Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: v3hjQh2H4FIhvFlmUsbx/OsDch2I/8sVhVeOdXzwDbE=
Subject key identifier: 9A:05:B6:BA:72:25:FE:DB:2D:79:81:5A:DB:CC:D0:B9:71:6D:14:CD
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019674FA3C38B7BBEAEC20A30B519C01B845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 02:01:18 +0000
Manifest this update: Sun 27 Apr 2025 02:01:18 +0000
Manifest next update: Mon 28 Apr 2025 02:01:18 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: LiAaeYI8As/+euOtX/2EIRMmMoellAcPHQHbBOXEfKc=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:3c:38:b7:bb:ea:ec:20:a3:0b:51:9c:01:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Apr 27 02:01:18 2025 GMT
Not After : Apr 28 02:01:18 2025 GMT
Subject: CN=9a05b6ba7225fedb2d79815adbccd0b9716d14cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:58:b2:3a:7a:46:4b:2e:89:a4:7b:d8:24:
9d:05:95:6a:75:24:00:15:e7:bc:c1:93:84:20:8f:
11:d0:f0:2e:b1:c9:b1:d4:59:e2:fc:a2:9f:77:a6:
26:c8:c2:a4:e3:28:de:5c:1b:53:87:07:ec:97:c9:
6c:9b:bd:26:c1:08:f6:1a:1d:02:db:00:b6:f7:f4:
45:21:42:f5:8c:f9:14:c9:27:19:16:8c:22:ab:85:
f4:94:7b:6f:5b:86:6c:7f:b7:49:61:9f:5f:42:ed:
18:e1:cb:ee:69:c4:91:a6:fe:91:70:36:ee:f9:94:
5e:dd:f6:d6:58:2a:18:07:84:52:91:19:a5:e7:c1:
6b:6c:2b:09:b7:7e:49:8a:61:3e:1a:a7:68:a2:90:
16:10:c2:c0:ac:54:64:35:60:dd:00:61:32:0b:35:
d3:ab:a9:26:4c:a9:67:d0:7b:d9:54:a1:40:f6:70:
ca:30:94:07:0f:4d:93:78:8a:b2:bc:95:f9:1e:36:
57:18:48:2f:12:0a:0c:30:c6:28:54:85:a9:cf:b5:
41:d2:5f:9e:ec:25:1e:e3:0b:71:df:85:3b:fe:41:
f3:6d:2f:1d:2d:0e:67:5d:8e:b4:cc:44:7d:d6:a8:
ca:87:d9:00:f2:9d:bd:af:0a:b5:fe:a8:73:61:49:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:B6:BA:72:25:FE:DB:2D:79:81:5A:DB:CC:D0:B9:71:6D:14:CD
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2b:d7:1a:2a:1c:68:05:19:6a:7d:70:ed:77:97:5f:21:58:
29:18:dd:eb:35:26:2a:77:ae:d3:06:e5:5e:f3:d4:5c:6a:2c:
f4:2d:69:71:7b:be:a7:f7:a0:46:fc:7a:83:d7:34:2d:b1:69:
ea:6a:6f:c1:c6:4d:80:46:22:b5:57:d3:bd:3a:c6:ef:c8:b1:
4a:5e:a9:c6:ce:8b:1f:95:18:ea:2b:dd:ba:ce:da:a4:28:2f:
70:19:ff:bb:28:52:9f:27:d5:50:82:71:04:1b:18:1e:42:43:
4f:95:36:8c:15:9e:03:da:84:0b:50:a8:80:e0:18:3e:72:82:
17:57:e5:55:33:07:fe:93:70:86:13:70:db:47:fc:8d:81:d8:
5b:42:d7:45:3c:12:47:fb:1f:1f:fd:bb:ce:f3:ff:c5:df:20:
16:52:e7:67:15:cb:c2:01:36:dd:d0:af:42:3a:92:8e:d0:cd:
c2:ae:f0:bb:5a:a2:cf:82:2a:79:36:89:64:54:8d:81:51:42:
6d:50:92:4e:cc:88:17:3e:95:c0:c0:49:aa:3c:40:9b:47:83:
83:e0:43:fe:2b:aa:5d:ec:45:59:c9:4f:d4:2c:9d:59:1b:0b:
b8:85:70:81:4b:6a:6e:51:27:57:d7:81:c0:de:7f:c0:6c:0f:
f4:c7:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:31:09 2025 by rpki-client