Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: 1vU9U5p6TS6tf/h0eLj0giOFrRsSdThfvqbIz6iOPlA=
Subject key identifier: D9:69:5C:7B:E3:A5:D7:D4:45:F6:E2:91:2F:45:F4:AB:E0:77:1E:50
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 01967A1FFF13D8D4AC52309F0969C26AAD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 02:00:39 +0000
Manifest this update: Mon 28 Apr 2025 02:00:39 +0000
Manifest next update: Tue 29 Apr 2025 02:00:39 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: FK5wEUPFIjso4E4KifAlWn22TWkLgoecjP0nvEDJvws=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:ff:13:d8:d4:ac:52:30:9f:09:69:c2:6a:ad:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Apr 28 02:00:39 2025 GMT
Not After : Apr 29 02:00:39 2025 GMT
Subject: CN=d9695c7be3a5d7d445f6e2912f45f4abe0771e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:63:f6:13:89:5d:70:01:74:1d:cf:0a:65:
27:b4:59:90:a3:52:ec:bb:d1:b7:e5:97:d3:c6:00:
be:ba:26:2e:57:c2:99:13:21:7f:66:87:63:9b:d0:
a4:9a:76:11:ba:9c:59:b4:d3:d8:4b:8c:83:84:91:
89:70:88:c8:4d:4b:4e:af:5b:0e:3f:e4:f9:83:dd:
f8:66:23:8d:a3:0d:0b:10:ce:7c:8b:0b:17:41:cf:
ca:5c:d8:af:b7:91:ea:11:cd:1e:e2:32:01:94:23:
18:d6:36:43:70:22:e8:76:df:bf:16:e1:73:41:5e:
71:70:ab:e3:5e:09:ab:19:00:25:6b:9b:70:8c:ef:
18:d5:d4:5c:b4:18:82:7f:86:a7:c2:3e:a2:99:6f:
ba:c0:72:22:0a:e8:3b:fa:84:8e:96:d4:6b:37:b1:
d8:86:c5:15:04:dd:14:ea:58:f0:08:6e:88:6f:14:
03:7f:0a:2d:31:1c:a5:10:67:66:5f:4a:f9:bb:b0:
76:4f:bd:88:5b:8c:04:99:16:2e:e7:84:f4:2b:e6:
5b:5e:1d:32:40:35:ce:fd:e6:d5:09:57:1d:33:4e:
f0:9e:73:85:57:83:f0:ec:63:54:08:6d:9d:ee:fb:
5d:8d:0c:86:4f:11:19:39:37:ba:25:a4:e3:07:b8:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:5C:7B:E3:A5:D7:D4:45:F6:E2:91:2F:45:F4:AB:E0:77:1E:50
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:37:ed:94:fb:6b:e6:ae:b9:21:14:2f:0a:d8:c0:e5:4f:47:
d5:d5:a6:b9:5a:95:69:06:db:5b:75:01:47:e7:37:fe:2c:04:
cd:ff:74:66:d8:57:03:8d:f1:49:f7:eb:7e:d8:26:d5:63:74:
52:2d:92:02:40:59:92:5a:44:02:d2:2e:84:ff:54:d4:6a:02:
a8:66:b5:d0:30:f0:fe:f5:20:04:8a:3e:49:15:4b:d9:c2:e3:
e7:85:61:7a:f6:6f:d1:9c:dd:5b:14:2c:4d:33:95:fc:03:34:
2c:0b:a8:ce:98:cc:e8:21:f5:ee:ea:ee:30:c0:e2:f4:b9:d3:
a5:7c:cd:84:26:f3:5e:ff:8e:fe:24:79:c1:ee:c6:6b:ed:cb:
c2:71:f5:3c:b0:87:04:e4:74:68:59:99:ce:88:ab:13:85:e7:
ff:19:6f:db:be:b4:04:31:03:52:fb:f0:78:0d:1d:e1:c7:15:
aa:f7:3e:d6:87:66:bf:00:0f:5b:9c:4e:23:51:e8:66:8f:12:
d9:6b:af:5e:92:02:85:d6:2f:d9:84:fb:ea:01:4d:2d:a9:a5:
df:66:bd:a9:60:d9:ce:28:42:42:95:36:2d:db:da:f3:aa:dc:
c7:aa:0e:ec:c1:aa:a6:45:05:3b:0f:4d:ce:22:ce:a3:f3:e5:
e1:9f:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:01:36 2025 by rpki-client