Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: jjHGf2VcDyddgu2eq2/RDufjKk9fEqlHKZ5cyRq/uzs=
Subject key identifier: 1E:3B:6F:18:71:AC:F2:10:AA:A0:4C:CF:64:49:18:F5:B5:55:98:89
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 0196753094DFDBA0B0E402C945322025842F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 0351
Signing time: Sun 27 Apr 2025 03:00:40 +0000
Manifest this update: Sun 27 Apr 2025 03:00:40 +0000
Manifest next update: Mon 28 Apr 2025 03:00:40 +0000
Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: B8Yxzr6HRWzZXqcOkJjBKUhBJm+sRYMFOBB0536/fyU=)
2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:94:df:db:a0:b0:e4:02:c9:45:32:20:25:84:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Apr 27 03:00:40 2025 GMT
Not After : Apr 28 03:00:40 2025 GMT
Subject: CN=1e3b6f1871acf210aaa04ccf644918f5b5559889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:48:c1:22:00:58:4b:ad:ff:37:80:b9:ec:
57:d0:dd:bf:92:95:10:f9:b3:31:d5:fb:7c:93:99:
59:49:07:dc:c4:11:8f:d4:85:46:c1:54:fb:ec:08:
57:75:e9:d9:00:e6:57:40:1d:99:89:1b:2e:29:15:
ac:db:94:30:39:c8:07:30:b0:63:1e:e3:27:3a:1c:
f9:bd:57:2e:60:cc:48:0e:43:01:fa:06:9e:de:6e:
9f:1a:a1:2b:59:3b:bc:de:1f:84:8f:47:93:df:ba:
d6:f3:df:07:8a:e7:69:50:a5:9e:b5:c2:77:e4:4e:
8f:fc:e5:cc:4d:26:6d:cc:b3:30:13:c9:9a:82:47:
8d:ce:12:70:6d:90:7a:4b:8e:a6:37:96:76:f2:a6:
25:7f:bf:39:e9:44:50:6a:0d:b8:62:cb:17:bb:ce:
1f:9c:6f:6a:0e:8e:8e:34:9e:67:56:45:1c:05:6c:
27:93:4e:96:0c:a6:2d:29:7f:59:c3:65:bb:49:8a:
cb:c3:1d:2c:6a:ba:aa:cf:66:bc:dc:b5:c2:43:b4:
c0:84:ce:98:06:4f:84:1e:b4:33:ad:d1:f4:e9:87:
b7:09:1c:8b:da:83:3c:df:8d:7a:78:95:fc:bc:d2:
42:b6:4f:c4:2a:63:4d:f9:79:6d:cd:02:c7:ba:bd:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:6F:18:71:AC:F2:10:AA:A0:4C:CF:64:49:18:F5:B5:55:98:89
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:c4:36:6a:3e:f0:b8:36:21:31:d0:b8:50:01:ec:48:39:
c2:ad:25:db:26:45:15:a2:06:80:fd:80:7b:70:bf:59:f3:27:
5f:c5:16:26:8c:f2:54:74:34:fe:67:3e:cb:b4:ee:39:10:9b:
d3:f5:4f:89:56:67:a6:07:2f:ac:4d:48:7d:53:78:18:65:0f:
42:80:82:1d:81:47:94:92:0b:aa:f2:07:2a:7a:7c:d5:a6:a8:
e1:7c:47:70:fa:db:4e:e5:5f:58:a1:a5:32:71:4a:0b:df:07:
fa:e1:f5:38:1f:57:3f:34:99:fa:94:29:58:69:75:9f:39:7c:
5f:d8:d6:ab:de:ea:fa:54:5a:4f:ed:60:50:bc:4f:49:67:7a:
18:89:94:2d:75:a3:2f:26:f1:ab:74:71:36:82:2c:fc:dc:07:
c5:a5:fb:ea:e6:53:2a:9d:04:43:7a:96:bc:16:34:b4:f4:bd:
01:b8:90:98:15:eb:61:68:6f:3f:61:8e:c8:0d:17:bf:18:2e:
7e:01:ac:f1:e8:a7:f6:63:59:fe:b8:c5:f4:b2:87:4a:6e:a4:
ef:b8:05:82:8d:41:2d:71:80:b1:3e:47:7d:c5:67:7c:31:74:
1e:7f:63:ba:49:3f:07:0a:4b:e2:28:e0:73:ca:fe:b0:cf:9f:
7b:07:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:13 2025 by rpki-client