Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
File: XKn3Xcos07OTU-AwCzC6W2KXais.mft (raw, json)
Hash identifier: BS7VCBlXbdoV5ddhiWxwWeP4w8Yu6hOhpAT0SGFTDfM=
Subject key identifier: 67:C3:D1:74:4D:AF:EB:3B:CB:19:36:2C:B9:20:A3:11:5A:D4:41:33
Authority key identifier: 5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
Certificate issuer: /CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Certificate serial: 0196753044BF4CB19B7B3429070F7B272D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
Manifest number: 0898
Signing time: Sun 27 Apr 2025 03:00:19 +0000
Manifest this update: Sun 27 Apr 2025 03:00:19 +0000
Manifest next update: Mon 28 Apr 2025 03:00:19 +0000
Files and hashes: 1: XKn3Xcos07OTU-AwCzC6W2KXais.crl (hash: BGMJMrn0ui+V3k9iNbnpegECf3keNXVEdoDCJp6CkGc=)
2: b9Hu80_829heeLvFjfJdJz5nCTc.roa (hash: j+SJeADqUhFu2qLu6938DWITw4JSWTcM1pVfvfeWeP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:44:bf:4c:b1:9b:7b:34:29:07:0f:7b:27:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca9f75dca2cd3b39353e0300b30ba5b62976a2b
Validity
Not Before: Apr 27 03:00:19 2025 GMT
Not After : Apr 28 03:00:19 2025 GMT
Subject: CN=67c3d1744dafeb3bcb19362cb920a3115ad44133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:b6:0a:f1:55:06:33:a7:cf:39:c7:fe:25:
ea:91:f8:3a:4d:77:2d:f3:54:eb:c3:ba:d0:ca:4a:
62:66:3c:5b:4c:30:71:a1:34:dd:91:bd:5d:71:ad:
68:67:9f:38:e1:68:83:23:7c:94:a0:6b:e7:65:b4:
af:aa:08:fd:4f:bc:62:00:8d:18:50:93:e5:75:87:
de:6b:03:49:9d:b5:59:31:38:5d:f7:e8:58:17:76:
9f:ca:3e:0e:d9:94:42:d2:f8:1b:c5:4c:69:76:78:
7b:05:50:89:20:8b:1e:78:72:c7:8f:3b:36:d9:d1:
ac:a3:35:fb:71:c3:f1:af:24:f1:7e:a3:ef:19:7d:
16:f6:6f:84:ed:53:ce:b7:fc:36:bb:28:da:02:f8:
74:be:82:23:b3:88:79:e3:e3:c5:83:96:48:4d:2a:
dc:b1:e0:d2:83:c4:c2:0d:0a:7b:bd:c1:63:60:f9:
0e:5a:5a:4c:ef:a1:b5:ed:c0:13:d2:50:76:b9:e5:
47:4e:95:fb:72:5b:a8:bd:26:fc:a1:9a:2e:8b:b3:
0d:a4:23:69:3c:97:de:3a:61:04:40:dc:aa:b2:a7:
55:19:eb:91:ed:e4:bf:b3:65:ea:b8:57:87:18:c1:
5e:a5:31:52:3b:f4:9d:67:7b:78:b7:3c:f9:aa:76:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:D1:74:4D:AF:EB:3B:CB:19:36:2C:B9:20:A3:11:5A:D4:41:33
X509v3 Authority Key Identifier:
keyid:5C:A9:F7:5D:CA:2C:D3:B3:93:53:E0:30:0B:30:BA:5B:62:97:6A:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKn3Xcos07OTU-AwCzC6W2KXais.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/105433-83d9-412c-9fc4-1d51c468d556/1/XKn3Xcos07OTU-AwCzC6W2KXais.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:2a:08:7e:c6:4d:b4:b9:2f:df:96:f8:36:8b:23:be:a5:
d1:92:85:ee:99:12:82:ef:d8:5d:95:3a:3a:f4:c5:f9:95:5f:
e6:c5:c9:72:50:ce:4d:03:09:26:b2:db:55:c9:9b:e7:29:3d:
66:a0:a4:5e:bc:d7:16:32:f3:35:1d:35:82:d6:47:72:28:61:
8e:4c:aa:a7:53:71:dc:8f:52:b5:5e:90:cf:a6:6e:c7:51:79:
a2:0d:fe:21:4d:8a:6a:02:58:a1:bc:a0:43:aa:b5:eb:08:69:
93:68:be:79:29:f4:d3:26:64:59:77:44:b1:15:53:f7:a1:b6:
97:78:95:fc:01:85:86:dc:79:84:75:12:ed:f5:44:a1:34:38:
fe:8a:d5:1a:ca:4f:16:04:76:a8:7b:4c:2c:f7:39:f7:24:4e:
a2:d7:84:2c:c3:26:f6:01:72:9d:20:e6:bb:86:3f:3c:ec:9f:
25:a9:ab:bc:10:83:00:79:3e:91:bf:4e:80:06:bd:06:6b:76:
d3:7a:cd:9b:b7:1a:01:77:d3:0c:2c:87:89:86:5b:a3:7a:bb:
76:c4:21:ac:7d:66:62:09:93:17:9e:f2:0b:c0:a4:05:01:0b:
0a:50:bc:ef:e5:27:47:17:ac:27:ca:05:4c:ac:10:f3:f5:d9:
6e:04:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:16 2025 by rpki-client