Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: JR1i9baUgjsGkdS55YeM4xfrHYdC8wKdlNmd22PlZkU=
Subject key identifier: 01:03:A0:CF:B7:CF:F2:4C:7C:5D:5E:92:4F:FC:AD:88:5A:E2:63:C2
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 01967C4500D407567F98DC58A2DB458262CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 0F23
Signing time: Mon 28 Apr 2025 12:00:19 +0000
Manifest this update: Mon 28 Apr 2025 12:00:19 +0000
Manifest next update: Tue 29 Apr 2025 12:00:19 +0000
Files and hashes: 1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: /L4eCSnbg/DtiRpDjegt2HiYuJctsnpG5bgTEzWa0ZM=)
2: jokJ4cI7eIPzST9EcLtOSM-xX_8.roa (hash: TCebbhEEB8T5cCXDYMCJ8S4mvXhrW2F1v0Z6DU/4YuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:00:d4:07:56:7f:98:dc:58:a2:db:45:82:62:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Apr 28 12:00:19 2025 GMT
Not After : Apr 29 12:00:19 2025 GMT
Subject: CN=0103a0cfb7cff24c7c5d5e924ffcad885ae263c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:eb:d8:40:6f:a3:aa:68:1a:34:f1:1a:1f:
38:79:e4:de:e9:ef:b1:f9:50:56:24:e9:5e:42:12:
b5:65:8f:d8:3e:2b:72:71:80:14:38:ac:c4:dd:09:
e4:fa:8e:4d:7b:c9:21:9b:f6:1a:dd:c2:cf:b9:2d:
65:99:52:a5:5f:b2:3e:0d:63:35:29:b4:b8:85:d1:
eb:bb:df:85:20:8e:ba:d5:fd:55:25:19:6a:d1:8c:
5b:ff:7f:37:70:74:b6:80:c1:b4:eb:dc:8b:be:f2:
f3:fb:10:93:01:36:88:73:7d:a8:ba:78:73:52:55:
b4:f7:35:19:21:ad:20:32:ad:fc:14:bf:dd:9c:fc:
2c:89:a0:46:b5:c7:a4:4d:d2:f2:7a:4b:d5:99:0a:
50:7f:09:75:68:99:1d:4e:3c:c1:d5:88:50:ec:10:
22:d4:24:de:4e:38:ed:ba:12:07:ac:06:d6:92:d0:
46:2b:69:b5:23:47:18:12:dc:3f:cd:4d:27:d0:15:
db:50:b3:78:84:a6:21:d1:9e:8e:a7:88:12:05:0c:
21:fd:41:4f:03:c0:3b:17:48:2e:96:13:1a:dd:73:
84:ec:4f:20:5d:cb:dd:f3:17:09:5a:fd:bd:ff:c8:
d6:61:99:f3:30:85:58:e6:4c:7c:e3:5e:80:6e:a1:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:A0:CF:B7:CF:F2:4C:7C:5D:5E:92:4F:FC:AD:88:5A:E2:63:C2
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f3:f7:fe:b3:a5:b8:37:43:ed:ad:b3:15:99:fb:dc:52:34:
1a:cc:cf:fc:f1:1a:14:07:01:f7:92:d1:96:73:9c:cb:cf:e3:
dc:37:32:e4:5a:c8:c8:96:eb:bc:d1:86:e2:28:61:76:2e:e0:
18:f0:78:b4:a7:70:15:15:8a:48:27:c5:95:c8:0d:01:94:ec:
d1:b2:8a:c9:4c:85:ae:42:42:8f:64:51:37:2a:d7:54:de:62:
15:3b:2f:1d:03:75:a0:f4:bb:e9:02:c0:a3:52:c0:40:9f:96:
4c:11:06:41:0a:f5:4a:09:99:08:c1:15:8f:3d:46:77:18:d9:
53:95:55:f6:f2:5e:a3:c8:28:b6:50:3e:1c:f0:5a:8d:97:69:
3b:46:32:6b:6d:7b:db:74:07:c5:87:31:1b:41:4d:8e:9b:ea:
07:1c:23:53:10:e3:44:7b:12:89:9c:94:94:5a:53:c6:7f:3c:
e8:20:24:4e:68:70:85:af:56:d2:2b:a8:e8:a6:a7:bd:21:a4:
0a:93:51:57:64:31:94:57:a3:77:9c:91:30:13:c6:4b:d2:1b:
69:4e:a4:77:14:50:2c:a5:52:b0:5b:a6:c8:ca:7a:f8:50:71:
77:64:d9:27:66:a0:75:09:37:ce:c8:1c:92:28:ff:c4:bb:85:
9d:4b:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:44 2025 by rpki-client