Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: WXlGtcUU5VpYg6Chv/6WB2rORQwmJmi8QDaq6jo1G98=
Subject key identifier: 25:E4:B6:4E:4D:11:92:02:9A:47:92:65:6A:0E:D2:5E:3E:27:F0:8D
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 01967CEA36D0FA80A8AED2DFE4B9F13C6063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 0187
Signing time: Mon 28 Apr 2025 15:00:46 +0000
Manifest this update: Mon 28 Apr 2025 15:00:46 +0000
Manifest next update: Tue 29 Apr 2025 15:00:46 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: u/8EogER+Lo82eArCN5AeNOL8Mq7qu59j6vH43TAnbg=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:36:d0:fa:80:a8:ae:d2:df:e4:b9:f1:3c:60:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Apr 28 15:00:46 2025 GMT
Not After : Apr 29 15:00:46 2025 GMT
Subject: CN=25e4b64e4d1192029a4792656a0ed25e3e27f08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:51:e0:ff:88:31:fb:1e:5e:54:7e:e4:cd:
57:3c:83:60:5e:e9:14:85:bd:6c:3d:6c:1f:d5:1e:
67:8f:30:52:8c:fe:58:b7:5b:81:d8:f8:73:19:1e:
34:a9:6c:13:75:7a:6c:46:cf:f1:08:3a:bb:f1:31:
f1:c9:4c:ac:bb:6f:a2:b7:0c:fe:e0:59:bb:68:69:
ff:11:c2:c4:13:3c:1f:5c:6b:1d:bb:3a:5a:57:5a:
01:37:7b:10:4b:a0:72:af:97:78:ec:cc:2f:73:3f:
60:f5:39:aa:b0:34:1a:df:cd:31:93:ec:6a:ac:09:
b6:e8:75:13:58:fa:ff:80:a2:ff:70:c0:18:82:09:
0a:04:ce:ac:e5:e2:04:38:8c:36:6e:f7:67:9e:48:
a2:4a:d3:d9:b9:63:79:f6:e2:8d:08:22:a1:15:a6:
30:3c:fc:3e:a7:6b:9c:78:91:b5:99:b8:c3:67:2f:
a1:aa:59:51:27:f5:a7:6e:44:47:7f:c6:73:45:50:
2f:3a:93:9a:31:47:71:ae:20:03:b9:ee:fe:d5:cb:
a8:85:9d:5b:16:97:05:26:08:fc:62:62:e7:0e:94:
4e:6e:13:fb:c3:31:a1:71:d7:12:bb:b7:31:7f:2b:
37:29:31:d7:27:2b:76:42:6c:19:00:99:9e:62:23:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:B6:4E:4D:11:92:02:9A:47:92:65:6A:0E:D2:5E:3E:27:F0:8D
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:81:50:42:35:4d:96:57:9e:6e:c9:83:55:23:68:d5:5b:
79:33:cd:ed:c1:68:86:dc:17:e7:02:94:d9:fb:44:10:e9:a7:
e5:ea:c7:57:7c:69:c3:ab:1d:b2:2d:d4:cd:72:63:8c:fa:f8:
d7:51:5a:49:3c:01:6c:74:81:45:5c:d3:8f:8e:9f:41:55:7c:
14:5d:0f:72:40:cb:52:8d:59:d1:55:3f:64:b3:52:92:97:00:
77:7f:f3:b9:1c:a9:06:ea:72:7a:b7:72:4e:83:ad:df:05:2e:
58:c5:23:85:ad:7c:13:1b:a6:a5:b3:6d:bd:32:85:b7:73:0f:
14:34:ba:63:5f:48:ce:61:32:e0:8d:cb:db:44:c0:89:d2:2d:
6d:5a:6e:9b:cd:cb:b0:4d:cc:9d:ec:b8:34:71:f3:ae:22:e7:
e8:41:0c:4a:1c:6f:8e:0d:23:f2:44:5e:42:0d:cd:ef:d5:c9:
c5:7b:28:3d:2a:d5:38:7b:d5:6e:b5:c3:c6:2a:9e:45:b8:1d:
f9:0d:4d:98:5d:81:61:ef:ac:e2:1f:f0:a5:3e:c7:76:1c:6f:
ec:84:b8:6b:15:ec:c8:0e:c0:dd:23:93:b5:17:22:ae:95:4c:
34:21:55:f2:24:01:12:4e:61:fe:0d:47:cb:d3:aa:f0:be:20:
c9:0e:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:05:06 2025 by rpki-client