Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: eVtRxlFTO4lmEcQV4SHYcJiu0+As78/RDoc/V/dE2yQ=
Subject key identifier: EB:9C:F9:DA:FD:03:F4:BB:A1:75:DC:73:A9:6A:22:2E:C5:6D:9E:30
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019682EBEC587EFC56B79D3FD3B1553F55B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1250
Signing time: Tue 29 Apr 2025 19:00:21 +0000
Manifest this update: Tue 29 Apr 2025 19:00:21 +0000
Manifest next update: Wed 30 Apr 2025 19:00:21 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: HIZKSWzLZdFF04gfmRI6AvOlG4luQ8euSitHW58sj5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:ec:58:7e:fc:56:b7:9d:3f:d3:b1:55:3f:55:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Apr 29 19:00:21 2025 GMT
Not After : Apr 30 19:00:21 2025 GMT
Subject: CN=eb9cf9dafd03f4bba175dc73a96a222ec56d9e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:15:5d:67:9a:f3:c5:12:4c:1f:d6:92:aa:
54:8e:af:f2:94:29:31:76:07:52:5d:50:1c:26:d1:
42:41:87:5b:62:a9:2f:e3:1f:f3:6c:87:d2:9a:f8:
89:af:1f:90:06:e2:b1:f3:60:69:dd:e4:f3:70:b1:
89:4f:fb:5a:f6:38:45:58:02:f8:e7:0d:61:6b:19:
3c:b5:6c:2a:b7:c7:89:0f:11:a5:a3:12:5b:64:b7:
93:1d:88:5a:36:bd:83:98:9f:48:12:2b:49:6e:ad:
02:bd:ac:c2:e6:88:85:8b:45:59:11:e8:8a:14:f1:
f0:b9:c0:2b:18:1b:f2:bf:3d:7e:43:2c:4d:26:e7:
32:b4:3a:86:e8:85:aa:c9:8c:b6:84:7f:09:18:c4:
ab:c7:f8:03:dd:24:5b:fb:81:b7:27:95:b1:48:83:
0b:90:ff:a8:b7:67:31:8c:c8:ef:2e:49:41:d3:03:
92:7e:7f:d6:be:bc:49:08:79:7f:2a:71:e2:64:a7:
0a:66:41:6e:aa:3e:5a:55:9b:12:9a:23:1b:9f:be:
5a:79:0f:2a:dd:a9:0f:98:34:40:51:b8:86:19:f2:
0c:af:f1:8c:29:5e:c6:2c:a0:16:aa:2d:46:b4:b3:
82:96:14:0d:5a:df:ac:cd:e6:7e:db:07:87:b2:25:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:F9:DA:FD:03:F4:BB:A1:75:DC:73:A9:6A:22:2E:C5:6D:9E:30
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0e:fe:14:b4:7c:46:ae:97:84:33:a6:34:d3:ab:0e:93:0a:
db:69:c0:fd:2c:02:26:69:dd:b7:68:e2:24:eb:83:c4:c8:33:
93:da:b5:3a:cd:a3:1e:73:bb:59:ab:b9:69:a1:cd:73:eb:01:
15:6b:a9:d3:05:46:b8:b8:be:ff:6e:e6:1d:9f:5b:9f:66:fa:
b0:66:de:a8:aa:52:d7:52:43:96:fe:34:fc:1b:a7:c7:69:be:
25:bd:50:62:b3:13:4a:94:32:24:d3:45:06:ca:56:39:3c:d1:
01:32:88:45:e7:6c:59:1d:04:72:67:b6:67:47:74:4a:9a:b0:
0c:75:fd:a5:04:93:6f:86:cd:8b:ad:d7:80:c2:6d:06:2e:13:
e3:63:64:e1:a0:64:a4:ee:52:0d:3d:72:fd:cb:75:8d:d8:ff:
39:c1:ce:3a:3c:b0:78:8f:0b:67:d2:47:66:5e:49:9c:98:9e:
4e:41:06:ba:98:c1:5a:f0:da:3f:fc:9a:a5:c0:96:8a:3e:96:
84:1f:82:6f:4d:34:f3:57:c6:97:96:5f:66:4e:9f:eb:9e:79:
6b:88:de:f6:43:fc:5b:12:46:d9:b0:6d:26:2d:b9:9d:52:b6:
88:83:71:76:44:79:f8:2f:e4:36:6a:35:ee:4f:13:1b:9e:fd:
3a:ed:31:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:15:48 2025 by rpki-client