3c:3a:c0:
d7:37:85:34:5c:a8:c3:33:64:ac:6a:2f:c2:52:06:
2d:aa:10:ed:8a:c7:b6:be:4a:bc:c2:18:7d:b5:2b:
65:aa:df:4e:2d:af:fc:fe:9a:e8:f9:b5:60:bf:8e:
8a:22:dd:07:cf:41:d1:bf:3e:34:8e:04:38:3d:ba:
93:2a:7f:b9:a0:86:62:b8:ca:a4:58:0e:ab:df:e7:
52:6a:e6:dd:9e:e9:87:01:2e:c4:41:06:f0:74:66:
a4:0b:18:d1:0d:48:32:c6:78:e2:08:ca:76:f5:6e:
d0:b9:66:13:65:78:2e:24:02:d5:5f:04:8d:6e:3b:
d2:30:03:fb:a4:af:0a:0b:b7:cb:16:96:0c:d1:d2:
7a:51:b4:25:b1:a4:fa:1a:82:a6:81:c5:c0:74:ce:
d7:8c:bd:e4:be:6e:1f:8d:0c:f6:ef:a4:1a:98:ad:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:C2:BF:A5:CA:CD:8C:3B:F9:87:E5:7C:C3:B8:60:2D:DC:A2:25
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:37:68:a1:5a:39:0e:c5:48:8a:38:6b:42:3e:f6:5e:15:df:
c2:69:68:c5:ad:00:db:2c:7e:02:92:b9:92:7e:56:61:80:82:
f9:dc:12:75:ad:26:db:6f:08:bf:94:23:cf:be:84:66:ac:7e:
01:f4:a2:3c:3e:98:d8:e3:47:9f:d9:65:67:7f:57:fc:5f:65:
1c:bc:31:b1:d8:c1:ac:da:9d:3a:8b:73:a0:7e:3f:6c:29:45:
68:56:e1:c7:b8:d7:ab:13:bf:16:33:26:1b:8e:9c:0c:49:29:
0b:ca:7e:94:c5:81:b2:0b:f9:c5:63:23:89:2f:8c:82:d5:e5:
ac:cf:9e:4a:6e:38:f0:65:a5:ad:54:55:eb:3f:99:56:60:e0:
30:f3:45:b0:b5:56:1d:0b:bc:03:e2:b1:49:19:b0:94:b7:72:
44:2a:c9:3c:c8:b2:49:a5:0d:de:c2:3a:84:ea:fe:af:97:8c:
17:0a:4d:63:fd:fe:fd:18:f3:73:84:b3:51:90:60:53:f6:67:
65:eb:2a:d4:4c:fc:b5:86:9b:2c:a4:b1:cd:37:83:a2:30:3d:
21:87:be:13:f7:bf:eb:6d:cf:5d:37:cb:8d:fa:4c:d4:99:8b:
cf:6d:3f:40:de:17:11:03:ae:5b:51:19:6d:82:01:7c:bb:53:
f0:b5:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:58:33 2025 by rpki-client