Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: WVu6t+1YP0XQC4OhrZrdpqMWNqUCUeA+T2eIp0NFH/4=
Subject key identifier: 57:7E:AF:5F:75:7E:8B:D0:86:ED:E0:4E:48:B4:DF:75:A7:E9:B8:EE
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 019676E8016D509FC3DAFDD386B7BF8862C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 0D76
Signing time: Sun 27 Apr 2025 11:00:38 +0000
Manifest this update: Sun 27 Apr 2025 11:00:38 +0000
Manifest next update: Mon 28 Apr 2025 11:00:38 +0000
Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=)
2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=)
3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: HwQNRblekq5rR7det6ipoZkhmYJi38HSVDLpp6L2PIA=)
5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:01:6d:50:9f:c3:da:fd:d3:86:b7:bf:88:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Apr 27 11:00:38 2025 GMT
Not After : Apr 28 11:00:38 2025 GMT
Subject: CN=577eaf5f757e8bd086ede04e48b4df75a7e9b8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:3d:71:88:1d:74:c3:11:b9:bf:6d:87:22:
24:9a:9e:e4:f3:5e:16:d0:73:e6:79:e6:84:d4:d7:
33:79:95:0e:5b:98:3f:58:4b:bb:fd:f7:cd:8b:b6:
76:82:f4:3e:e8:5e:a5:14:cf:49:15:ca:70:32:81:
d0:4f:f2:34:eb:d5:cb:fe:78:0b:70:7c:15:fa:e1:
2f:e6:41:08:b8:2e:0a:ec:f2:b5:c7:37:dd:36:75:
57:ec:f5:ac:86:eb:05:e5:69:81:52:a5:d0:e0:8d:
80:d7:c2:a2:2b:e5:87:fa:c4:85:d8:f3:bc:a3:ce:
b8:40:63:15:02:f1:e8:20:b1:2c:fc:07:32:b1:1b:
73:41:1d:db:ac:6c:64:4b:bc:d1:b6:01:cf:4b:76:
87:e5:ab:f6:25:f3:1a:ed:39:a7:0a:81:f9:76:7f:
db:ec:96:f1:9c:c6:2c:1a:cd:e4:ce:73:4d:0e:6c:
f2:66:33:c6:75:b7:2f:ab:75:b8:61:9b:89:08:eb:
50:cc:30:af:14:cf:a8:97:99:ec:d0:5f:86:99:ae:
79:95:3c:7d:56:f4:85:fc:4d:e2:e0:74:f5:73:8b:
41:af:d0:ea:1c:54:ea:9e:92:e1:28:f9:d8:01:ea:
44:1d:48:b1:66:d0:34:1e:95:92:4c:92:02:5b:cd:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:AF:5F:75:7E:8B:D0:86:ED:E0:4E:48:B4:DF:75:A7:E9:B8:EE
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e8:a1:14:cc:e9:64:6e:cb:35:82:a8:ba:cc:40:d2:27:c7:
8f:32:60:17:df:d0:88:0e:f0:2a:ce:21:c2:4a:18:ce:e1:c6:
21:7e:a2:eb:91:7c:07:42:f3:a1:ae:9e:63:fa:c1:66:b2:41:
25:fb:c2:c1:2b:f6:6f:6e:da:49:a7:d1:e3:cc:c8:0b:86:8e:
54:c5:de:3c:84:a0:8e:9c:a4:ff:ca:19:36:0d:db:42:be:51:
21:06:91:45:c6:93:71:f1:bf:dc:1e:d0:18:f5:99:a2:a9:c4:
29:59:cd:e4:88:bf:91:e0:cf:55:0d:04:61:29:19:19:91:69:
b2:9e:3d:70:ef:2d:8a:3b:59:94:2c:36:5c:4e:8f:88:2b:44:
bb:41:81:8b:64:dd:25:45:23:25:3f:52:d2:55:11:28:e4:ce:
d2:f3:5a:43:ce:4c:d7:6a:fc:9d:c3:68:b4:b9:ab:e0:e3:64:
37:51:d2:c7:e0:95:ce:a7:64:5e:c4:77:59:80:f8:7b:bc:e9:
ed:11:8e:4f:b6:2d:b6:05:0f:15:ab:a7:88:51:77:20:bb:9c:
fc:ef:de:7d:e0:7f:a0:89:d3:07:b3:b0:95:ad:6d:32:ae:c9:
63:3c:39:dd:41:80:50:81:b2:6d:a0:d8:04:0f:4c:8a:c6:57:
71:bf:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:17 2025 by rpki-client