Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: sK/82dOzxse5P4WOVvZCPObYUbhSg7zg8PLr0Nbnc4U=
Subject key identifier: B1:24:3D:39:A2:EE:82:CB:1D:82:55:69:6B:06:4A:E9:49:EE:68:39
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 01967530241E92082E987681FFB668082F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 03:00:11 +0000
Manifest this update: Sun 27 Apr 2025 03:00:11 +0000
Manifest next update: Mon 28 Apr 2025 03:00:11 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: GilxYiwQOT3/ZbJc22E+8dWAsbuSp80JIAnMRcwr/5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:24:1e:92:08:2e:98:76:81:ff:b6:68:08:2f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Apr 27 03:00:11 2025 GMT
Not After : Apr 28 03:00:11 2025 GMT
Subject: CN=b1243d39a2ee82cb1d8255696b064ae949ee6839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:de:3d:1e:16:3f:ad:bc:9e:ec:2a:10:14:
2c:14:43:b2:44:47:a1:fa:f5:b8:3f:60:80:e3:8b:
42:13:a5:d6:74:04:5c:44:ea:2e:b9:75:e4:18:39:
8e:c0:3d:8b:1d:a5:80:4c:61:a9:b5:af:77:7c:4d:
6b:86:53:eb:08:6c:00:24:ca:e9:6e:24:2b:14:a3:
98:bb:0e:3f:92:fd:60:16:ef:ea:06:23:60:30:b1:
02:cc:15:d8:93:d2:de:5f:84:3a:9c:21:be:1d:a9:
61:9e:8a:b5:43:ce:e1:40:8b:cb:4a:e9:7e:d6:39:
97:6e:03:9d:93:2c:07:2c:ba:b4:6c:50:51:19:3a:
33:10:49:41:0e:54:4c:6a:e7:1c:7b:5c:23:f1:18:
c3:2a:36:d2:1f:a6:87:b7:c2:8c:21:9d:5b:4f:40:
63:12:1d:ee:21:32:07:aa:31:75:3a:c9:d0:92:89:
fa:ca:aa:a9:46:29:e7:a0:26:0a:db:26:2c:a0:38:
86:2f:4d:bf:a1:20:ed:fc:fb:44:93:81:b8:a0:e6:
b7:07:67:a3:17:e2:54:93:46:9f:51:8b:7c:b5:4c:
6a:3f:da:e2:ea:aa:88:4e:ee:91:2e:34:30:a7:4a:
81:e6:19:97:8f:92:b4:8c:51:66:23:73:1e:df:ff:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:3D:39:A2:EE:82:CB:1D:82:55:69:6B:06:4A:E9:49:EE:68:39
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a7:e9:6b:f4:13:58:ec:d5:17:4b:98:ad:05:f7:12:ff:6b:
99:5f:b5:ea:c5:a7:8c:f3:57:80:62:7c:a1:2b:3d:65:b3:9e:
f7:f4:b1:fc:c6:88:56:fb:c3:ae:f0:5b:5a:5c:d0:6b:ed:5c:
a8:11:ba:5d:67:a1:7d:2f:3f:52:fe:a1:e0:4d:bf:f1:68:3c:
f6:b4:48:76:b1:34:90:4a:23:27:30:54:99:06:84:3c:d8:dd:
90:4f:49:7d:e5:d5:c3:86:9b:45:ad:16:93:01:60:51:07:20:
ad:b1:7c:52:d1:b9:a4:16:72:a0:42:cd:bf:dc:9d:aa:3c:35:
5f:d3:3c:d3:c0:8b:2d:5d:34:17:87:78:eb:30:53:b6:80:85:
92:a1:47:4e:5f:5d:45:4e:f9:f0:04:34:96:c8:14:47:0c:72:
10:36:47:5c:a3:fd:93:1a:d9:4f:05:19:d1:6b:6d:04:ba:9d:
b7:40:d6:7b:5a:fd:59:c4:c0:ed:a0:d2:0f:36:b5:a7:16:5e:
ac:da:eb:ff:78:7d:48:c0:2f:d6:d2:58:3d:b8:e4:ad:39:89:
79:ca:09:0b:08:1a:9b:15:5c:8d:fe:bc:0c:6c:c7:14:c2:da:
5c:49:2c:b5:6e:08:e8:1c:22:ee:e5:40:8a:a8:03:f1:98:51:
ee:fd:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:51 2025 by rpki-client