Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
File: XAJzZX7FoThNU28b2Z2RZQf-eyk.mft (raw, json)
Hash identifier: d0mdt9/uPedQVeaGJ90pFw0oi639+6cCfg6oUlj0Rno=
Subject key identifier: C3:AF:B5:F0:58:A8:1F:07:1F:A8:1A:91:48:FE:7D:A8:CB:03:0F:E8
Authority key identifier: 5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
Certificate issuer: /CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Certificate serial: 01968322F6DE41BFABA9172A65D0E0B93B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
Manifest number: 0FAE
Signing time: Tue 29 Apr 2025 20:00:28 +0000
Manifest this update: Tue 29 Apr 2025 20:00:28 +0000
Manifest next update: Wed 30 Apr 2025 20:00:28 +0000
Files and hashes: 1: BjEhACV2yXJRHQhe31y5AzO3--o.roa (hash: IOjD1WKD18GQcde1wwfvHfJUbrYC9FaaN08pCD3XzFo=)
2: XAJzZX7FoThNU28b2Z2RZQf-eyk.crl (hash: heTSdRq4AL+2QHyoX+d4bmrKxGyEFcypFpsK6Abl5bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:f6:de:41:bf:ab:a9:17:2a:65:d0:e0:b9:3b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Validity
Not Before: Apr 29 20:00:28 2025 GMT
Not After : Apr 30 20:00:28 2025 GMT
Subject: CN=c3afb5f058a81f071fa81a9148fe7da8cb030fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:4c:51:f6:79:93:50:b5:2d:3f:ae:8a:62:
ef:8b:0d:d3:c6:9e:be:4c:96:14:a6:a0:78:ea:cd:
3f:84:55:14:a0:6b:d6:8c:e8:f0:da:e1:64:b6:3e:
3b:04:61:24:54:13:9f:8d:3c:bb:79:db:89:98:d4:
51:d3:af:a2:d2:9c:7a:8b:50:62:1a:76:b1:6c:d0:
43:88:66:c1:fe:02:e6:c3:ef:ec:69:be:0a:b7:37:
8c:b7:d7:2e:7b:44:44:c8:a3:0e:d6:11:2c:cf:1a:
6f:e1:96:c9:4b:06:28:ca:bd:b0:d9:4e:d7:a5:2c:
f3:0c:04:6a:52:29:10:f7:16:ef:13:a4:d0:b3:3c:
53:88:0a:1f:91:b9:39:63:95:f6:d6:3c:7a:5d:5f:
cc:16:4c:94:85:e8:b0:3e:a9:b2:c3:fe:0b:cc:26:
e3:a7:ab:3a:89:22:e7:18:07:91:f2:64:e9:e2:08:
e1:e2:b6:46:78:e4:70:f7:d9:10:2b:3b:d6:29:a8:
a3:36:36:f0:8d:42:93:4d:d1:92:7a:24:71:b3:81:
b2:f2:8c:90:27:57:57:43:34:b1:4a:b9:39:af:49:
81:05:d4:93:4c:4e:3f:d5:a9:2f:d8:5e:67:7b:7f:
c7:54:b9:e6:06:3f:51:eb:0f:ff:b0:30:c8:36:47:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AF:B5:F0:58:A8:1F:07:1F:A8:1A:91:48:FE:7D:A8:CB:03:0F:E8
X509v3 Authority Key Identifier:
keyid:5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:58:ff:c6:a6:f8:21:e6:c5:33:86:30:5a:a5:81:9e:5d:
1e:28:bf:6b:76:b3:28:33:3d:e4:f4:22:d8:52:62:76:df:06:
12:24:30:5c:03:48:8b:c1:3a:64:bd:05:6e:92:c7:2a:cc:50:
7d:c8:a0:1a:e1:a8:8e:dd:30:bf:df:27:29:54:3e:31:7e:be:
fa:38:41:e3:f6:b4:51:8e:5f:45:cd:4f:bf:58:eb:06:9c:6a:
b6:dc:12:8b:ae:5f:c7:30:6a:94:2a:52:d5:aa:e3:dd:f8:dc:
a1:0e:ed:38:50:96:8a:ff:5d:ec:47:48:99:21:a1:21:04:2e:
ca:f1:66:8b:87:7e:d1:c7:4b:75:69:9d:a7:7e:17:1b:d9:2e:
da:be:32:9a:35:7e:85:b7:df:3e:cb:cc:a2:32:65:0e:a6:e6:
bf:68:2c:fd:ec:0e:66:ad:ec:21:10:9c:25:6f:f6:63:18:74:
7e:9d:4f:d9:b0:24:ec:0d:0e:df:53:33:22:7f:82:1d:ee:a4:
ed:94:ae:86:a1:1a:98:68:55:4a:02:84:3b:3e:63:08:1c:a8:
4e:0b:49:9f:e8:c9:8a:50:14:a8:50:c4:b4:53:f0:4a:56:fc:
08:2b:57:c8:df:0e:9c:ed:1e:22:d5:3d:c6:6d:aa:4d:aa:41:
64:48:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:39:11 2025 by rpki-client