Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier: tJqlNY30nxFVNCeL38ijQqB/R3ey4aWv/A1lB6LkVlU=
Subject key identifier: 3D:25:0B:6E:DC:55:A8:20:E3:D6:96:8D:AF:A4:8B:42:AD:BC:40:54
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 01967DC67D5F0EEDAF812604ECBF2F7B46C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number: 0ACE
Signing time: Mon 28 Apr 2025 19:01:22 +0000
Manifest this update: Mon 28 Apr 2025 19:01:22 +0000
Manifest next update: Tue 29 Apr 2025 19:01:22 +0000
Files and hashes: 1: XFE7vlLQBmzJZc1l5vHs4bwPMqc.roa (hash: qLSFKwb/lB7qwkyIoSUv9XJpnCetif9CbXA/zmT2Trc=)
2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: RMQ7yGkEAIM1dVXtpT3Xi3/RiO7FweOLMLbzGAFoo4c=)
3: eg48StlWCUn7X3RwRMM9IyTvRbk.roa (hash: GtElILT2eBg2EORjHkOJ3T4qKsc3NbDsadrpgQ1LlKY=)
4: wg5YIR4Y9RixLNkQqF7w7wmBrEw.roa (hash: 1MuzEvANE56SuPGyGU0hUCAeP9aNoicfYJymGmBNFKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:7d:5f:0e:ed:af:81:26:04:ec:bf:2f:7b:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Apr 28 19:01:22 2025 GMT
Not After : Apr 29 19:01:22 2025 GMT
Subject: CN=3d250b6edc55a820e3d6968dafa48b42adbc4054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:67:dc:17:f4:b5:c7:bb:da:f4:3d:57:b3:
c4:21:6b:90:5a:02:c8:0a:d0:a5:47:82:8b:82:ec:
a4:c9:bf:f4:23:c4:fa:14:02:21:be:1a:c9:1c:e6:
54:97:af:f2:16:df:9d:42:ee:c4:73:9b:e1:67:25:
73:70:62:bd:68:1e:1f:59:43:e4:2b:ef:ca:9e:ec:
26:6c:6d:50:aa:c6:f0:37:fd:77:23:d4:b2:ce:57:
a7:29:c1:00:f3:02:39:c5:ec:db:3f:bd:35:bf:df:
bb:7f:f9:d1:93:b8:04:5d:b0:e6:45:72:a6:49:8a:
7b:f3:5e:fb:46:30:f7:89:3b:0c:c4:81:48:75:1d:
cb:f2:9c:8e:df:9b:47:15:0a:bd:ec:5b:0c:11:97:
65:5c:68:d5:a4:60:38:9b:82:16:59:a4:c0:86:3a:
21:5c:a3:7b:bb:a1:31:a5:5b:b1:1d:67:f2:73:83:
cc:b7:fb:66:61:e4:db:c6:8e:11:6c:33:92:44:9b:
3a:25:05:0d:75:28:8e:cd:3e:fe:43:90:26:69:a0:
08:cf:d4:5c:88:29:68:61:e0:73:16:20:bc:a8:86:
f2:0e:68:81:0f:d4:6c:0e:28:8a:12:92:7b:c3:aa:
d6:4d:56:8d:cf:a8:87:b9:be:35:57:09:d7:e6:c5:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:25:0B:6E:DC:55:A8:20:E3:D6:96:8D:AF:A4:8B:42:AD:BC:40:54
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:a1:8b:75:cc:d0:b6:f2:f0:d7:f3:01:6b:68:75:21:fc:
0f:60:a5:43:6b:35:d1:ce:46:09:36:03:9b:14:87:2d:71:05:
7a:ca:88:de:9c:66:a3:85:24:a0:42:db:bf:70:5a:23:5e:a8:
bb:17:aa:f0:87:78:44:0d:6d:52:3a:33:49:28:59:01:f8:98:
83:90:d3:24:33:a1:40:ef:15:27:c4:52:75:0e:8b:e6:c3:c2:
d9:c1:91:f0:af:ac:60:40:f9:2b:59:a3:43:fb:10:f2:3b:1f:
d7:d2:bd:3d:6a:23:50:bd:1c:2b:8e:aa:9b:e1:42:96:6b:73:
ca:b3:b7:c5:c3:e5:b7:9b:70:1b:d6:df:1f:c2:fd:e6:4b:c9:
93:59:9e:28:34:98:d6:4b:2c:2b:ae:86:ba:2c:67:06:71:6c:
f2:9e:00:a3:bc:28:8d:fe:3f:19:7c:ec:03:3f:ec:9a:fe:7f:
12:2d:06:4c:94:73:55:0f:d2:e5:08:5d:cc:34:61:ed:37:6c:
72:c7:9a:05:cf:39:43:a9:3e:51:30:fb:0d:94:2a:fc:9a:46:
33:74:a2:52:50:93:6b:63:94:a4:93:39:1f:cf:dd:b7:a5:c4:
46:13:56:ac:dc:f9:22:7c:65:82:4a:ea:16:a8:4e:d2:f1:19:
a6:47:ac:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:50 2025 by rpki-client