Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: ikc+mm1AGUAq+vgluz0E2W+ZjqQ5qdo95Q1gi+i1hVk=
Subject key identifier: D5:A9:D1:1F:C4:48:E8:00:C9:93:A9:53:32:19:3A:6C:DA:FF:F8:AC
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019678D67AE01783107BCCA32835B3B375DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 0EF2
Signing time: Sun 27 Apr 2025 20:00:44 +0000
Manifest this update: Sun 27 Apr 2025 20:00:44 +0000
Manifest next update: Mon 28 Apr 2025 20:00:44 +0000
Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: TtGDUyCfaTDuBtfkylaurdDju0AZ+YZeaXOiQF7RhQI=)
2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:7a:e0:17:83:10:7b:cc:a3:28:35:b3:b3:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Apr 27 20:00:44 2025 GMT
Not After : Apr 28 20:00:44 2025 GMT
Subject: CN=d5a9d11fc448e800c993a95332193a6cdafff8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:1c:9e:9f:6b:11:0b:30:35:8f:9d:ad:cc:
83:5d:14:72:66:cd:2e:45:f3:c3:2b:a7:d1:b0:e6:
95:04:4e:b1:36:ed:c6:72:c4:23:4f:1e:27:94:0a:
07:9a:15:7a:aa:2d:d7:69:27:be:f9:f3:27:43:d0:
61:1b:3d:11:90:40:a9:0f:c6:9f:3c:cb:1e:c3:76:
f4:04:4a:02:d8:b0:f3:74:86:61:17:de:65:c5:a1:
b4:68:81:af:8d:35:c9:ab:1c:e7:e4:0c:6e:c6:53:
d5:f2:09:e3:bb:23:b7:8e:bd:95:95:47:b4:91:3d:
31:2d:3b:46:1f:c2:aa:d4:9d:5c:b8:92:66:ec:0b:
36:28:bd:18:b7:98:49:88:fd:7b:97:a0:37:5b:4e:
a5:72:5a:66:ac:29:0c:28:79:90:1f:36:24:4c:3c:
36:fa:6c:3e:75:1b:7e:ca:a3:3a:89:75:a2:3a:28:
9f:43:bb:19:3d:ea:3e:b9:d1:d2:03:26:ae:77:ea:
3d:f5:e2:c3:1a:c3:ac:d7:ba:69:05:86:5e:33:87:
ba:13:74:e5:92:c0:f1:9a:d8:b9:b1:36:c8:f3:b2:
40:c3:58:ae:e7:87:79:c3:da:f4:b3:57:08:42:69:
02:14:73:6d:f1:c1:c4:d2:c8:fc:df:e3:11:2a:07:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:D1:1F:C4:48:E8:00:C9:93:A9:53:32:19:3A:6C:DA:FF:F8:AC
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:74:86:ef:8a:a3:e5:89:9b:ad:e0:f2:60:75:7e:db:74:
7e:5d:f5:51:99:b8:64:0a:73:d2:51:00:41:bf:95:8c:43:27:
ba:2a:bc:b5:ca:bd:33:46:33:da:4e:7c:3f:5a:cc:fd:b6:68:
20:da:c2:de:2b:88:09:2c:5e:12:b0:e9:81:db:38:ec:3f:a7:
5d:cf:29:4d:bf:1e:85:0f:61:09:2f:3b:ce:d6:ac:5e:34:31:
c0:15:44:05:76:9d:a2:4b:97:d1:ad:27:c9:6d:f6:3b:a9:bb:
1e:81:ca:91:a0:03:bd:5b:12:3f:90:91:8e:b7:a5:72:86:b9:
11:03:51:ae:4a:00:fd:e1:d6:7c:49:3d:20:80:af:d1:04:3a:
f7:2c:1c:42:9d:27:ff:eb:6b:f7:3a:0e:d8:0b:40:88:27:06:
a8:c5:8e:ab:f4:33:1c:53:b0:0b:38:0c:d0:e9:c1:b2:35:a9:
93:c6:77:b6:a4:14:c5:af:34:65:5f:40:3a:f5:ff:de:92:8c:
36:07:c3:7b:ec:e6:c0:42:d2:bf:94:99:f3:17:91:e1:66:7a:
4b:f8:98:dc:7a:19:89:ed:e9:9c:43:a4:4d:11:b6:e7:25:19:
31:57:e5:f9:60:e8:c7:bb:9e:cc:70:ed:ca:99:1b:58:e0:95:
45:42:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:50:31 2025 by rpki-client