Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: wb2HB6qvIoTRfq72tmz6AIy7gRRPRdzxKytmc7scWrs=
Subject key identifier: 00:21:35:99:8B:26:18:CA:B2:6F:30:5E:00:78:7C:41:AF:EE:04:F2
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 01968022464430620F1E4F899A8BD9DE7874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 06:00:51 +0000
Manifest this update: Tue 29 Apr 2025 06:00:51 +0000
Manifest next update: Wed 30 Apr 2025 06:00:51 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: vy00fHNDf1LZMqLbmZtR6b+iiuazFS835ZuwgdR3jOE=)
2: b8cMShMrRsZNeCR-DHToKJSbSFc.roa (hash: Xs+2pmDsikwjys7lR2WnXyOpx7FAM2jx9740akpfIYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:46:44:30:62:0f:1e:4f:89:9a:8b:d9:de:78:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Apr 29 06:00:51 2025 GMT
Not After : Apr 30 06:00:51 2025 GMT
Subject: CN=002135998b2618cab26f305e00787c41afee04f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:67:ac:d8:5b:56:1c:8e:55:42:ac:cb:69:
55:ed:f9:00:af:37:ce:95:ee:a9:ac:46:4b:49:56:
b4:0d:93:26:b5:22:9c:fb:2e:59:7e:c0:6f:18:77:
95:50:ef:a9:e2:39:29:bf:c5:1b:18:9d:fe:a3:8d:
ef:d0:53:87:d7:49:56:f2:9d:b9:8b:91:93:ce:e3:
25:be:54:39:8a:1f:f6:13:fb:20:2f:d2:bc:5a:ac:
56:06:8e:e3:3c:4c:8f:14:b4:eb:7f:04:d1:0f:78:
23:a0:33:eb:1a:f9:4f:3c:56:21:e8:ea:e0:bb:36:
7d:40:06:33:f4:56:1b:f5:1b:ba:62:2b:f9:17:6b:
12:83:23:d4:bd:58:fa:07:00:85:3c:1b:fb:37:80:
3a:c3:0d:37:64:b9:54:97:26:e2:c4:79:52:10:9c:
e3:ec:8a:c0:58:60:1a:fd:3d:a4:fb:f8:7a:7a:21:
10:d1:a3:db:49:40:73:70:9b:45:1b:25:8a:82:f9:
7e:f3:b0:ff:92:5a:c1:50:6e:f0:6d:3e:0c:5b:6f:
ed:12:38:b1:92:2a:1f:78:e3:19:ad:fb:a1:c4:50:
57:85:b6:6b:b5:c7:70:d0:09:4c:1c:b2:7d:c9:2c:
58:18:3b:ec:fb:de:88:73:31:7c:1a:28:59:f5:ee:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:35:99:8B:26:18:CA:B2:6F:30:5E:00:78:7C:41:AF:EE:04:F2
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:05:8c:91:a5:74:5d:53:db:64:ff:3f:de:3f:c7:d4:30:95:
ac:b7:6e:cc:cb:2e:e5:8b:70:ba:6a:22:62:7e:eb:e4:fa:b7:
5a:f9:fa:3d:60:13:de:3d:fc:b5:94:37:0f:13:2d:83:49:c8:
be:86:f6:7c:85:fc:95:a3:84:8f:d1:c3:f0:a2:ba:c4:d9:02:
2e:2d:c9:08:18:ef:29:39:34:83:1a:3c:6c:13:5c:a8:cd:e1:
66:89:af:5e:29:41:5b:0a:d1:41:d4:4a:a4:de:59:ad:13:02:
ff:1c:4e:e2:f3:fc:73:91:c5:57:44:41:a7:18:c2:4f:6f:e1:
d8:b7:2f:d7:65:c4:81:49:c8:89:08:e8:01:d8:f3:31:83:60:
00:2e:ff:65:ae:f8:1a:aa:91:94:1b:0e:3b:ef:06:29:9b:b7:
d3:47:a3:14:a6:63:3a:d0:40:f6:38:02:74:68:05:d7:d0:92:
e1:b7:81:8d:4d:49:18:23:06:c7:96:d3:ec:1f:d9:f9:98:5d:
de:7b:27:eb:e6:2d:3b:61:f9:65:c9:74:8c:f3:4a:c4:1a:eb:
3a:d8:19:98:7e:d9:a7:c1:2a:a3:15:89:1e:0a:94:57:2c:90:
e3:8c:6a:44:fc:04:71:07:77:82:53:00:c5:ad:f2:19:5b:30:
1b:55:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:25 2025 by rpki-client