Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: gIl/gzoAg+g4qA4cTFoCfLWnds7vy7XWp8IeRLMvY6o=
Subject key identifier: 33:AC:FA:4D:75:0C:33:D0:EC:A3:E3:A8:2D:A8:33:CB:DB:8E:C5:2C
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 01968134747CF8B2B82227ED9900C8DF058E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 11:00:20 +0000
Manifest this update: Tue 29 Apr 2025 11:00:20 +0000
Manifest next update: Wed 30 Apr 2025 11:00:20 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: 8IE5s9zf/3JneqcMrwL44Sc6qs185VGCrhcMQ2x+ro0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:74:7c:f8:b2:b8:22:27:ed:99:00:c8:df:05:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Apr 29 11:00:20 2025 GMT
Not After : Apr 30 11:00:20 2025 GMT
Subject: CN=33acfa4d750c33d0eca3e3a82da833cbdb8ec52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:82:72:20:99:e9:46:89:29:74:f4:2a:02:
c6:9c:63:83:69:29:13:44:44:d9:eb:6f:ad:c6:44:
02:15:c0:e0:cf:fd:ab:08:c9:ef:a7:3e:da:6b:2a:
dd:2d:20:42:88:a4:4f:8b:00:bb:ad:aa:4a:98:6f:
82:c8:a1:17:f9:6b:fd:84:8a:74:c1:ed:a6:48:ac:
df:5a:b6:a1:ae:ba:70:d1:3f:84:36:81:7b:f8:02:
a3:92:14:25:3e:b5:9a:f8:54:5d:88:c4:05:ac:6a:
c3:d4:b4:6f:e4:07:0c:90:9c:3a:57:d8:04:84:20:
df:a4:4a:11:2a:74:c4:b8:c1:76:0c:d8:a8:1e:69:
13:9a:c8:d4:e1:28:2c:b2:2c:b5:60:68:62:65:73:
34:96:b1:9b:5e:ae:2e:13:36:2d:a0:bb:8c:0e:27:
ce:6a:c2:4a:74:bd:ec:4d:68:05:ca:21:8c:d5:fd:
25:32:33:0a:f4:69:7d:fe:b3:95:f3:18:29:3a:b1:
62:7e:36:33:0c:27:e8:62:6d:b6:e4:31:01:84:9b:
5a:46:aa:03:32:13:e8:85:5c:17:e2:43:fe:e5:21:
fe:05:60:a1:8a:c3:e8:08:a5:d2:70:5a:31:6f:f8:
29:77:c7:5a:fd:ef:f5:df:cf:35:56:33:ab:25:a8:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:FA:4D:75:0C:33:D0:EC:A3:E3:A8:2D:A8:33:CB:DB:8E:C5:2C
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:3d:7c:35:7f:e1:0d:00:b4:05:c5:7b:01:8c:58:c2:d1:
d2:21:f6:c5:19:cd:a2:95:55:9a:d7:77:3b:7c:bb:76:16:a6:
73:e1:00:38:2b:ae:27:79:8f:66:19:49:43:79:9a:73:be:34:
2a:c9:7e:2a:5b:70:1b:c3:d2:52:40:59:9b:fb:9b:d4:bd:eb:
2f:b4:6d:ca:58:b0:ff:d2:fd:4d:32:12:c6:c8:69:5f:ab:d9:
3a:54:44:6e:ab:5c:8f:fd:e8:24:ed:cb:c1:d4:31:70:93:59:
97:a7:30:70:de:b4:71:22:2f:bd:2d:01:8a:c3:e1:d4:56:4b:
05:ae:a0:20:8c:11:44:f1:be:89:58:7d:c4:0d:0b:32:e9:7b:
f5:9e:12:5c:d0:55:95:77:bc:e2:1d:86:16:a5:21:b5:93:b8:
62:a2:1d:8a:42:30:bf:f7:c0:af:78:9b:d2:e6:4f:e5:84:bf:
cd:ea:da:c8:f6:a4:e5:6c:a4:4e:9e:c9:f4:36:c2:32:01:3d:
29:4a:cd:c9:8d:65:67:07:28:ef:f9:98:5e:50:39:7e:51:5b:
e9:11:9e:2c:a7:03:52:01:d3:d0:79:ef:24:d7:69:a2:dc:c1:
e3:a2:b0:e1:23:d6:87:fc:92:8d:4d:b9:49:18:d4:27:28:a1:
8e:fb:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:25:21 2025 by rpki-client