Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: ydDb6kgf4AmCH2SU+HewK6ru9MieBIGn1PAByDY9J5k=
Subject key identifier: 14:6B:50:4D:6D:32:95:17:18:71:F0:52:F2:53:F6:D4:4E:02:23:B8
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 01967F7D4CE61CCD13CCCD0E1B193B019A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 1437
Signing time: Tue 29 Apr 2025 03:00:40 +0000
Manifest this update: Tue 29 Apr 2025 03:00:40 +0000
Manifest next update: Wed 30 Apr 2025 03:00:40 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: 3b2/8sBE06oFhjxVheyyROmERbyykHEbkwV6Pq733Yc=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:4c:e6:1c:cd:13:cc:cd:0e:1b:19:3b:01:9a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Apr 29 03:00:40 2025 GMT
Not After : Apr 30 03:00:40 2025 GMT
Subject: CN=146b504d6d3295171871f052f253f6d44e0223b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:5f:46:81:52:a1:a9:6b:4f:cd:8a:ba:47:
68:c9:83:a9:88:33:cb:05:43:07:c3:f4:eb:6f:84:
ea:3f:a7:61:ac:7e:64:07:1f:81:83:d1:d2:52:a7:
de:88:16:e3:44:5f:85:7c:e0:ef:b0:6b:a3:36:69:
16:6a:51:57:89:fd:cb:3a:96:73:8c:67:41:bc:fb:
43:3f:d1:a8:07:6f:94:ae:ae:e6:5e:4a:93:8a:3d:
41:67:e7:0d:25:9c:b0:4c:c1:a0:32:74:98:03:93:
53:d4:8a:f4:a0:20:01:85:66:e2:0a:eb:4d:c7:c8:
36:55:e1:6c:05:67:f2:fe:9b:83:e5:c1:0c:42:6d:
04:76:f6:68:64:2d:4f:62:38:b2:ea:38:36:ea:f9:
86:75:40:38:5e:e7:e6:31:82:f1:70:9a:80:09:32:
31:66:47:51:17:6c:22:61:e0:ca:f7:3f:c7:b1:80:
f6:bb:0c:31:4a:4c:63:8b:9d:a5:1a:37:31:e8:f0:
d1:86:a9:5e:71:df:8e:1c:1f:45:7f:cd:a0:58:d3:
85:0f:d0:ef:7d:7e:ad:8d:89:0d:9a:60:07:9d:75:
9b:fc:65:96:f0:ea:99:4a:41:c7:f4:3b:d2:58:2a:
e6:2b:b8:45:9e:f8:54:e0:0c:5d:98:d3:4e:b0:6a:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:50:4D:6D:32:95:17:18:71:F0:52:F2:53:F6:D4:4E:02:23:B8
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fa:3b:0b:bb:c8:ff:e0:ff:e5:8d:78:a5:17:2f:44:ed:bc:
2e:10:07:32:f9:3e:15:a0:04:50:41:b2:35:e6:a4:e5:56:95:
c8:78:13:d6:c8:0f:c7:1a:ee:4d:4c:8b:74:cd:1b:1f:5e:e2:
66:d2:a9:69:e4:29:39:d3:f9:72:83:ee:0a:2b:58:ed:7d:ac:
72:87:34:9f:9e:71:b5:d4:6a:b1:e6:08:cb:98:d5:da:c8:d6:
c6:8d:ff:23:99:c7:0c:c5:3b:28:f4:78:ab:93:f9:04:f2:2d:
c5:fc:c3:56:31:de:fb:f3:a6:51:15:72:da:6f:ea:31:a6:d1:
57:ac:4e:4f:b0:53:2d:6c:97:a0:34:f8:57:30:30:3a:7b:5d:
bc:e5:df:40:bd:25:b7:57:c0:c6:4a:5c:fa:cb:5b:86:98:ef:
b2:45:2f:3b:35:ea:5f:5c:3a:d9:dd:c1:ea:4a:3b:5a:84:e0:
c5:b1:fb:cf:1a:5b:81:b6:98:d5:c8:36:2f:0b:67:4d:1e:ce:
b2:d4:62:81:a6:c3:56:a6:59:8a:f8:0a:8e:0f:83:84:0d:06:
7f:41:45:f2:5b:09:85:03:36:b3:e4:3e:c2:55:dc:70:e2:a0:
b9:d1:3e:4b:8b:3e:72:af:1b:62:ad:f1:2a:5a:9e:35:c6:ce:
6d:5b:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:04 2025 by rpki-client