Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
File: XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft (raw, json)
Hash identifier: 8e25pYMNZMeGcWR5X7fPcPhkF03+mop5LM053QBJ3Wc=
Subject key identifier: 5B:63:6D:C6:F3:BD:1B:1A:9A:31:9E:37:9F:3D:3E:61:1E:D5:E2:12
Authority key identifier: 5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
Certificate issuer: /CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Certificate serial: 01967F7D6407591593BFD7FC9C44D7C02776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 03:00:46 +0000
Manifest this update: Tue 29 Apr 2025 03:00:46 +0000
Manifest next update: Wed 30 Apr 2025 03:00:46 +0000
Files and hashes: 1: XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl (hash: kOzIfnq18UW8EcNJCGADBmYK8eNprVb8DmAGq0JvKkg=)
2: ZhJ5kdVgunlmo848w1nL5S4mr34.roa (hash: /GDuU5hcbbZPCMfEmpk6BhKCTJ1fC6jXDas0PVjpCto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:64:07:59:15:93:bf:d7:fc:9c:44:d7:c0:27:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0a0dd2f964e860f6ba4c176112a5d712ba93aa
Validity
Not Before: Apr 29 03:00:46 2025 GMT
Not After : Apr 30 03:00:46 2025 GMT
Subject: CN=5b636dc6f3bd1b1a9a319e379f3d3e611ed5e212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:07:81:3b:71:ec:3a:17:e1:ae:65:d6:5f:
d0:4c:49:71:3d:eb:67:4f:5d:d0:9a:8c:90:d7:cc:
fd:ba:d6:df:b4:39:9c:f5:7a:f9:c5:1f:19:82:8f:
ed:60:f7:d2:ac:61:a3:79:01:29:a7:55:e5:b5:0d:
e5:b2:42:2e:87:91:04:40:d2:c2:42:0c:59:12:bc:
56:15:c6:69:88:42:29:3a:77:68:d7:85:f1:ed:aa:
27:d6:71:53:f7:a2:c1:2c:92:3d:e9:74:2a:fb:43:
61:6e:ff:3e:c9:8b:53:b7:5a:6b:63:4c:d7:6a:e2:
4d:6f:eb:63:1a:16:21:e1:ef:d0:57:8c:4f:37:72:
35:0b:1d:64:2c:95:b6:f4:f1:2a:ac:ea:71:77:95:
19:b6:60:f2:f4:63:ea:1d:f0:58:40:8b:a0:a7:11:
5e:a5:70:07:c3:14:61:43:7e:7c:e7:c4:c0:a4:c8:
98:23:cb:94:a5:30:ba:4f:7c:8b:65:f3:5f:82:29:
99:d1:ec:7a:79:3e:0e:4a:db:36:62:51:2f:07:f2:
36:06:97:5a:23:f0:2f:77:ca:58:36:b9:51:88:09:
90:56:ad:ad:c5:9e:12:2a:25:a6:20:d6:0b:09:f7:
21:fa:43:e1:82:d1:49:13:9f:b7:7f:d7:ad:73:59:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:6D:C6:F3:BD:1B:1A:9A:31:9E:37:9F:3D:3E:61:1E:D5:E2:12
X509v3 Authority Key Identifier:
keyid:5F:0A:0D:D2:F9:64:E8:60:F6:BA:4C:17:61:12:A5:D7:12:BA:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwoN0vlk6GD2ukwXYRKl1xK6k6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fe3b56-94ca-4295-b0cc-10bed27d766e/1/XwoN0vlk6GD2ukwXYRKl1xK6k6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8e:c4:ff:d4:7f:89:ec:12:3e:a1:7b:b0:eb:f6:ee:cd:d8:
4c:d6:8a:d8:ba:c5:43:8a:69:40:cd:55:7d:67:cf:4d:76:66:
63:e2:41:6f:fe:da:78:2d:a2:dc:95:8d:0b:0f:da:63:15:c8:
a0:94:cb:93:4b:73:3b:da:45:f5:03:25:77:3b:a8:e7:56:c7:
6d:a7:1f:c3:0b:a8:52:91:b7:d7:d9:13:ee:d3:e9:3d:6c:40:
81:50:ae:1f:cb:57:50:17:28:7f:1d:e5:ac:a8:cd:3a:6a:98:
92:81:55:b0:4e:6b:58:17:2a:65:e8:78:0c:04:d0:4a:15:ab:
6d:cc:0b:30:cd:33:42:36:75:ce:e7:d1:90:a0:c1:83:5d:40:
5e:63:45:39:f0:12:f0:d7:82:e6:62:f8:17:0a:28:36:72:2f:
73:60:48:97:92:f4:e1:2c:98:7e:4b:4a:2e:04:91:d6:b4:f6:
59:0a:d1:12:22:a8:68:0a:2d:e3:3f:67:c1:53:b9:dc:d8:75:
7b:9b:5f:e9:a1:b0:84:16:19:4f:fc:4d:16:6f:52:98:9b:88:
61:a2:9f:e8:e1:4a:04:6f:a0:6f:68:fe:43:a0:8a:15:68:ee:
9d:74:fd:95:35:61:29:8b:7d:b7:e8:c3:cb:f8:dd:98:fc:9e:
cf:b3:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:34:34 2025 by rpki-client