Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: qdCP9K1+g0sFEkTgTChjC9FIaKGkN2e5mje3FITMTCI=
Subject key identifier: E2:39:7F:FD:07:14:0D:1B:73:4B:75:C2:EE:5E:21:A8:96:1D:1E:9A
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 01967378AD26CE3B7EE34573095EB5C51BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 0E85
Signing time: Sat 26 Apr 2025 19:00:10 +0000
Manifest this update: Sat 26 Apr 2025 19:00:10 +0000
Manifest next update: Sun 27 Apr 2025 19:00:10 +0000
Files and hashes: 1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: STWx+sQbbaaNQSrDmQLOw5TF+dCCRvWV9VGPKrfSBMM=)
5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:ad:26:ce:3b:7e:e3:45:73:09:5e:b5:c5:1b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Apr 26 19:00:10 2025 GMT
Not After : Apr 27 19:00:10 2025 GMT
Subject: CN=e2397ffd07140d1b734b75c2ee5e21a8961d1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:50:4b:94:5d:29:12:f3:f5:de:2c:fe:91:
c9:ff:a4:ee:84:22:1f:3b:8b:54:9f:ff:54:a6:d2:
ce:c5:31:c6:b4:59:55:bd:0b:2d:cc:9e:74:78:00:
00:b4:b6:6b:be:c6:de:db:44:70:02:58:0b:31:d2:
8c:2e:ec:30:be:37:24:7c:cc:a5:9f:01:66:8f:e5:
19:07:5a:34:1d:1b:e9:24:fb:d5:d8:0b:7a:66:e7:
55:b1:3a:47:6b:35:01:6a:3a:24:28:ff:c0:a1:8e:
20:c1:f7:d3:f9:b2:21:2f:ee:6d:aa:81:f7:21:24:
24:b5:ce:7b:ce:60:25:13:23:42:52:10:78:2c:85:
ec:56:47:3a:ea:bd:c6:41:d3:a5:ce:dc:1f:be:69:
f7:09:43:a3:ca:6a:e8:71:0d:4a:76:d3:2f:64:6f:
82:fd:8c:f8:f0:76:e3:b0:60:4d:62:54:55:c4:64:
a8:a8:d4:09:74:a6:63:30:7b:af:4b:31:de:41:2a:
a3:3f:30:0a:a5:61:d1:a7:52:30:f8:70:dc:ce:5d:
43:2e:ab:f9:92:5a:5d:19:96:9c:78:1d:a8:5a:54:
ad:79:00:54:e5:c0:5b:35:01:11:27:a8:08:64:94:
54:dd:00:42:0b:5d:c4:31:3f:44:72:eb:b0:30:d4:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:7F:FD:07:14:0D:1B:73:4B:75:C2:EE:5E:21:A8:96:1D:1E:9A
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:06:1e:f0:90:b5:da:dd:df:81:44:05:c4:14:e8:51:fb:49:
a1:c2:f2:44:35:9c:28:e8:76:86:ee:ce:67:3a:69:af:d1:45:
79:d7:e4:d7:1a:48:78:16:7e:e2:7e:16:3e:c6:a4:96:e1:e3:
e0:60:7f:26:ce:8e:3d:b0:d4:6b:1a:0f:3c:6e:af:fd:ed:20:
5d:8c:5d:e4:4a:f9:1c:da:bc:16:ab:0c:4d:d9:50:30:6c:5a:
88:ad:14:4e:bc:8e:de:b6:71:f0:12:54:81:93:d6:09:b4:bd:
6f:46:61:d5:9b:c2:20:df:f2:69:d3:ce:38:7e:85:35:f7:82:
93:c5:aa:0b:3c:0e:06:04:94:e7:68:0b:01:a5:43:29:f1:e2:
1b:3a:5f:57:d7:18:9d:a6:78:d7:c3:8e:9e:44:0c:9e:da:4a:
12:8e:02:dc:8c:80:5b:8e:57:29:21:fb:91:6b:89:2f:c4:51:
38:31:41:71:a2:23:30:99:87:13:4a:55:88:e6:58:91:89:2a:
5f:8c:1c:db:27:24:ce:6c:02:5c:23:f6:61:db:9b:52:82:7b:
d5:4f:1e:15:78:f4:7e:87:6e:fc:70:aa:b8:f7:94:de:78:da:
d8:35:95:dc:38:b6:af:a3:b9:a6:61:1c:78:30:a8:28:8e:57:
e7:31:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:32 2025 by rpki-client