Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: hI8uw4KHZh/M5dJ17js+QkxcMUz+LnJThtZpnWNudmM=
Subject key identifier: C0:F4:E4:61:24:50:F1:37:EC:84:03:5C:3A:29:38:77:EF:95:4F:64
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0196790D6EDE518FD06DD3307BC89E77FA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 21:00:45 +0000
Manifest this update: Sun 27 Apr 2025 21:00:45 +0000
Manifest next update: Mon 28 Apr 2025 21:00:45 +0000
Files and hashes: 1: A0W4NLtnqVewyPWtMUlDJQbCQXE.roa (hash: MYxIYetVdJmSAzMctuQMtMzPS4ahJ2EbSnELEfjBMw0=)
2: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: bPDcpjxQ45bgUApaPDiMs0SWMl+SM4VO9UydUHNoURI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:6e:de:51:8f:d0:6d:d3:30:7b:c8:9e:77:fa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Apr 27 21:00:45 2025 GMT
Not After : Apr 28 21:00:45 2025 GMT
Subject: CN=c0f4e4612450f137ec84035c3a293877ef954f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:bd:f9:00:c5:13:e4:a2:6a:a1:aa:96:ec:
6e:3f:73:de:f6:e6:9f:c0:5d:18:b1:79:fb:d8:d9:
a3:f5:7d:80:8c:8d:1a:b8:6a:36:d7:63:10:70:89:
8d:f9:6a:15:92:d7:89:6d:6d:47:e5:e4:09:3b:ac:
30:f9:2b:0c:94:47:50:24:85:51:19:9b:1e:69:0f:
46:65:61:77:75:ad:3c:07:d3:2c:10:98:6a:c4:04:
66:b6:ae:bb:dd:c8:fe:b2:6a:59:c9:ac:41:f1:db:
f3:3a:03:73:e2:30:1c:a9:0f:a9:2c:dd:66:d8:b4:
2c:b1:e0:2c:2e:81:b6:d6:4b:ee:d7:47:ce:51:c5:
4f:88:54:86:17:b2:d5:f6:b5:91:33:75:e6:97:03:
89:f7:f0:ae:fc:b3:4f:8a:b0:6e:b2:0f:bc:5f:d7:
c2:e7:c6:ba:95:09:99:10:e3:97:d3:08:71:f6:91:
7c:24:56:04:e1:b8:68:1d:75:73:0a:0e:1c:45:f0:
93:03:11:89:a6:6a:06:80:a9:31:c0:75:9d:fc:87:
2d:44:e2:10:8f:df:8e:93:35:04:42:c7:39:d9:e9:
03:61:8d:ba:56:5d:7f:d3:aa:f6:2a:83:7a:ea:89:
63:de:2e:2f:b9:c1:73:83:8a:31:e5:9b:16:66:44:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:E4:61:24:50:F1:37:EC:84:03:5C:3A:29:38:77:EF:95:4F:64
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8e:ad:88:80:80:f1:e8:e9:16:46:e3:c6:a0:60:eb:fd:e4:
8f:fc:14:6f:e5:9f:58:f7:30:12:64:23:dd:be:ed:dc:a6:ef:
c7:af:2b:44:7a:28:78:a6:90:3a:09:25:e8:1a:d1:c7:9f:c5:
8c:8d:56:51:be:4f:e1:4d:27:ea:35:fb:bc:61:e9:4d:76:78:
c3:55:e6:40:1b:fa:60:9c:d4:fc:ed:9e:35:3f:e0:dc:08:24:
eb:49:d3:b8:2f:53:c7:ee:65:ba:7f:40:ba:15:9d:4a:f8:70:
57:38:f5:cc:6a:6f:76:91:d5:9e:a4:4c:2d:54:7d:99:58:ca:
19:d8:00:f4:2a:a4:59:cc:c2:fb:25:f7:92:15:15:3e:7d:ea:
89:83:e1:fb:89:55:2e:01:b9:c6:05:69:cc:8f:d7:0a:a2:8b:
ba:cf:ea:cb:17:bb:26:ed:46:c8:0c:5f:08:a2:2d:b3:d1:77:
98:4e:4e:42:ab:30:51:d7:54:af:68:7f:a7:49:72:4b:13:82:
c5:c4:5d:46:24:70:59:38:df:4a:af:ac:3c:be:af:d6:77:d8:
20:ca:cd:13:54:ab:d4:a1:0b:83:b6:72:be:67:c6:e3:61:bf:
72:c3:eb:f3:e8:65:ca:9d:c0:b5:37:3b:f9:e3:0d:2b:7b:ca:
2e:ab:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:36:53 2025 by rpki-client