Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier: ytMuI4NYm1xZ2bEZ7vtEKd+y/Go4oztzfqa5CNOrn5c=
Subject key identifier: 2C:F2:DF:C0:DA:1A:5F:FF:E6:08:23:3E:B4:A5:20:B6:8F:AB:4B:28
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 01969115D92E5E4D903839684D7E9EF897E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number: 0D54
Signing time: Fri 02 May 2025 13:00:50 +0000
Manifest this update: Fri 02 May 2025 13:00:50 +0000
Manifest next update: Sat 03 May 2025 13:00:50 +0000
Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: hygoOOsisRsT+qog6a22dQ9TuHmXE4OtiBgTwAUJ4HU=)
2: aeqC4EE0KUZ0Hdgey5muRSCYEvc.roa (hash: aH7XcxnHv3qEq7LQXqlBVrjotePFAy5nc/77ZI52Ock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:d9:2e:5e:4d:90:38:39:68:4d:7e:9e:f8:97:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: May 2 13:00:50 2025 GMT
Not After : May 3 13:00:50 2025 GMT
Subject: CN=2cf2dfc0da1a5fffe608233eb4a520b68fab4b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:c7:85:ec:d3:92:16:c3:c0:7f:9b:39:1d:
35:e2:3b:a4:b7:06:d3:d3:33:71:26:42:62:61:ba:
d9:f2:14:17:a2:2d:12:43:e7:9f:f0:12:42:04:88:
b9:43:b3:04:67:20:1b:1f:94:54:be:4f:03:7f:36:
72:d4:f8:8b:7c:e6:d3:7e:97:d5:ab:31:97:a6:d9:
c0:1c:93:a1:e0:35:dc:9a:77:c6:38:61:db:a3:62:
46:50:16:56:9b:fb:4b:cf:c5:b7:67:51:28:36:2d:
04:f6:cd:9b:d4:4a:66:f7:e6:24:89:ef:e6:81:c7:
7e:a9:23:d0:bb:75:86:7a:9c:b9:92:47:09:36:09:
63:aa:dd:7a:c4:a5:06:31:b9:86:3b:a2:2a:fc:34:
5c:e6:02:ab:f9:59:91:99:fe:6c:29:d8:72:e6:d8:
3b:bc:db:3d:97:d9:19:5a:32:fc:ba:9b:44:ad:5e:
2b:14:c6:f8:79:c0:d4:9c:bf:3e:06:43:8e:5a:75:
4e:d2:9a:95:3b:05:b8:77:2d:b0:a5:aa:0f:a0:40:
d0:90:68:9b:b0:8f:5b:a2:2f:60:35:29:c3:be:5e:
82:0f:24:0d:dc:b7:fc:6d:0a:be:e1:b2:90:cf:5f:
6e:87:3b:82:d5:46:3f:6f:bf:43:da:8d:1d:5c:c8:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:DF:C0:DA:1A:5F:FF:E6:08:23:3E:B4:A5:20:B6:8F:AB:4B:28
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4e:76:2c:a1:f0:45:b2:3d:24:2c:76:d3:75:c9:3e:50:20:
ad:82:5a:93:82:e8:2c:73:66:93:db:fd:f5:c3:89:4f:37:49:
ae:86:cd:22:6d:ad:63:a9:28:23:d9:da:e3:e3:63:17:ae:63:
47:94:55:d5:89:11:f6:1a:ae:5c:0b:29:d0:b8:2c:32:aa:ca:
86:5e:0e:62:2c:0a:1c:98:dd:1b:b1:b9:40:2f:d6:2d:04:8c:
3a:bb:da:b7:5d:05:59:76:8b:1a:44:02:6c:a8:17:fd:5e:f6:
c5:36:02:b4:27:39:ca:fe:d1:d9:c6:29:2b:80:8b:d2:7e:4c:
29:0e:2b:f7:ed:71:23:4b:e0:cf:04:99:fa:ed:51:94:d3:54:
49:e2:ea:de:1a:e0:32:84:a2:70:7c:56:56:98:a1:4a:41:14:
45:e2:51:5e:67:20:e2:86:8e:1e:15:0e:f8:cb:eb:77:6c:bd:
8c:6b:ae:04:47:61:75:75:9a:dd:62:29:12:d5:5b:fa:6b:e5:
e4:4c:bf:22:95:c8:12:9d:84:50:ef:b9:80:fb:a4:c8:67:23:
74:fe:0d:30:6f:58:c2:3e:a9:6e:f3:86:81:a0:19:5b:f1:f5:
af:a8:eb:4a:f9:6c:39:03:f9:7b:c7:77:b2:4e:cc:27:c8:b7:
a3:4e:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:00:02 2025 by rpki-client