Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: vjGrA1D3NY6h/SIXbwfx9M0fxoti3JM+FYRCUsxgnWA=
Subject key identifier: E3:F2:BA:FC:FE:7F:7F:F1:F6:B1:4B:AC:F8:83:E4:51:E4:C6:E5:A7
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01968624567FD2D375CED650B49EE2CD8BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 07E1
Signing time: Wed 30 Apr 2025 10:00:50 +0000
Manifest this update: Wed 30 Apr 2025 10:00:50 +0000
Manifest next update: Thu 01 May 2025 10:00:50 +0000
Files and hashes: 1: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: GYDtannXJ8xAFCvqHFEYwnSMnSGE0DE8Gn/cOK6b44k=)
2: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:56:7f:d2:d3:75:ce:d6:50:b4:9e:e2:cd:8b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Apr 30 10:00:50 2025 GMT
Not After : May 1 10:00:50 2025 GMT
Subject: CN=e3f2bafcfe7f7ff1f6b14bacf883e451e4c6e5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:7c:a4:8b:d0:cd:15:e2:aa:19:cd:30:ec:
7b:bc:2e:e0:71:4e:2a:67:c5:50:9b:66:70:c5:65:
81:29:bf:9e:39:ea:8d:e1:11:32:77:a6:fc:d4:5d:
1a:36:5f:7f:af:a9:1f:56:c1:cb:97:57:c3:2d:f2:
78:a1:3e:49:43:a8:66:85:76:6a:2c:0b:6b:08:7a:
a7:83:d2:f0:8b:e8:8f:66:08:2f:be:8d:65:48:42:
2c:25:18:24:1f:3f:a3:d9:e1:dc:ca:f3:24:1a:5d:
0c:52:c4:ff:dd:66:e3:33:3b:73:cb:4f:47:53:f1:
04:49:7f:86:66:ed:35:96:16:ab:10:01:da:1c:21:
42:7b:bd:c8:67:5a:12:01:69:88:97:86:95:84:74:
ce:44:62:65:ed:c0:07:aa:ee:c8:95:88:d3:35:c1:
4d:cc:7a:f4:77:34:3f:4d:43:93:e9:f2:b9:f6:b3:
a6:c3:79:01:3a:66:70:e8:70:d3:14:2d:2c:bd:9f:
21:18:b6:f9:fb:24:fd:02:26:11:e4:81:f4:13:c1:
7a:cc:50:0a:8e:ba:0e:19:2c:f6:88:72:c9:a7:dc:
3e:3a:ee:4e:be:e2:e0:e5:ca:09:44:0b:2f:d9:5d:
84:ed:b9:4e:40:a3:4e:be:e0:3b:6f:05:e9:01:87:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:BA:FC:FE:7F:7F:F1:F6:B1:4B:AC:F8:83:E4:51:E4:C6:E5:A7
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:f2:3f:f2:56:d8:8f:66:ed:0d:59:20:76:83:01:35:87:
75:98:c0:f8:87:66:a0:7e:11:53:43:be:59:ab:4d:fe:cb:34:
a4:ab:6f:60:6e:39:cf:68:f8:08:04:57:2a:35:75:d1:2f:9d:
a6:90:c5:5b:02:bc:de:18:6b:5a:6a:ad:08:d2:e7:67:51:a7:
80:a4:27:95:9a:09:17:89:9f:13:8c:39:2e:0e:bb:86:c6:95:
71:91:98:5b:d8:fd:ad:33:5d:ec:8a:9c:e0:6b:6f:17:e5:2c:
9c:b0:47:fa:a0:a6:df:f7:60:92:52:07:d3:e3:db:85:d5:89:
80:87:4d:8a:09:0b:be:d5:c6:25:da:6a:ef:0d:56:64:b0:8f:
ff:a5:e2:8c:58:d3:a0:33:c8:81:12:3e:ea:a3:3c:9a:86:34:
54:f3:14:56:31:01:79:90:98:e1:f8:06:b6:be:43:52:10:35:
ca:4f:cb:c4:5f:37:4e:bc:82:bd:07:33:40:3f:47:83:d2:90:
03:be:08:1b:4d:52:95:0d:84:6a:71:a8:28:e7:0e:0a:3f:24:
09:95:4d:78:89:6c:d2:fe:c1:26:82:92:31:93:fb:48:5f:e6:
8d:80:f7:f4:61:01:56:1f:d4:53:18:c8:25:23:8d:b7:94:25:
5f:6b:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:50:17 2025 by rpki-client