Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: 7px46KjnpndfPsSxxsHOTqo0ZDK6q9vFpaTJ9srFV7Q=
Subject key identifier: EE:48:2E:15:ED:25:52:DA:5D:20:6A:FB:D8:31:1A:D4:8F:50:AD:62
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 01967342223EB088E77C61E41F7B37308257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 1511
Signing time: Sat 26 Apr 2025 18:00:35 +0000
Manifest this update: Sat 26 Apr 2025 18:00:35 +0000
Manifest next update: Sun 27 Apr 2025 18:00:35 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: ZtW0Ddf9KNOwijKTCyOWxTjguCpSkMBE3FrhtnNQTLE=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:22:3e:b0:88:e7:7c:61:e4:1f:7b:37:30:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Apr 26 18:00:35 2025 GMT
Not After : Apr 27 18:00:35 2025 GMT
Subject: CN=ee482e15ed2552da5d206afbd8311ad48f50ad62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:ed:c7:0b:e6:0b:57:38:5f:3c:43:a6:37:
17:c1:b0:10:64:a2:e9:a1:40:fd:d4:a5:1e:f5:47:
fa:c7:87:e3:0d:72:36:0f:5a:fe:bf:54:8e:5c:f5:
86:82:52:f2:cd:98:10:d4:68:a0:2e:9a:5d:bb:22:
c3:b5:f3:4f:39:d4:d9:dc:3b:63:11:f5:22:83:b0:
df:67:b9:29:b0:d4:ff:df:64:55:3e:c0:98:62:5f:
69:b7:52:10:f5:3f:29:3f:04:62:1e:57:e9:ba:b6:
eb:91:ed:cc:e2:06:70:7c:29:22:dd:0d:4e:f8:9d:
ee:90:9b:b1:87:4d:64:45:a4:05:d3:68:b6:a8:f2:
88:11:4a:81:c1:8f:0f:b5:d7:ea:1b:f1:ab:c2:be:
8a:c2:4d:c0:8d:93:a5:7e:1a:a4:5e:7f:a6:31:97:
b3:a1:7d:30:4c:ad:aa:1f:0b:ad:0f:47:07:af:6f:
70:ae:05:8c:74:1c:3c:5d:1c:fb:01:bb:99:1f:27:
cc:cc:ee:5e:cf:ca:11:9c:e2:2f:c8:d4:54:06:c3:
61:b2:11:f2:df:eb:68:a0:1f:c8:60:ea:ae:57:e3:
36:09:ad:d1:5a:19:3a:1a:4d:de:82:0c:fc:83:8b:
24:eb:fb:65:e7:34:55:0a:90:37:4e:90:03:b0:d6:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:2E:15:ED:25:52:DA:5D:20:6A:FB:D8:31:1A:D4:8F:50:AD:62
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ff:69:d1:09:12:c4:d9:d0:bd:3c:06:25:6d:49:43:55:2f:
82:9c:a4:fd:6a:80:83:85:8d:22:67:bb:d9:53:be:74:a6:12:
7c:e5:65:d7:ee:3e:e1:5d:fd:8f:6d:aa:16:03:c8:8d:fe:3b:
fd:e3:b5:40:1e:6b:80:5b:4a:43:9d:68:00:db:0e:9a:db:bb:
20:ed:2b:25:e2:e7:43:d4:e5:21:fe:c8:ad:33:0b:14:e7:d7:
1c:6c:d0:bd:53:3d:4c:c9:52:c0:53:2f:ef:a1:f4:7a:a4:c7:
82:e0:06:68:ab:47:c6:24:81:46:fc:9a:01:6c:e5:03:a1:e8:
26:06:4f:0f:c2:c6:fa:f6:c5:c5:3f:e0:b7:f3:e9:44:05:a2:
a0:a5:70:5f:23:d2:da:98:9d:b6:1d:69:6b:3e:e1:dd:14:b3:
28:65:24:2b:da:08:1b:ac:9c:cc:81:75:fa:ed:20:eb:dd:f1:
c7:fe:70:85:ae:37:7c:b9:48:03:bd:55:ac:ee:b3:c2:45:a2:
47:e2:5f:fb:21:9b:ed:34:83:16:de:69:bf:91:e0:b9:5f:69:
e6:63:c5:25:18:e8:1b:8f:85:5d:e6:79:64:1e:38:97:3e:f8:
b5:97:19:7e:dc:d2:3a:5b:f8:4e:36:04:93:ec:48:be:be:b0:
84:82:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:40 2025 by rpki-client