Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: 9LLEnpHyZWUDms+0g8RhQVL77z8jJvgHhHflXjHeizQ=
Subject key identifier: 54:2B:56:3E:DD:DA:CA:D2:43:4E:B6:E4:C7:74:4C:04:33:FA:BC:57
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 019680C6FD4D3123738BED52D323839E6B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 09:00:46 +0000
Manifest this update: Tue 29 Apr 2025 09:00:46 +0000
Manifest next update: Wed 30 Apr 2025 09:00:46 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: /ZBIcAi2eqmUkffg1i2pLWMDV2g5DY65s9YN2DUaTkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:fd:4d:31:23:73:8b:ed:52:d3:23:83:9e:6b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Apr 29 09:00:46 2025 GMT
Not After : Apr 30 09:00:46 2025 GMT
Subject: CN=542b563edddacad2434eb6e4c7744c0433fabc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:a4:b0:e0:e9:93:6b:78:b1:df:da:a6:7f:
b6:76:88:a4:ef:e9:81:03:71:7d:8a:06:62:f0:62:
97:38:28:79:d9:bc:40:5d:5c:f9:5e:4f:13:ab:a8:
a4:58:21:c5:86:e6:84:45:b9:77:2a:c7:48:3e:26:
d3:4f:7c:7d:7a:62:d4:02:8e:42:bd:00:a2:e4:54:
76:3c:1d:71:0e:aa:e1:8a:c4:a8:2c:9f:35:38:4f:
38:09:59:85:39:67:d6:ff:00:b6:03:5c:e7:61:37:
72:77:23:02:d6:85:cc:77:eb:76:b5:1b:5b:9b:ac:
67:14:e4:7e:bf:3b:14:13:f3:36:67:57:08:59:47:
de:e1:4a:d7:f4:b6:5b:6e:57:de:a8:69:fb:12:3d:
92:de:aa:2a:d4:df:8f:31:d4:c8:07:ab:55:3d:54:
90:f2:5a:df:9e:78:d3:4a:86:4b:f8:eb:55:d0:2a:
0d:bb:28:33:67:45:32:80:8a:53:21:69:4d:10:bf:
ed:f7:6e:b8:0f:91:da:8b:6d:ca:d5:5c:19:e4:ea:
55:85:eb:d6:59:ee:02:bf:29:41:e0:3a:14:96:12:
67:a7:7b:51:9c:64:0f:7a:9d:98:c5:aa:7f:e6:85:
3c:dc:ad:2c:99:86:28:7c:a6:04:3f:28:43:01:35:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2B:56:3E:DD:DA:CA:D2:43:4E:B6:E4:C7:74:4C:04:33:FA:BC:57
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6d:85:5a:39:50:40:ca:71:11:48:7d:98:2e:27:49:ff:a9:
31:5b:1e:1b:a1:43:65:2c:12:9b:95:72:08:3d:aa:ef:df:13:
22:3e:02:5c:9e:bb:56:eb:8c:e5:0c:11:b4:27:7c:b4:48:af:
0e:31:73:41:0f:2f:c9:32:69:f9:4a:59:ee:a1:3e:16:36:a4:
79:2e:85:65:1b:16:ac:3a:65:93:20:c8:48:21:4c:e8:a0:af:
ad:96:e2:50:7f:a0:bf:8b:26:11:1d:a1:87:54:06:cb:a6:ee:
63:e0:25:f3:d6:38:cd:3a:c1:6f:8b:f8:fc:05:35:60:c5:fb:
59:86:44:e7:0d:53:4c:f2:b5:e0:af:7e:54:a6:f7:8b:38:7e:
46:b5:a6:9e:32:f5:1f:e0:9f:8f:ad:f5:44:5b:a8:0c:3c:96:
45:6a:01:bb:ab:96:95:a5:51:dd:f8:74:6a:a0:8f:32:33:33:
e6:b5:0f:32:38:83:b8:61:94:f2:49:76:06:c7:52:34:9f:de:
4e:41:1d:10:17:22:d1:1c:b7:41:8a:7d:2a:f1:05:8a:91:7b:
f0:b2:8a:82:4b:9c:b2:90:a0:17:1d:7a:1d:ea:27:e2:ee:77:
ed:df:c6:07:29:21:4a:ab:9c:bd:00:70:76:c3:b5:05:7a:ee:
35:3b:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:23 2025 by rpki-client