Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: zOluH6ExfoKqvqgZtXlyNGBHa46hk5UHl8sy63jvOrs=
Subject key identifier: 27:E4:A3:58:73:FB:AF:6A:CF:E3:65:60:61:E9:E2:42:35:64:16:5A
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 019672664AAA99A3814DEA1D1E5765299406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 08FD
Signing time: Sat 26 Apr 2025 14:00:28 +0000
Manifest this update: Sat 26 Apr 2025 14:00:28 +0000
Manifest next update: Sun 27 Apr 2025 14:00:28 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: SEwby1l2vo7vNmLMQy24lnnHUFF6EEmt2kx8huiCOwE=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:4a:aa:99:a3:81:4d:ea:1d:1e:57:65:29:94:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Apr 26 14:00:28 2025 GMT
Not After : Apr 27 14:00:28 2025 GMT
Subject: CN=27e4a35873fbaf6acfe3656061e9e2423564165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:13:9e:0f:95:8a:69:7e:47:62:17:43:a5:
26:d4:05:cd:a4:f6:15:a7:95:03:79:6e:21:db:73:
83:33:f7:69:08:2e:e1:b4:4f:ba:40:46:1b:3e:ca:
ae:74:50:a9:a6:2e:20:56:23:cb:8c:12:59:02:75:
1a:33:90:d5:c7:b7:24:6c:44:5c:f5:bf:29:53:77:
6f:6f:26:e2:3e:3c:5e:70:ca:34:b5:3a:60:96:03:
84:8e:83:a5:d2:21:8e:0c:c2:f2:09:93:b0:0a:53:
d0:42:71:e2:d4:6d:1e:ca:cf:9a:e7:66:7d:74:c7:
c8:01:d0:ea:ca:c0:ab:7d:16:0f:2b:6c:cd:b2:70:
4d:de:c6:85:41:0e:24:be:1b:08:e9:27:ab:aa:a7:
c2:e1:6e:09:fc:f9:21:5f:db:b5:51:fd:12:52:87:
93:a9:86:cc:4d:16:7c:80:44:8c:c9:5b:65:27:3a:
e7:a0:34:02:8e:be:09:1d:8b:2c:ed:5d:e8:93:85:
cc:2d:95:c4:5a:7b:d2:6a:2e:7e:8b:83:b7:e2:9e:
3f:57:42:04:cf:fb:2d:23:96:cc:b4:f7:eb:47:b1:
4b:20:9b:07:c8:e7:df:9a:d9:22:ec:a0:05:ef:b8:
f8:e5:7f:86:67:fe:f2:8e:fb:3f:d2:04:51:bb:50:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:A3:58:73:FB:AF:6A:CF:E3:65:60:61:E9:E2:42:35:64:16:5A
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b1:04:e7:4c:19:5e:59:28:cc:15:42:25:bd:2f:47:63:28:
ea:cf:22:e6:fa:6d:70:30:a9:82:81:a6:5b:05:ed:45:35:c3:
66:f0:62:08:4a:0e:8b:e5:0c:8a:93:bd:da:f1:f5:35:21:94:
64:47:48:33:e3:53:b3:7c:3f:65:da:c2:31:6f:ad:9f:51:ac:
0b:74:33:4a:2f:00:42:38:d9:e5:df:de:44:97:c5:5c:7c:f9:
c8:c6:d7:50:d7:47:a9:f6:36:f2:40:b4:85:d0:82:1b:5d:3d:
3a:d1:07:7b:cb:ff:28:9e:0a:5e:14:63:7b:95:a8:26:16:34:
1a:40:9d:94:7d:f7:bd:17:75:7f:d2:fa:b2:14:dc:ca:45:6b:
ce:f4:a0:ff:1d:2e:a9:13:0f:3d:fc:35:f3:e1:b0:cd:89:28:
4d:7a:f9:8a:da:a7:74:2c:33:28:3f:91:8b:e3:c5:d4:d1:f8:
ea:6c:58:1d:6d:eb:98:4d:5f:05:d7:c4:5c:b0:82:6e:8a:c2:
82:f3:f3:1b:4b:32:6d:3d:a8:f4:b2:3d:5d:ab:5d:4b:c8:96:
3f:fd:bc:4d:79:5f:17:e1:e4:09:e8:78:51:09:6f:bf:42:7a:
1d:81:8a:ea:0b:82:cd:c7:c9:59:a8:21:3a:32:79:74:fa:69:
46:08:38:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:33:34 2025 by rpki-client