Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: mWbD8xAw29PZC3GBxHyxfKx73XGlm0dzg1Rg9ne/pUE=
Subject key identifier: C9:F0:59:6A:C0:41:2E:90:74:57:DF:33:57:89:F2:AE:6F:05:97:3C
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019674C2A4FF112871A4A55BEB7626FAFDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0300
Signing time: Sun 27 Apr 2025 01:00:35 +0000
Manifest this update: Sun 27 Apr 2025 01:00:35 +0000
Manifest next update: Mon 28 Apr 2025 01:00:35 +0000
Files and hashes: 1: 9sDTJcHPUOu0xVqrTxWLOBaQ64A.roa (hash: vptvr3J25ztlCmZtkSM0UG2WMV8luXgqTlBmKUmGLHA=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: SasoB1QDegf1+25TB60sp8WGXvRTGCM/Wvnz0Go+3TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:a4:ff:11:28:71:a4:a5:5b:eb:76:26:fa:fd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Apr 27 01:00:35 2025 GMT
Not After : Apr 28 01:00:35 2025 GMT
Subject: CN=c9f0596ac0412e907457df335789f2ae6f05973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:2c:81:95:c0:95:06:44:5f:0f:d5:ee:85:
f2:de:7e:3a:1f:d6:c4:4e:aa:3e:b4:ac:89:fe:60:
16:12:f4:07:98:00:f4:61:db:ad:3d:00:ea:2f:dc:
55:15:aa:c9:14:97:40:e6:14:c2:9d:2d:f8:f3:91:
53:d5:4d:fb:b1:8c:9e:3d:57:cd:21:f5:72:05:2a:
ee:da:d8:86:2e:34:c1:c2:67:9c:82:46:fa:ed:28:
8d:78:c0:aa:06:66:08:a7:8e:23:57:06:e9:1e:cd:
17:d9:25:e3:0b:94:bd:09:a5:5f:95:ef:ef:7c:8d:
e0:bb:15:56:7f:74:ac:2f:76:41:48:f2:42:c5:83:
ca:5e:bf:d0:fa:43:47:38:7e:fc:ab:fd:e3:17:65:
3d:48:5a:3c:68:61:f9:c4:cf:59:5a:09:1b:97:85:
5a:33:7e:8f:5a:77:20:94:7a:fa:5d:a0:bf:60:e2:
a6:37:ae:1a:33:e9:7f:c7:bf:d2:b0:97:ff:bd:50:
f9:08:3d:59:bb:f3:ec:c8:c3:ed:b3:e6:9f:c4:d5:
4f:b6:cf:b3:64:79:4f:c9:67:10:7c:44:62:19:37:
f7:4b:6a:58:ed:96:97:e2:64:1f:99:75:95:54:8e:
f7:a9:be:cc:71:e7:19:08:95:c0:93:10:df:ee:5c:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:59:6A:C0:41:2E:90:74:57:DF:33:57:89:F2:AE:6F:05:97:3C
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:1c:35:e0:63:cd:f3:81:3f:0b:da:57:bd:eb:cc:16:31:
48:d0:95:77:c4:2b:42:4a:24:27:ee:62:a9:a2:c0:2a:b0:a1:
32:88:01:ee:84:cf:c4:86:d4:ab:05:8e:12:a6:8a:39:0f:74:
3c:be:a1:b8:74:77:e2:1b:fb:23:86:41:eb:87:28:45:e2:d1:
ec:fb:14:04:7d:e7:52:cf:40:e9:2f:23:da:3a:da:6c:bb:64:
32:73:81:19:4d:14:39:54:13:67:58:38:b1:df:52:8e:c4:c6:
9a:c8:f1:19:73:07:3c:ab:6a:b4:8c:be:c5:3a:3b:bb:41:68:
00:a7:21:8a:ae:21:cc:b0:74:89:4f:80:11:bc:be:0a:0a:a5:
56:fd:16:b2:0e:e7:a5:82:80:a9:5b:1a:8e:a8:1f:26:c4:72:
25:3e:25:de:f5:a7:e5:ce:98:56:49:4c:63:63:47:3d:f1:49:
17:84:f7:b0:9a:a5:bd:d7:10:ec:22:1b:16:23:52:ed:b1:12:
85:1a:5e:4b:8a:85:d0:54:9e:25:b9:a7:d1:18:b0:89:ad:11:
00:89:71:96:a9:1c:21:0e:dc:9a:2e:82:81:67:d6:29:5c:fe:
c6:06:0b:72:f2:55:fb:c5:ba:5e:41:c4:10:ae:e8:4d:20:af:
db:f6:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:12:39 2025 by rpki-client