Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: F/OMt9cjTryxrAoJzbdyeMHvDuuvdcxZf/g6AVHrXhM=
Subject key identifier: A0:3A:62:3A:38:58:CE:64:9E:E0:B4:4A:DA:67:15:F9:CC:8D:C5:96
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 01969116243BF5BE0DDF5D54F5D3BF61B452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: FA
Signing time: Fri 02 May 2025 13:01:09 +0000
Manifest this update: Fri 02 May 2025 13:01:09 +0000
Manifest next update: Sat 03 May 2025 13:01:09 +0000
Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: 9BVlF+e0iCCgv/nNGMI17TxtbWR+SBiZDCoiXQlirJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:16:24:3b:f5:be:0d:df:5d:54:f5:d3:bf:61:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: May 2 13:01:09 2025 GMT
Not After : May 3 13:01:09 2025 GMT
Subject: CN=a03a623a3858ce649ee0b44ada6715f9cc8dc596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:24:57:e1:c5:91:e9:31:73:b2:88:88:a9:
de:88:53:31:1e:3b:79:66:2e:fe:b2:7f:9a:3f:cc:
31:c3:9d:97:22:64:43:59:d1:5a:6c:b1:9f:0c:aa:
de:33:2d:b8:f0:df:5b:69:68:9b:c6:c4:3f:47:1f:
5b:f2:ea:0f:9e:79:02:38:46:94:ea:89:16:b6:7d:
83:86:d8:2b:8e:16:93:ea:17:73:8e:09:15:af:e5:
56:5d:b4:dd:9b:a0:32:30:9f:f0:41:41:2f:c0:c5:
03:17:87:f7:9b:1e:00:23:c5:11:bf:ef:e4:a0:0b:
46:54:27:e2:27:93:40:4e:a5:aa:fa:00:b0:96:ef:
52:55:57:21:03:3c:70:f1:e0:f0:32:3c:9b:71:f2:
20:60:ae:de:2b:dd:cf:f1:34:27:f7:8d:0c:c0:98:
76:ce:60:3d:03:ea:12:0b:06:53:98:f1:ee:c2:2a:
1a:57:a2:39:c7:d1:c6:1d:e5:25:2f:c6:6b:3a:55:
d8:84:95:d9:df:14:dc:76:92:cf:e5:f7:c5:5f:8a:
e6:da:98:c8:7c:85:4a:7a:14:57:77:23:84:cc:2d:
28:90:4f:e1:43:0a:3c:f9:be:78:07:df:35:81:57:
d4:be:b7:ec:96:38:53:3d:5a:58:db:be:bc:93:a8:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3A:62:3A:38:58:CE:64:9E:E0:B4:4A:DA:67:15:F9:CC:8D:C5:96
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d0:f6:dc:ab:f3:04:81:0a:c5:9b:b5:a0:7c:e6:30:64:6a:
89:04:63:c6:53:1b:37:0f:90:56:c3:8c:9c:96:22:ec:c9:53:
05:f7:fc:ed:26:13:49:f3:62:2e:0f:cf:94:e7:04:e1:77:61:
e9:4e:72:30:81:5c:dc:5b:58:a1:a0:74:88:62:fd:fc:e2:e6:
b8:64:34:2f:b6:28:9b:85:30:22:71:26:69:d9:8b:58:8a:d3:
15:8c:39:0e:51:6e:34:bc:02:d9:02:48:81:67:f0:39:cd:ad:
e4:4d:3c:08:d6:6e:34:50:13:7b:c8:ed:fb:e2:23:5d:ad:0c:
31:0a:f0:be:0d:08:c8:e1:bc:3e:75:6c:89:3c:8d:89:aa:31:
14:17:f5:d2:5d:43:86:ac:6b:67:ca:36:19:2f:01:65:92:bc:
af:9f:c8:16:c1:a2:f5:67:8e:40:47:9d:cc:e4:28:34:d3:82:
cb:5b:93:36:2a:69:69:f4:d9:bb:e9:cf:a9:f6:15:28:43:39:
d5:a8:b0:10:fc:e2:cf:8e:de:95:cc:23:71:03:84:2c:97:06:
0f:7b:22:8c:10:0b:d0:0f:ce:80:ca:e3:ac:d2:c9:22:fb:ca:
46:20:9f:f5:bc:2e:bd:96:65:3a:4a:f3:81:9e:ce:88:71:fe:
f7:93:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:07:11 2025 by rpki-client