Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: Xr8+XxZZo75uPq+AEQSyIv2AEeQDssJeCgWitqMoQSk=
Subject key identifier: 8F:4B:40:75:7D:9D:42:9F:D2:A3:A1:2D:B0:6B:24:53:E0:D1:1D:07
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 0196797B8AE78C5592A1014A52AE8E0E7125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 1172
Signing time: Sun 27 Apr 2025 23:01:01 +0000
Manifest this update: Sun 27 Apr 2025 23:01:01 +0000
Manifest next update: Mon 28 Apr 2025 23:01:01 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: yyMF5Q5HDo8CEIYNF11OVwcHcIKaXC1SF3dTXfbLP3A=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:8a:e7:8c:55:92:a1:01:4a:52:ae:8e:0e:71:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Apr 27 23:01:01 2025 GMT
Not After : Apr 28 23:01:01 2025 GMT
Subject: CN=8f4b40757d9d429fd2a3a12db06b2453e0d11d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:20:d7:d2:e4:10:f4:eb:e2:17:dd:a0:4f:
61:ff:88:31:c8:3a:be:fe:e3:a6:e4:b5:ab:99:2c:
43:c1:d1:e2:ea:63:79:a2:ca:a4:33:c4:96:d3:65:
89:16:34:45:a5:f3:60:ab:11:68:4d:83:ea:c0:c7:
c8:f6:e9:99:54:97:3c:20:7b:19:a0:7d:0b:5d:e6:
d6:cd:04:36:6f:81:7b:64:e4:57:63:98:c0:38:8f:
0c:8d:a8:7b:15:3c:18:44:92:64:e0:0d:87:7d:15:
d0:9c:2c:d1:c6:33:43:01:e5:76:52:f3:00:c2:5a:
8f:18:02:6a:41:24:55:76:79:b7:3c:3f:90:69:5f:
dd:50:87:80:bf:40:8b:4b:b6:c5:f4:22:67:f9:13:
1b:5f:5b:e4:29:d3:04:fd:2c:c7:34:5a:0c:a2:31:
3d:28:1c:9f:e4:b3:17:44:10:b4:99:f1:54:d2:1a:
95:be:c0:b7:1c:68:ac:ba:08:ef:ba:cd:93:7f:f0:
7e:06:77:e1:b3:4e:2d:a1:0f:68:b3:45:5a:28:e2:
83:be:d7:b1:e9:75:8c:da:69:1e:dc:0d:ab:2c:83:
a1:f6:44:09:49:c8:ee:0e:eb:ed:c5:5a:49:77:27:
9f:a3:52:59:2c:3e:94:20:55:5c:b3:17:e5:bf:39:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:40:75:7D:9D:42:9F:D2:A3:A1:2D:B0:6B:24:53:E0:D1:1D:07
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:42:cf:f9:85:88:52:f6:cd:ef:5e:88:c4:a9:7d:85:e2:
14:a4:86:78:ee:c5:e6:c5:fe:4c:3b:29:2c:16:81:ef:14:a7:
b7:98:3e:19:a4:c0:8b:ac:0e:b1:00:6c:1a:bd:24:a0:bb:aa:
1b:1e:81:85:e8:18:e7:45:42:54:13:62:fc:64:bd:be:28:c4:
a0:55:83:8d:74:43:6d:60:8d:ab:33:e7:0f:ce:ee:b6:4d:0d:
fb:72:50:1d:41:12:38:9d:23:73:40:73:c2:d4:b4:40:ad:96:
9a:c5:de:c6:c9:41:a6:fa:d3:04:2d:30:52:b0:1d:b7:38:1a:
76:29:e9:62:bf:59:c8:c2:af:dc:a9:da:69:6d:66:db:c7:ae:
f6:e4:cf:ac:75:b7:ae:c8:b8:82:f7:75:ac:4e:ac:f3:2e:ea:
fa:00:ed:31:ef:e1:73:b2:8f:3a:5d:44:40:09:e9:9d:ae:a7:
3a:b3:38:4a:18:d5:54:31:54:f0:2a:15:28:73:03:c9:15:38:
7e:71:9f:c3:51:9f:7c:f8:9f:03:ad:e7:5e:f1:7f:19:b1:d7:
43:ab:e4:da:99:73:6c:d8:55:ad:a1:ce:1d:6b:c1:cd:2a:0b:
f7:07:f0:c6:32:f0:e3:37:20:62:6b:5c:a5:45:58:2f:db:31:
f0:4d:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:33 2025 by rpki-client