Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: 5/7KE86pQ9dmjtGsLwaqO2/ypON3QwlDRmjTzHfDYGo=
Subject key identifier: C2:D8:71:85:A4:CF:A6:0E:38:68:A3:2F:6B:7F:24:55:AA:99:74:63
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 01968736C8B07FC02A73E0DC668C16367411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 15:00:36 +0000
Manifest this update: Wed 30 Apr 2025 15:00:36 +0000
Manifest next update: Thu 01 May 2025 15:00:36 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: prIo7HYymXf5PoCOcWoJIvawl520kdNMGMqKjED3+Vo=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:c8:b0:7f:c0:2a:73:e0:dc:66:8c:16:36:74:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Apr 30 15:00:36 2025 GMT
Not After : May 1 15:00:36 2025 GMT
Subject: CN=c2d87185a4cfa60e3868a32f6b7f2455aa997463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:a3:c8:4a:ef:34:6a:c6:95:4e:39:09:8b:
8d:b9:3e:ac:62:84:91:dd:35:4a:37:35:a8:3c:67:
62:e2:f4:21:b3:52:91:04:4f:ec:0f:44:db:62:73:
60:40:a3:1f:84:0b:91:f9:da:c8:05:76:38:ba:64:
33:58:16:ab:ff:3d:60:38:2d:e0:68:d1:70:9e:e0:
59:28:8e:98:5c:8a:75:64:31:e7:86:52:05:14:09:
5c:84:27:75:d3:54:1f:dd:59:37:98:77:0a:c0:68:
67:80:cb:86:e7:e5:b4:cf:35:7d:ce:85:2a:a2:34:
6b:e9:44:29:f3:6a:e9:d4:0e:0f:63:39:c5:c9:a2:
a8:90:91:72:53:7b:aa:9f:d1:01:ab:02:83:ee:be:
39:7d:0f:3b:ce:fc:69:83:fa:4d:16:5c:f2:ab:47:
ed:f1:41:d7:ae:39:3e:7c:17:6a:74:c5:f9:9d:26:
c1:03:c9:2d:a2:f5:cd:55:25:51:8f:b7:bf:cd:94:
26:4d:50:5f:cb:7b:4f:fe:be:af:a6:13:d1:ac:71:
c2:7b:7a:d6:72:d7:ad:7b:a8:fa:dc:90:f8:91:3e:
d2:7d:22:14:f3:71:9b:0b:0b:9b:bd:a6:e6:87:f3:
65:87:3f:b6:89:ec:2e:f8:58:d5:2d:b3:30:a8:ff:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:71:85:A4:CF:A6:0E:38:68:A3:2F:6B:7F:24:55:AA:99:74:63
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e7:74:e7:de:18:3f:6a:e5:e1:3d:f3:4f:c5:fd:54:a8:23:
15:94:f5:2e:e5:fd:82:44:4f:1e:90:ed:25:13:82:97:12:d4:
84:cd:d5:da:ce:44:0c:11:5c:b5:f4:66:44:c2:74:b0:6c:d0:
a4:78:8b:dc:91:00:69:3e:3e:43:9b:04:4f:e8:52:73:03:11:
1a:66:aa:2e:0c:58:2c:fd:0a:18:95:25:57:85:d5:bd:1f:d7:
38:ff:35:d8:8a:b6:2e:47:c3:0a:9d:0c:5d:30:40:2d:f0:9e:
e4:89:c4:78:12:8a:81:0f:c9:34:68:60:6a:88:bc:f6:3c:79:
bf:b3:29:ee:3f:19:c3:cc:4f:d7:66:73:0a:26:94:8d:d2:bc:
b1:6d:46:86:21:d9:7d:46:18:e6:8b:bd:b9:5f:42:9c:c3:34:
7c:4a:56:8e:7e:3a:7f:a2:3d:92:3e:2a:c3:f9:c5:35:14:52:
0c:db:88:49:3a:7e:0a:8a:eb:28:70:6e:6d:e4:c3:33:30:5a:
ae:b4:ea:17:a6:2c:ee:ed:b2:0f:0b:04:09:0f:51:4b:61:89:
9a:08:02:d8:94:03:55:56:8b:4a:95:92:83:1c:3c:03:cc:2a:
5a:b9:3a:72:e2:cc:e6:63:6e:16:e2:c9:c9:89:81:62:ad:a9:
c0:ba:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:40:17 2025 by rpki-client