Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: dE36+4AZLthiq5p+NUi4a4NW8FsTICh8LZiZRkOC54A=
Subject key identifier: 1B:7E:58:24:1A:6A:CA:DB:76:1F:DD:AD:CB:03:C4:E0:D8:20:EA:43
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 0196827EC0364DCB26ACDFE28DD766903F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 09BB
Signing time: Tue 29 Apr 2025 17:01:06 +0000
Manifest this update: Tue 29 Apr 2025 17:01:06 +0000
Manifest next update: Wed 30 Apr 2025 17:01:06 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: hrabD/tvozyeWrCnq5r9iPWHFkvQw1G6KUVLtUQz+f8=)
2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:c0:36:4d:cb:26:ac:df:e2:8d:d7:66:90:3f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Apr 29 17:01:06 2025 GMT
Not After : Apr 30 17:01:06 2025 GMT
Subject: CN=1b7e58241a6acadb761fddadcb03c4e0d820ea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:cb:3b:51:e0:b3:38:61:83:96:ad:9f:40:
91:b2:fa:fa:23:60:10:d9:ab:dc:d9:25:ba:5d:5e:
21:fa:e4:a4:e3:29:5f:7d:06:07:0c:cd:29:74:ae:
ac:f4:65:49:ab:44:c0:ff:4c:d5:36:6c:05:d1:b1:
0f:26:26:f4:21:48:6e:68:34:93:44:f6:54:56:6a:
be:8f:07:de:4b:40:cd:8e:b8:bd:c6:a8:e5:57:01:
13:e6:de:86:c5:86:83:eb:e6:8c:10:bb:61:46:89:
00:6a:92:ad:b0:85:bc:4f:a9:46:3a:1b:fc:c2:3d:
5b:5e:b7:ef:2a:e2:8f:81:29:16:f3:5a:d4:c6:ef:
85:30:d6:cb:fe:21:7f:29:52:91:2e:a0:92:15:8d:
95:c6:2b:b3:3a:ca:68:e6:7d:06:00:be:fd:db:ab:
f3:b8:2e:c1:2e:80:c8:26:79:f6:cd:90:51:6c:0b:
2a:cb:c1:c5:d4:4a:ce:bd:68:96:c2:10:bb:44:20:
11:de:a5:ad:2d:5f:f9:78:7a:d0:21:48:6e:3e:af:
d0:85:3d:c1:fe:c8:20:60:ad:51:5b:ac:69:ba:48:
39:c0:4e:20:fd:aa:d7:c0:81:12:f3:87:da:5c:82:
27:8e:b7:01:8a:c5:a9:77:04:38:ac:cc:89:68:ac:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:58:24:1A:6A:CA:DB:76:1F:DD:AD:CB:03:C4:E0:D8:20:EA:43
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:14:ad:22:55:98:bb:2c:61:8b:23:3a:c6:f8:74:cb:db:22:
d2:46:86:06:55:bd:63:c1:94:4d:6f:65:34:32:d0:6d:66:c3:
b6:8a:8d:8f:4f:78:76:4f:d2:8b:e2:8f:7d:d0:1a:60:7c:76:
a1:25:40:17:24:00:84:97:c7:e1:f9:c3:7b:29:c4:b6:02:e5:
64:c7:46:65:24:39:c2:61:26:b3:11:10:60:23:ae:72:a9:17:
8f:fb:d4:82:ca:14:8c:94:e7:aa:e1:07:1f:bd:66:74:d1:64:
63:65:5e:8e:86:2c:ba:04:57:dc:96:5c:3a:bb:a2:36:29:e8:
2e:e6:ab:a0:0e:64:15:20:7d:e3:af:49:42:a0:99:37:18:cc:
0f:b7:b2:8d:dc:59:72:47:93:7e:41:95:dc:0f:67:4e:82:28:
f5:f3:f9:d3:8b:5d:58:c1:12:41:90:bd:5a:64:99:1f:16:27:
14:a0:61:83:8a:0b:61:e8:f7:37:3a:f1:9e:12:7c:87:cc:74:
91:8b:82:c4:e5:44:6d:af:f0:30:08:7e:ed:64:87:59:ca:ab:
e7:83:fc:4c:5a:a4:c0:e3:cf:2d:f2:d7:8a:59:73:a6:22:87:
2d:d0:04:09:16:6e:6c:b7:10:41:ca:5f:70:2e:a1:3a:32:72:
16:b7:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:26:09 2025 by rpki-client