Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: B33erKOfQug9UtFIuDVJ/o9gW74zoi8GI46l3JNL+Gs=
Subject key identifier: DE:97:88:9F:F4:43:5A:76:02:9A:4A:5F:25:40:E3:DE:1A:36:7A:3B
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 01967567CCEB5918FABD8E071118BE751490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0CE8
Signing time: Sun 27 Apr 2025 04:00:59 +0000
Manifest this update: Sun 27 Apr 2025 04:00:59 +0000
Manifest next update: Mon 28 Apr 2025 04:00:59 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: vBKnNAq8udPb+4RlBlGVgImDlaDluQP0GFKxXgI957s=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:cc:eb:59:18:fa:bd:8e:07:11:18:be:75:14:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Apr 27 04:00:59 2025 GMT
Not After : Apr 28 04:00:59 2025 GMT
Subject: CN=de97889ff4435a76029a4a5f2540e3de1a367a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:8e:fa:75:04:ac:67:28:c1:21:f2:9e:52:
b9:83:6b:e3:46:4a:ca:5d:61:23:53:fc:41:c0:f0:
32:56:de:9a:34:74:e5:68:a7:ce:d5:6d:ec:20:32:
d4:49:fb:6b:de:4a:e2:a7:c8:c1:d0:e6:90:6c:f1:
88:f7:96:ce:65:5d:01:e4:73:f6:aa:4a:c5:8b:d4:
32:6d:14:49:dc:83:26:61:64:8c:7e:ab:9c:f3:97:
6a:8b:33:f5:f7:32:a4:8b:d0:28:8a:52:58:5d:ac:
b7:5f:9d:57:33:1d:f9:ca:16:2f:41:b3:1c:29:be:
27:0d:25:93:88:ed:21:d9:9f:3c:08:59:4a:c2:4c:
b1:9a:ad:a3:8c:c9:4e:70:b8:4c:cd:74:ef:0e:45:
53:72:db:06:ed:62:2d:ab:26:20:3e:49:53:ff:00:
6e:c8:64:8a:8c:2b:eb:61:0d:b2:e0:e7:8d:3b:2c:
09:b6:52:80:82:84:5a:a0:d6:19:52:f0:e4:d1:3e:
ac:ce:48:1b:7c:0f:01:3a:b7:d9:a1:3b:b9:82:3e:
da:02:20:f6:c2:25:0d:b2:38:76:8b:01:ff:17:1f:
58:7b:4f:4d:b5:45:fc:ac:a7:50:b3:7d:02:7e:54:
fa:43:f0:c4:02:51:f9:36:2b:db:41:9a:3e:e5:e4:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:97:88:9F:F4:43:5A:76:02:9A:4A:5F:25:40:E3:DE:1A:36:7A:3B
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e2:d4:00:6a:9a:3b:d0:73:66:eb:20:02:e9:5e:56:6a:5a:
6f:5b:13:35:07:71:6c:a9:9b:7f:28:22:08:f4:a3:72:40:2c:
6c:07:e5:fe:c6:4e:d0:73:15:96:5a:70:e6:5d:e3:a1:13:5b:
43:ff:7f:30:4f:8b:40:28:c0:c4:af:21:ff:ec:2c:e4:d1:c4:
6e:4b:55:57:f4:0a:a3:d5:9d:02:ee:a4:e5:13:1c:a0:6f:23:
4b:a4:34:df:4c:91:73:eb:50:ba:cb:70:6c:09:31:17:86:12:
bd:31:99:be:5d:18:55:4b:ac:cb:04:81:aa:43:fa:97:74:05:
4f:e2:c7:10:21:2e:a4:92:53:bb:42:91:43:8d:ea:69:54:f5:
e1:a5:ef:cc:26:3d:a7:19:67:32:67:c0:7f:16:d0:04:7a:44:
e3:97:a3:50:bc:07:e1:38:9d:22:9b:00:ef:2b:cb:fd:42:c9:
2b:de:78:89:ac:66:97:7c:bf:b4:06:60:6c:22:05:99:5f:0a:
7f:2e:3b:86:1f:84:57:74:ca:9c:21:17:0d:6d:a1:b4:67:9e:
27:f9:d1:db:df:4b:4b:4d:79:50:61:c2:69:7a:02:00:c7:2c:
2b:1b:e2:ca:d3:53:88:92:a8:0b:12:68:fd:2a:35:67:37:e6:
2b:40:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:25 2025 by rpki-client