Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: 5b763fA5k1/eFzTIPhFCe2370ItSEK2lgbifFrM2LHA=
Subject key identifier: A1:83:F8:EC:E9:90:3A:C1:94:92:B7:60:34:45:0F:39:99:47:BF:67
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0196771E857FE067B752E1C419C2D79824D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 114B
Signing time: Sun 27 Apr 2025 12:00:11 +0000
Manifest this update: Sun 27 Apr 2025 12:00:11 +0000
Manifest next update: Mon 28 Apr 2025 12:00:11 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: j1sSdiELqze4l7ReBPjRIjUFAij5ZDyOZZh1p0rtdho=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:85:7f:e0:67:b7:52:e1:c4:19:c2:d7:98:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Apr 27 12:00:11 2025 GMT
Not After : Apr 28 12:00:11 2025 GMT
Subject: CN=a183f8ece9903ac19492b76034450f399947bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:53:29:a7:45:13:63:21:48:ad:43:68:95:
06:20:e2:e7:95:b5:b5:ad:9a:4d:42:6a:a0:f2:af:
bf:ba:1f:0c:ff:64:d9:db:7a:27:10:2d:c7:73:c6:
78:9f:89:33:c7:dd:36:e6:01:67:73:59:ea:0b:d7:
7d:b8:f0:95:d2:30:57:8a:c2:4f:bb:ba:e9:7a:2e:
5b:c1:0d:1c:7a:fa:e1:83:54:8a:0e:40:78:d5:f0:
a4:19:38:af:9e:86:c4:83:1a:e6:47:ce:21:23:55:
80:e7:74:fd:d1:13:4d:72:b6:d8:df:39:4f:f9:37:
69:26:a6:98:d7:cd:d9:5f:12:3b:fc:bb:b6:58:94:
94:d3:d8:05:62:ef:29:e0:24:16:29:48:a4:57:e5:
d1:45:24:d0:dd:6c:dd:1b:21:9c:c2:0a:c9:48:0f:
1f:2f:8f:12:be:3e:fb:57:25:a5:91:9f:0e:ba:26:
bc:c4:0f:e4:c4:a9:f4:69:23:c7:11:d4:8c:25:11:
df:6e:67:42:db:f1:cb:be:63:50:0b:17:4c:35:9b:
54:69:1b:33:1d:a5:0b:06:a5:04:bf:4b:26:4d:cb:
7b:34:fc:14:1d:51:9e:ed:3c:b0:4d:38:af:fd:11:
71:31:1c:a8:5d:3f:99:67:6f:fb:cf:03:67:94:1f:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:83:F8:EC:E9:90:3A:C1:94:92:B7:60:34:45:0F:39:99:47:BF:67
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:69:f3:98:07:44:04:0e:33:be:1f:f8:b6:65:5c:51:19:e8:
42:31:3c:67:47:fe:49:b0:ca:79:c8:ff:94:f6:dc:17:93:a4:
10:32:22:94:df:56:b6:b2:73:eb:7d:04:3f:43:2c:a5:1f:4e:
a0:ac:5f:40:d7:98:1e:4b:ac:6a:0c:39:d0:e6:26:36:86:a7:
38:b7:37:11:7f:23:65:d2:01:ce:64:d3:d7:90:ec:34:19:aa:
15:a2:b7:77:29:c7:06:4d:3b:6f:37:f4:f0:d6:54:1c:f7:3a:
38:17:8d:3f:ac:e2:d1:62:da:9e:37:23:c4:78:8c:76:d8:07:
2c:86:ac:cf:f6:20:bd:09:05:06:07:1a:5f:ac:dc:30:cd:de:
3e:49:2d:ef:6f:de:20:4c:e8:33:f4:24:ac:f9:d2:40:99:bc:
3a:1c:c3:f1:a6:40:16:a2:e1:ea:d7:25:bf:6a:1d:8b:1a:cf:
0a:cd:45:d2:20:b5:9b:d6:a7:75:17:09:42:c9:2f:88:29:24:
a3:51:e6:d8:2d:a0:cf:07:5f:80:b8:1c:64:dc:37:18:0e:3e:
58:f4:42:09:1d:0a:56:82:43:5b:f4:af:5e:0c:c6:7c:09:6f:
f5:97:0c:5e:24:c7:66:bd:e5:82:57:47:c1:73:bd:65:81:46:
db:e6:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:35:47 2025 by rpki-client