Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: WNwtfHNh8vmmLkqBlmzgwQPZwA4QV0Xc3qTZG4qcY30=
Subject key identifier: 25:69:2D:3E:48:74:6B:EE:39:5E:47:59:11:FF:77:21:90:2E:77:F6
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 01967CB2BCD62D4C86EE1D6E0955FC33E711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 14:00:10 +0000
Manifest this update: Mon 28 Apr 2025 14:00:10 +0000
Manifest next update: Tue 29 Apr 2025 14:00:10 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: p28d66H5M7YOafKEEytfVYzfmYRDhcPp9DhG+UeASEY=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:bc:d6:2d:4c:86:ee:1d:6e:09:55:fc:33:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Apr 28 14:00:10 2025 GMT
Not After : Apr 29 14:00:10 2025 GMT
Subject: CN=25692d3e48746bee395e475911ff7721902e77f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:80:07:61:b8:ec:ae:0d:37:16:ec:8a:4c:
70:d4:90:b4:fc:41:cc:4c:7f:43:6f:4f:13:ed:ad:
80:c4:48:c9:20:f0:a0:1a:1f:f7:74:b1:0b:11:75:
b9:d6:f8:50:47:58:b7:c1:5a:6f:90:1b:89:a2:9c:
a4:28:ab:eb:ec:6e:50:f4:9b:7c:bf:61:0b:d5:b5:
04:97:ee:67:d9:39:db:3f:c5:30:09:22:83:30:a1:
66:38:65:b7:e0:b7:95:e1:3e:24:db:97:fa:88:2f:
ba:f2:cb:4b:15:3c:c6:20:66:8f:8e:63:98:8c:15:
fc:94:1d:04:55:7f:b5:b9:38:e1:cf:d6:e1:54:17:
6b:f6:b2:18:b2:6f:38:0c:7e:ef:f4:7b:7d:5c:30:
d3:af:93:a9:7f:82:fa:e9:a1:92:a4:d8:6f:1f:c3:
57:c9:1b:72:99:b3:7c:17:18:d0:4a:26:3f:dd:23:
87:b8:d3:a8:8a:3c:a6:f7:41:73:f0:1d:57:44:04:
3b:c0:ce:1a:3b:c6:8d:dd:11:a6:36:da:f4:f6:82:
ea:79:59:11:3e:e7:33:4c:af:d1:18:b8:c3:a7:38:
0e:e7:ac:82:7b:ae:fa:4f:0b:91:e0:41:74:25:d6:
9b:1c:67:cf:0c:01:be:d8:d4:d0:2c:60:58:66:e7:
65:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:2D:3E:48:74:6B:EE:39:5E:47:59:11:FF:77:21:90:2E:77:F6
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:96:41:dc:76:1a:fe:64:96:b7:cb:f5:17:fb:42:c3:72:
7b:31:70:50:53:98:3a:07:22:64:a2:d5:b5:e8:6b:3a:dd:56:
f8:b0:99:ea:84:01:fe:1e:64:bd:1d:12:86:58:91:43:56:63:
eb:d0:07:b0:45:4a:9d:0f:50:a0:73:ca:63:42:ab:37:f6:85:
6f:ea:f7:34:fa:26:5d:3d:91:8a:42:b8:7d:16:6f:fb:83:91:
02:3c:29:d8:70:a7:3e:ba:57:c6:86:af:fe:1b:ab:76:0d:60:
fc:23:13:47:02:24:d5:e3:37:d3:a9:9c:47:09:94:f7:4c:5c:
60:ad:51:7a:f0:2a:b4:76:e9:b3:71:ac:cb:48:6f:85:bc:12:
f6:35:c6:1d:ed:6a:d9:46:47:15:c2:ef:fe:80:c9:60:9e:15:
11:51:a2:b8:15:08:b9:62:cb:31:8c:e1:22:90:e4:38:66:c1:
6d:fa:5d:54:71:27:ba:4e:b7:ad:eb:3b:80:8a:03:b1:78:92:
6a:56:9d:65:f5:b0:89:53:a2:51:f0:09:c6:44:0b:14:ab:04:
fa:4a:34:84:21:06:2c:64:c7:31:f4:18:93:c1:dd:97:49:8d:
a3:e4:95:af:7a:c0:ac:9d:b0:30:26:96:cd:cd:ee:1f:5b:43:
f6:e5:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:41:17 2025 by rpki-client