Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: DuBPWCpKL6oXmt44C/25uqIfOuWXBrCgROJDdKzID9I=
Subject key identifier: BD:CF:F3:E5:09:54:FE:9A:01:DD:F0:E8:EB:AA:B8:B6:FA:8F:94:1F
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 0196729D58D89BF70475AF38811B6834A392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 151D
Signing time: Sat 26 Apr 2025 15:00:36 +0000
Manifest this update: Sat 26 Apr 2025 15:00:36 +0000
Manifest next update: Sun 27 Apr 2025 15:00:36 +0000
Files and hashes: 1: 4SxEa8qHfL0SdS-yvynVjEWywI0.roa (hash: ed273NQ5dggxiwmHaUzsS7LYiMx/0KEG21fx026Qijc=)
2: 57zAUxjN80d98_hrUg6wNGuh-LQ.roa (hash: qIcET8+9I+XlvyugPkuqmk4yArAibC2n8LmahOzKwL0=)
3: LE7N1a1uboQzN97q5uXEpXRCthI.roa (hash: acxO9/yWByiaEkWpHMZY/pa7lJUQ5fZxyIs+7NiR+UQ=)
4: NmoYPoFsB3H-yWZn9Rb0NDz1MJ4.roa (hash: FwqkjteV8mEkwCHBz60OLk0gwsGOE+XgtXFsarBN/XQ=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: IPv5INdgBZWf+Tg6iJeq3jug3Zn4nYTszy9qYA4MNvM=)
6: rnTaQ1uEKUsJsa3f9-uniTuwHWo.roa (hash: 65NB0UfxYYmSvSLb5gS9zELjlvrzXWC3McdcTIR7Hxk=)
7: tIc5dJ9row9Jpwnimlce4tYbp44.roa (hash: ouwAo45RW/R/dO1EFuBCaboweb6Z3RjFTDf5e9DgnQU=)
8: xv_S9Q_lixnhLdeB2FeY6-83q40.roa (hash: fpHqpuP8WhUb/qgqx71BT4D9l/LEKw+tKbvv5QvJ1WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:58:d8:9b:f7:04:75:af:38:81:1b:68:34:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Apr 26 15:00:36 2025 GMT
Not After : Apr 27 15:00:36 2025 GMT
Subject: CN=bdcff3e50954fe9a01ddf0e8ebaab8b6fa8f941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:a1:28:ec:7c:89:05:58:c8:24:48:42:27:
4e:49:80:74:b2:0e:bf:a0:fa:4b:63:71:84:e0:e0:
50:a1:c4:33:5f:69:5c:ed:dc:52:6d:92:c5:8e:00:
df:36:2d:4e:4d:96:e6:f3:4b:89:29:a3:40:93:06:
f6:c3:38:67:26:42:81:06:d1:96:90:27:2d:d1:99:
8e:28:b4:3e:bb:de:d8:d1:41:74:40:f5:5e:a1:7d:
a2:ef:2c:17:73:2b:f1:e1:84:07:36:d3:67:ed:a8:
f7:0e:dd:0b:39:3b:cb:b7:0f:aa:db:e4:ad:03:3e:
4b:b3:a8:88:35:6e:31:b3:94:ca:ca:d8:90:9c:53:
b2:d7:0d:5e:d2:11:6c:c1:b2:42:ed:da:ec:5f:41:
96:1b:4e:9d:88:47:66:af:52:27:6e:33:d9:45:2a:
f4:7b:77:ac:d9:52:28:d2:3a:f5:12:33:6a:1d:7a:
76:0f:98:95:f2:3d:7a:5d:bf:e2:00:e8:4d:20:a6:
c7:4f:f6:d6:64:5e:62:72:1c:4d:99:e9:85:cc:81:
09:59:da:26:c2:1b:c6:fb:aa:0e:9f:99:13:62:95:
32:37:f7:b3:1f:7b:05:dc:59:03:25:b6:0f:82:26:
09:9a:f8:b3:48:b1:ef:08:b5:8d:5c:b1:4c:67:d7:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CF:F3:E5:09:54:FE:9A:01:DD:F0:E8:EB:AA:B8:B6:FA:8F:94:1F
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:df:f1:d1:86:f5:49:64:0f:9d:99:01:4c:97:82:a2:d4:
63:69:aa:f8:71:29:98:b2:2e:16:12:f2:22:e5:78:a0:9a:b4:
6b:71:d9:e1:25:08:c5:a3:17:34:f9:98:a1:5d:6b:80:44:b3:
01:3b:1a:56:4e:51:85:61:7d:f3:30:02:1b:ff:fc:65:1d:2e:
f5:8c:ea:4f:4c:d3:aa:6b:35:53:f2:05:06:f1:f2:f4:1d:4f:
e5:44:9e:b5:a6:d8:86:88:0d:81:c2:29:37:7f:c1:a8:1a:b3:
53:24:f0:98:c3:83:a5:84:8a:c9:60:c8:fa:5f:f4:c5:08:5c:
82:73:b7:05:d9:21:c2:04:38:ed:96:4a:9e:42:7e:50:67:e7:
a5:4e:3c:cb:7b:a7:c4:23:1d:43:bb:89:53:dd:f8:08:49:06:
b9:47:1b:b0:ab:26:e6:12:31:06:35:e9:db:00:19:1e:eb:d3:
ae:b9:43:6c:89:1c:1e:f4:8d:c8:43:c5:6d:b1:7e:8a:44:6f:
17:04:70:af:03:5b:4a:3f:98:45:f9:f6:5d:06:23:8f:fb:b6:
75:e5:ca:59:5c:c7:e2:a5:5d:de:d0:8d:b3:89:d0:f8:4a:63:
e1:74:f5:53:6f:f5:88:20:a1:77:f1:74:e7:23:df:ad:2e:50:
bb:99:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:55 2025 by rpki-client