Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: vrstYrlJjoKDeD9OsXsS6PYw3Wtd5NQWCmoA+D9Ax3A=
Subject key identifier: 4D:FA:02:18:55:10:42:09:50:E5:96:3F:D4:24:38:E4:A1:3A:4E:FC
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 0196741E42C3C6E335019709989DCB9C9A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0B18
Signing time: Sat 26 Apr 2025 22:01:02 +0000
Manifest this update: Sat 26 Apr 2025 22:01:02 +0000
Manifest next update: Sun 27 Apr 2025 22:01:02 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: aJn6Kcke5Pt/KiF4LkRwWfG5z2J8gp4ELj9yxIIOzRc=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:42:c3:c6:e3:35:01:97:09:98:9d:cb:9c:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Apr 26 22:01:02 2025 GMT
Not After : Apr 27 22:01:02 2025 GMT
Subject: CN=4dfa02185510420950e5963fd42438e4a13a4efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:34:cc:28:08:99:25:61:a0:ac:fc:d3:88:
16:54:80:41:4d:71:ff:e9:77:0d:40:f2:b5:3e:1f:
0a:40:63:9d:5c:00:fd:a5:24:f0:44:9b:98:36:04:
78:13:bd:90:0e:30:ad:ce:c5:0e:c1:21:04:18:a7:
49:b6:8e:a9:c4:e9:dd:2f:e9:22:8c:ba:18:f8:dd:
9e:f8:72:c8:af:d3:40:bd:2d:24:3d:57:6a:13:4f:
f8:67:72:2d:72:0a:f5:54:c1:37:6a:d0:04:54:5a:
08:15:71:6b:dc:02:eb:18:db:b4:dc:a1:21:1f:5f:
5b:1b:bb:a7:81:47:0b:95:8f:06:6b:28:a2:b5:c0:
40:b1:26:bd:ba:4c:81:c8:65:9f:67:3a:3b:f7:77:
fc:d5:c7:40:d6:14:14:ef:f1:d7:91:b1:ec:55:34:
84:76:5d:34:f6:13:f8:96:d2:60:f2:d1:0b:ed:f9:
9b:34:b4:3d:07:e0:45:4c:cc:83:74:5e:5e:75:c5:
6c:b8:02:68:11:c4:c2:1f:ae:f2:12:48:b3:d4:11:
dc:df:ed:5c:e3:04:e2:1b:64:87:0f:6a:29:37:dc:
ce:1a:3c:c8:a8:f7:89:46:62:81:bd:d0:d8:3d:42:
18:55:af:db:6a:fa:d6:c3:e7:31:98:82:15:a1:39:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:02:18:55:10:42:09:50:E5:96:3F:D4:24:38:E4:A1:3A:4E:FC
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:76:5b:ab:bf:25:99:fc:13:a3:19:ca:1a:73:a9:0a:80:65:
31:67:03:5f:9e:89:c6:67:c6:e9:04:3c:2b:b2:99:3c:86:c7:
74:3a:09:60:23:5b:80:09:82:93:08:5e:55:37:d6:5e:d1:f5:
94:a3:2c:69:6f:90:da:c9:a3:10:76:02:65:b8:c9:61:d0:e5:
fb:b1:0f:ed:b8:87:6b:6a:59:65:fd:73:ea:7d:94:fd:a6:b2:
0e:68:35:cc:5c:6a:98:f9:66:9a:92:da:4b:f8:01:f3:03:a9:
1d:25:4e:80:b9:0c:1f:77:89:a9:f3:33:c6:c6:61:d0:11:cc:
af:56:61:88:e5:94:33:2e:bb:f2:3e:85:d7:63:e6:4d:e0:8f:
a9:7c:0f:e0:b1:83:47:8c:9c:61:4e:ba:c3:16:ad:a4:b5:8b:
19:77:af:5c:cd:13:83:69:56:7e:a3:a1:71:19:1f:e0:2f:31:
ed:ae:dd:3e:b7:91:01:83:59:87:8c:8f:e6:91:b1:e2:e0:bb:
ad:50:37:a4:28:34:0b:6f:fa:0d:9b:6b:29:0b:70:2f:60:50:
16:6e:71:4c:df:50:18:98:8f:6e:0c:59:a4:ba:bc:ad:98:7e:
5f:27:58:01:9d:09:92:f0:c6:c0:59:4f:a9:2a:ae:5e:9b:0b:
44:7b:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:38 2025 by rpki-client