Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: K04HfpYwbi6sFmQn86IKHRKWU43VX8SCdf4yutQcGo8=
Subject key identifier: 98:4B:AE:B3:6B:0D:B4:A2:E9:F7:8F:C1:2D:3F:03:C0:65:CB:05:49
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 019676B0A92E0FB2E12BE46ED19C31421332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 0DE8
Signing time: Sun 27 Apr 2025 10:00:11 +0000
Manifest this update: Sun 27 Apr 2025 10:00:11 +0000
Manifest next update: Mon 28 Apr 2025 10:00:11 +0000
Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: U3CfoHhxBLxjWinbOc2D+H1PXz1NEu+jPMZVnVj9r24=)
3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:a9:2e:0f:b2:e1:2b:e4:6e:d1:9c:31:42:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Apr 27 10:00:11 2025 GMT
Not After : Apr 28 10:00:11 2025 GMT
Subject: CN=984baeb36b0db4a2e9f78fc12d3f03c065cb0549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:a1:8c:25:51:9f:27:15:e2:45:c7:61:68:
96:94:02:2b:73:fd:ce:50:9d:ca:91:df:82:63:47:
17:99:7d:ff:a3:9f:79:b7:95:93:a7:00:98:06:c9:
25:4f:3b:9e:d7:49:1a:6f:de:f2:64:f5:ae:92:dc:
2f:48:68:ef:6a:64:8c:0d:1d:80:34:85:bb:1d:d2:
fc:cd:5a:47:4f:02:fb:69:09:6a:a2:78:d9:92:35:
82:d2:7c:be:40:8f:ac:0f:c2:3a:5d:87:5f:0c:f0:
e9:6f:ed:66:8d:3d:c9:f7:af:36:77:00:cf:e2:b3:
a9:9b:74:a6:17:7e:5d:32:f2:c6:e0:f1:bb:ca:3d:
b3:7f:ae:82:90:05:51:b8:cd:38:f3:e0:cb:9d:c9:
1b:5c:00:95:a5:26:14:cb:c9:5b:1d:9b:a7:2a:a6:
f8:67:6a:10:be:37:56:5e:54:f7:5e:d4:28:1d:2d:
f8:4d:fb:15:7d:28:9e:dd:f5:4f:14:84:b8:bc:6b:
4f:50:33:b1:81:6a:a0:b2:b1:21:35:c3:e1:24:16:
8e:87:03:a6:5e:31:23:5b:ec:5f:9f:8c:50:04:77:
3f:4d:53:f4:b5:8c:a2:84:ce:b4:99:63:00:d2:2d:
a0:93:8d:b6:98:e0:8e:3a:64:14:7f:84:e6:b7:ae:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4B:AE:B3:6B:0D:B4:A2:E9:F7:8F:C1:2D:3F:03:C0:65:CB:05:49
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:67:bb:a7:63:31:c5:bc:92:76:31:73:77:a9:e5:79:86:
6f:6e:78:41:52:d7:25:83:78:f8:4a:d2:ac:47:45:8d:12:8c:
ec:aa:9e:fb:5b:88:78:3e:51:3f:57:5b:e7:61:d4:95:08:c9:
a7:ab:7d:33:7a:7e:a5:6c:eb:98:89:7d:0d:b7:f4:9b:df:13:
6e:1a:a0:3e:73:33:c2:75:06:c9:ce:5a:c8:b5:4c:a1:fd:7a:
82:60:50:bf:50:f7:93:42:bf:81:71:fa:9f:ea:d1:61:52:57:
08:41:ad:bf:6f:2a:5d:0c:79:ac:c1:73:75:77:c8:17:59:9e:
c1:e9:bc:57:7a:2c:8b:04:47:ce:54:36:17:3b:72:51:a3:71:
c1:1b:8a:72:b8:12:37:f7:da:bd:5b:a3:d8:8e:a1:11:1a:a0:
68:56:af:bf:c7:4a:64:38:97:c1:cf:ae:78:e9:c7:4b:e4:3b:
03:19:86:3f:04:ab:d7:c7:5b:ea:6c:8f:c0:0c:61:a9:99:95:
09:ca:6c:0b:70:1f:4e:eb:eb:63:74:5c:e5:ae:a1:c7:71:27:
3e:c0:36:da:f4:12:7e:e6:18:fb:f3:44:72:c7:71:9f:b1:a5:
e4:12:bc:62:e6:15:28:af:af:d2:ba:57:79:13:ef:98:6e:75:
af:a8:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:04:45 2025 by rpki-client