Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: Nopeq54ozcpKwQ16tzF6BLbpV5Rs4Z3khn4T/ei7+CQ=
Subject key identifier: 21:5F:3C:90:DF:4D:04:70:3A:9C:88:2A:B2:2D:A3:6C:6E:66:3A:C9
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 01968C265816B8061BE84E8B6F04B2A1687E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 14:00:45 +0000
Manifest this update: Thu 01 May 2025 14:00:45 +0000
Manifest next update: Fri 02 May 2025 14:00:45 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: X3MqK/cCLgPgOx4szJKz92Udxpio6erfxBZABOphq9U=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:58:16:b8:06:1b:e8:4e:8b:6f:04:b2:a1:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: May 1 14:00:45 2025 GMT
Not After : May 2 14:00:45 2025 GMT
Subject: CN=215f3c90df4d04703a9c882ab22da36c6e663ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:36:9e:86:f6:43:47:ce:e8:fd:1e:f6:0f:
20:38:1e:d1:d4:0c:c7:16:d0:f9:24:49:09:01:0b:
2e:e2:fa:f4:d9:a2:2c:76:28:b5:f6:b0:9d:29:a1:
06:a2:be:ab:86:5b:a8:ae:1d:70:91:7b:8b:ca:03:
25:96:ef:c0:2e:d8:0c:c2:70:7b:bc:83:b4:a6:41:
ff:40:4f:82:ea:d2:a7:87:17:70:d6:b8:ab:d0:92:
43:39:3f:94:34:14:5d:04:7a:50:12:cb:b3:c8:f5:
87:c4:d5:e8:cc:be:52:e3:68:72:fb:6b:4c:44:63:
c3:93:a4:03:7d:34:c6:a4:62:4f:3b:0a:8e:50:ac:
ab:b7:9c:47:84:10:96:bf:fa:5e:f2:91:91:a8:1d:
65:42:82:18:67:ef:66:30:03:4e:a7:e9:64:58:f3:
cd:3a:ce:8f:cf:1f:ab:78:ef:97:0b:ea:d9:f4:60:
d8:d1:eb:80:c1:1f:87:fa:99:a3:34:4c:b9:fb:98:
bc:fd:a3:5c:9c:a1:22:f0:84:75:2c:55:d2:47:27:
09:2a:6d:97:db:50:79:d0:ba:ec:c0:35:73:18:04:
f4:fb:c1:45:a1:7a:5e:3b:cf:2d:0c:80:71:46:af:
1d:f3:1f:77:89:f6:5e:e8:ed:ae:0b:1f:18:9c:11:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:3C:90:DF:4D:04:70:3A:9C:88:2A:B2:2D:A3:6C:6E:66:3A:C9
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fb:18:ce:83:19:0b:65:99:68:db:5b:33:c7:32:05:7f:3a:
86:e2:ee:2d:f0:cd:74:80:9a:09:6f:94:fa:3e:21:5b:2b:6d:
2d:4c:9a:e6:e1:29:70:54:04:d8:00:3b:a1:a8:86:a0:2c:bd:
97:64:e3:24:52:18:07:c7:db:a1:9f:29:1b:d9:82:91:c5:d5:
8f:1d:10:49:fb:9f:15:42:f0:69:b8:1a:e6:de:e4:19:7c:14:
c5:6c:d6:c6:58:f2:c8:e3:66:e6:75:88:0a:ae:1a:55:ed:93:
e0:59:8d:89:f2:73:d2:c1:0b:25:cc:0e:2a:5e:90:35:42:61:
74:91:fa:08:5a:91:31:c0:9f:00:9d:dd:38:85:90:2b:25:fa:
76:3f:9a:75:5c:57:1f:b4:2f:91:67:a8:d6:63:cb:53:cc:a1:
e1:d2:0a:a5:f0:60:57:bd:5f:75:54:09:19:a5:3f:7e:c3:94:
37:00:71:a4:41:e0:35:18:de:61:67:ff:a7:7b:21:1e:74:62:
f1:fa:48:8f:8a:35:09:d4:8a:9f:e9:dc:fd:c0:76:0e:53:23:
f6:84:87:9a:de:f0:c9:e3:2b:00:90:a5:9e:47:cf:9b:27:4a:
79:3a:e5:b4:94:38:f6:97:ba:13:8e:04:7e:1f:d6:cd:b2:13:
41:1c:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:29 2025 by rpki-client