Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: tt++IhtMEETzoi1I+O772BlFmGSY7hUoiU2dadt3yFs=
Subject key identifier: C2:76:46:E6:62:14:8B:33:28:53:49:70:84:7A:20:48:E8:90:35:23
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019676B0BF561F91A712122918B31DB395C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 09F8
Signing time: Sun 27 Apr 2025 10:00:16 +0000
Manifest this update: Sun 27 Apr 2025 10:00:16 +0000
Manifest next update: Mon 28 Apr 2025 10:00:16 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: poXUA5Jp97/kMjv3jc1lBVrvg2y2o2E6F2Z1IDbYiLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:bf:56:1f:91:a7:12:12:29:18:b3:1d:b3:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Apr 27 10:00:16 2025 GMT
Not After : Apr 28 10:00:16 2025 GMT
Subject: CN=c27646e662148b3328534970847a2048e8903523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:ec:d1:30:e8:ec:67:20:91:5d:c5:12:48:
19:90:cf:7d:c5:f4:07:fd:ee:70:e1:f8:66:a1:95:
26:97:24:99:ed:17:5c:c3:6c:43:34:0c:0e:81:55:
aa:66:d0:0e:7e:63:fe:50:95:9e:c0:97:a7:63:61:
3a:6c:f6:79:61:d0:01:20:7a:8a:0c:dd:c4:7c:9b:
44:02:9e:fc:ed:7b:f2:f9:6e:1d:09:05:f4:33:a5:
81:ce:03:63:cc:b1:c4:b2:fc:00:e9:d1:2e:f5:bd:
81:22:65:a5:b0:d3:db:22:e3:ee:4c:5f:d6:93:e2:
df:a0:86:6a:93:4d:2b:b0:3e:9d:6d:e1:f3:74:6d:
9c:00:61:49:f3:c9:60:a2:d5:b7:f6:99:ca:ad:14:
85:9d:34:e9:47:b9:40:bb:37:51:26:8c:6a:2d:73:
0e:c5:58:e1:bc:47:f6:f0:91:1d:54:0f:bd:90:44:
fa:4f:ff:4c:da:1f:59:da:03:77:1f:65:01:0c:f4:
61:93:0e:c6:3a:fe:9a:fb:c6:9f:25:9e:0f:1e:62:
06:74:99:73:6b:ac:9d:ef:97:44:43:83:62:13:6e:
79:55:9d:bd:0f:ef:bc:6a:ac:21:e1:9e:fb:69:ae:
d0:de:ba:a0:8b:e2:6f:3f:62:f7:0b:ae:42:e1:fc:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:76:46:E6:62:14:8B:33:28:53:49:70:84:7A:20:48:E8:90:35:23
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:f5:e6:e3:33:f7:eb:b0:ab:e8:f0:90:ed:2b:db:e8:12:
83:9d:b7:f7:3d:87:0e:89:c4:f9:15:15:17:a9:e2:6d:56:ef:
dc:ee:71:57:0f:07:40:32:ab:ff:7d:08:85:39:1f:8a:be:b4:
51:e1:04:d0:e2:63:c2:1d:4b:67:62:28:0c:ee:98:38:cb:61:
d3:65:de:a7:5a:80:8f:60:3d:11:06:e5:19:e1:4f:e0:a7:65:
f5:81:ad:09:c6:6a:8f:15:c6:01:d3:c3:23:2a:94:8f:fe:dc:
04:47:56:e8:97:e0:7b:22:91:0a:88:6c:83:e2:8d:1b:c4:6c:
de:14:cf:79:5e:fb:c9:84:fd:ef:07:7e:d6:09:78:26:98:36:
92:c3:80:2b:76:3c:03:34:fd:3e:fe:77:2e:41:30:bd:76:d7:
b0:6b:14:72:2d:f5:99:15:f8:20:78:b0:6d:03:34:90:28:23:
d9:0e:6a:02:69:2a:81:27:e5:f3:b0:93:0e:ab:b8:bd:82:28:
1a:78:a7:ff:7c:94:38:de:79:67:ee:22:87:d4:15:82:42:43:
b8:51:0b:60:46:6a:3c:a6:64:27:b0:ad:ee:04:c3:e1:21:0b:
7b:90:8e:12:a1:db:f8:c2:46:77:53:90:fd:d1:2b:e4:ba:70:
69:76:e5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:57 2025 by rpki-client