Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json)
Hash identifier: LKoadiMFRWcob8nfEW5A+S8iR36oxPmFNyv0zU5Hdjo=
Subject key identifier: D4:10:F9:B7:49:73:04:F6:4A:59:0C:20:A1:EC:4F:D5:75:FA:9E:D1
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 01968021D0C81320714185D11678606EE8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
Manifest number: 0F6D
Signing time: Tue 29 Apr 2025 06:00:21 +0000
Manifest this update: Tue 29 Apr 2025 06:00:21 +0000
Manifest next update: Wed 30 Apr 2025 06:00:21 +0000
Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: Wha5vcMFhb1TUgN+DkgOYzNPzVMqEhyHv67rEblRDtk=)
2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:d0:c8:13:20:71:41:85:d1:16:78:60:6e:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Apr 29 06:00:21 2025 GMT
Not After : Apr 30 06:00:21 2025 GMT
Subject: CN=d410f9b7497304f64a590c20a1ec4fd575fa9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:6d:bf:9c:0c:73:e5:5e:a4:14:c0:7f:bf:
89:a8:16:9e:11:f4:41:ba:59:e8:e3:3b:67:ab:68:
4f:b6:97:41:51:8c:5b:14:8d:7e:2e:c4:f7:0d:51:
c3:8e:fe:54:13:2c:60:7d:c7:12:ca:d9:8c:d8:6a:
73:1f:7f:f0:29:3d:bd:04:93:67:5e:b0:61:32:b4:
4f:e6:fe:76:e2:e0:54:72:fe:4c:f4:90:7c:6f:89:
32:f5:12:e0:50:3e:aa:da:4e:52:7d:dc:cc:cf:48:
59:84:87:ad:ac:ac:4c:a1:04:ea:76:19:fa:0c:b7:
96:39:ab:5c:ed:c9:6e:41:c7:66:c3:ec:8c:63:6a:
d4:2c:ac:42:6b:0e:31:29:e2:c3:7b:1f:f1:d0:6a:
0b:14:ee:9f:37:dd:c5:9f:6b:59:ff:9f:3a:63:5f:
66:bd:f7:ab:3e:6b:f5:d8:15:0e:3f:b3:43:63:c0:
59:6e:b1:e4:cc:4e:61:47:57:2c:b7:78:58:65:00:
b8:64:57:2b:59:e4:ee:1c:5f:c8:f3:80:a0:1f:9f:
cc:58:3e:68:b6:62:1d:d2:86:ea:b2:2a:c1:4f:5c:
e3:3b:bf:b3:a5:f2:a3:b4:d4:16:39:3e:64:3a:60:
65:08:1a:29:cf:ef:b2:3a:e6:80:29:70:11:18:f6:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:F9:B7:49:73:04:F6:4A:59:0C:20:A1:EC:4F:D5:75:FA:9E:D1
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a2:95:a4:ef:17:1a:99:8f:03:ec:77:2f:b3:1b:d8:f1:85:
ea:4f:49:53:54:4a:51:8f:82:53:0c:a9:29:a8:b0:65:e0:ae:
2f:cb:32:29:f5:f3:c6:ad:5e:54:e0:0c:04:ed:77:1b:45:76:
32:e0:5e:ce:af:e8:02:00:50:cd:7a:d6:54:90:c7:08:2c:d8:
cd:57:c9:75:97:1a:bb:06:69:70:05:87:d0:c4:f4:44:1e:4a:
67:e6:46:fa:be:9a:50:bc:67:0d:7c:3d:14:7f:ba:da:10:40:
f9:89:bd:c6:9f:41:67:5a:c8:f2:f5:99:fa:bb:66:b6:5c:4f:
da:c5:d6:ca:75:9d:d3:e3:14:e4:c1:ed:58:6f:eb:cc:32:12:
aa:14:b8:05:ee:ee:2c:37:d3:2a:fc:54:b1:26:0a:c4:6c:ea:
ee:b3:1e:07:c2:f7:09:99:1b:a3:33:fd:5b:86:10:aa:f9:21:
ba:59:b1:56:43:49:ac:b1:1f:6c:f0:d0:f8:91:35:7d:90:db:
6c:3e:09:f2:53:57:57:b6:c3:00:64:a6:0e:70:c4:58:ee:83:
c7:cf:42:33:fe:a9:85:9b:27:b8:2c:d4:28:e8:5b:c1:de:a6:
fa:68:e9:06:d6:03:7b:92:2b:fb:ae:82:89:dc:5d:28:19:2a:
bf:63:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:29 2025 by rpki-client