Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: hNvExNAbcGw+AETfm3E0CWBA6pAT/Eu6Ax8cwqDB0+g=
Subject key identifier: 0F:D1:48:38:E8:68:6F:03:7E:5D:06:56:73:85:0B:B3:D4:F7:A4:80
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 01967153F8B0BABAD1461BA5FB947E5B65E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 09:00:50 +0000
Manifest this update: Sat 26 Apr 2025 09:00:50 +0000
Manifest next update: Sun 27 Apr 2025 09:00:50 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: j5l45f1nHcJzNOrq6lKJXejQM8hsgOMT1FOpFpEWgb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:f8:b0:ba:ba:d1:46:1b:a5:fb:94:7e:5b:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Apr 26 09:00:50 2025 GMT
Not After : Apr 27 09:00:50 2025 GMT
Subject: CN=0fd14838e8686f037e5d065673850bb3d4f7a480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:2c:e0:bf:7c:bf:9e:28:47:ba:b5:71:22:
50:3b:64:84:32:d8:c9:6a:cc:75:b6:c0:1a:0d:7d:
3b:9c:41:8c:0c:3c:d1:00:7f:44:5e:cd:a1:be:d1:
eb:a8:42:02:75:5d:2c:92:8e:80:6b:e9:c7:60:d3:
93:bc:7e:2b:27:5b:63:7e:58:71:ca:3a:43:13:9b:
a7:73:85:c9:bd:cb:f1:14:5f:c1:4e:02:79:43:54:
0d:9b:e0:f5:81:f4:30:94:d9:5f:32:8a:37:12:a5:
6e:b5:ac:bd:f3:99:25:e5:ae:74:1b:78:d7:d8:03:
48:c4:af:f8:4b:30:e3:22:d6:9b:15:8b:5c:6c:05:
bd:4f:c5:2e:4b:06:fe:3f:e5:2c:c9:29:e4:04:4f:
88:46:e3:05:6b:4c:fb:16:c9:14:6f:68:b1:f3:f0:
f2:85:97:98:15:93:65:da:03:f8:f0:c7:06:b0:4d:
ee:d0:99:40:21:e8:fb:a3:f7:68:8c:02:17:4a:6c:
43:b7:73:1e:a4:b5:20:5e:b4:ae:e7:ab:01:cc:83:
d5:46:e5:da:5d:f6:01:38:d0:b4:ab:ae:40:a4:8b:
9e:88:8a:cd:be:7f:c6:7a:d1:7b:22:60:b8:ab:82:
1b:a2:da:4c:21:41:03:ae:2f:bf:ca:2e:26:29:2f:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:48:38:E8:68:6F:03:7E:5D:06:56:73:85:0B:B3:D4:F7:A4:80
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:81:ad:1a:cb:5f:0c:f9:71:dd:87:f9:f4:6d:bd:56:68:87:
b2:56:04:57:f9:71:83:65:13:37:43:bd:29:b8:1c:f5:a9:b5:
47:f0:0d:ac:3b:32:ef:4f:83:7e:5f:43:ed:5b:89:41:55:e4:
48:e2:f0:9b:ba:91:d0:74:ab:79:bc:65:84:25:c9:13:27:ff:
78:6b:e8:75:ce:c2:5b:ae:34:08:21:89:3c:74:5e:3d:5c:50:
f9:52:8f:02:60:d7:90:76:48:8e:be:3c:d7:f0:05:9c:3a:08:
6c:72:3c:bd:6a:e9:e6:c2:eb:78:08:af:c8:24:56:6c:93:5a:
1b:33:a3:d3:df:bc:83:d1:b2:2c:68:2e:1b:f6:79:51:e2:34:
a6:e9:20:6b:3d:78:9a:95:9e:7b:ed:73:e3:da:0f:d4:87:7e:
0a:f5:85:8e:e7:62:7a:d8:96:f7:2f:da:f8:5e:1c:3f:bc:11:
b9:36:58:f5:18:3e:b5:df:47:68:00:00:43:9a:47:cd:d8:43:
5e:e2:67:a4:1d:1d:f3:88:08:d7:27:20:71:99:66:22:e1:54:
af:f4:45:09:ae:6f:55:ea:2f:fb:50:cf:c4:66:1a:48:bb:8e:
ca:c0:65:49:10:ba:8f:32:6e:69:65:dc:dd:b4:e8:80:b6:a9:
79:4c:0c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:33 2025 by rpki-client