Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: DqUeeJv8vyTCbyHsyW5xKJR+QOekVc0RkgJ9UnXvhaM=
Subject key identifier: 5C:6A:0C:F1:A4:72:42:53:37:FF:30:D9:01:17:DF:27:68:68:F0:45
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019683C7F9A51F5F8DA98101183664A47527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0B41
Signing time: Tue 29 Apr 2025 23:00:42 +0000
Manifest this update: Tue 29 Apr 2025 23:00:42 +0000
Manifest next update: Wed 30 Apr 2025 23:00:42 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: uk2GHJ2Fmeye0Bujyufit21xHOqZT/QTNB28gWGlmLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:f9:a5:1f:5f:8d:a9:81:01:18:36:64:a4:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Apr 29 23:00:42 2025 GMT
Not After : Apr 30 23:00:42 2025 GMT
Subject: CN=5c6a0cf1a472425337ff30d90117df276868f045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:a7:65:7f:fa:20:eb:1e:d8:62:78:ea:81:
f1:de:26:1d:cc:aa:df:ac:51:2e:50:b7:77:5b:22:
90:29:a0:dc:07:0f:56:16:a4:f8:3c:71:41:04:d5:
46:2a:55:fe:17:b8:0f:a1:27:66:e4:8a:08:c8:47:
55:03:6b:12:6f:a1:2e:58:86:32:99:0a:cb:78:0c:
6a:f1:30:44:f7:ba:18:9b:1e:b0:51:55:df:c6:be:
1f:5b:a1:3d:8c:4f:c0:c7:f5:b2:82:a9:f6:ff:5e:
e4:cf:73:ab:36:eb:b3:58:30:e5:5f:7e:4d:ee:45:
9c:eb:06:18:91:fc:f4:10:c5:48:be:81:d3:68:5e:
00:06:7c:d9:76:da:e1:ce:8e:bf:78:9b:d5:cd:7a:
1f:7c:51:f7:30:89:46:8f:2d:ba:7f:ec:2a:ae:e5:
59:49:de:5c:c5:98:4d:35:dd:8c:09:f6:47:3d:5b:
13:49:2f:51:ce:ff:68:2c:af:6b:33:37:55:d7:76:
89:fc:f7:84:b5:60:ab:e5:ba:e8:4a:ef:ee:39:05:
5e:93:94:52:98:5f:d2:f1:5b:6f:19:5d:2d:fd:44:
e7:ce:2c:e9:11:3c:8a:03:a1:01:00:a4:18:a5:24:
c8:9e:79:5c:cb:56:02:82:0b:2a:5a:82:05:f7:8e:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6A:0C:F1:A4:72:42:53:37:FF:30:D9:01:17:DF:27:68:68:F0:45
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:1f:a2:de:c6:40:07:fb:60:33:7b:d2:8a:5c:d6:1d:b9:
37:f3:78:61:7f:b0:28:01:d0:5d:4a:95:7d:e3:a3:be:f3:34:
4c:08:29:40:83:a0:93:18:44:3e:46:ee:27:52:e2:bc:0b:32:
bd:99:32:94:8f:dd:27:7d:cc:41:ab:24:3b:cf:1c:d1:ce:d2:
08:77:31:2e:ef:18:4d:98:d3:09:5f:bf:9c:36:9c:0b:56:d2:
61:89:31:0d:df:24:d0:40:28:f7:ae:e0:39:74:2c:1f:07:87:
33:e3:f8:e1:cb:bc:0b:96:fd:e5:bc:8b:15:c9:13:48:70:cd:
1a:0f:65:89:c5:e1:9b:4b:e3:6e:90:d3:be:fb:0e:6c:97:ce:
87:33:16:7c:94:a2:9c:4f:c9:22:d7:c1:5a:ed:07:d0:8b:19:
a6:ae:be:50:cf:78:1f:31:66:a6:3c:48:3b:3c:de:3f:48:9c:
e9:f4:a9:44:3c:25:be:13:1c:f6:0b:0c:54:ba:18:eb:bc:de:
90:45:f6:aa:d6:ae:69:b3:12:bf:b1:0c:f7:96:09:6c:6d:cd:
64:98:50:59:c3:f0:6e:e9:64:6a:ec:f1:88:1a:3e:eb:66:88:
00:33:53:3f:ef:c6:39:b1:12:a7:e4:68:0d:8b:a8:95:17:2d:
6c:06:7b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:06:29 2025 by rpki-client