Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: 9YP2SjTg+I+UKMCrIDt6VAuqUCQHIeafL/45JmuNO0g=
Subject key identifier: B9:6B:D5:95:67:75:2D:AB:1F:94:CF:B3:E7:28:F4:80:F6:CE:96:A9
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 01967D57990C90A3B65487C0253A168AC5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 152B
Signing time: Mon 28 Apr 2025 17:00:14 +0000
Manifest this update: Mon 28 Apr 2025 17:00:14 +0000
Manifest next update: Tue 29 Apr 2025 17:00:14 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
3: QwE0tg9LdKDVZgDoLhxVp6PBffA.roa (hash: yMurYSYF30pu2PNCcOKhyaRqq0L6zG0Fnt31htAIGs4=)
4: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: gTbfNLiryj9aBHgOIe/6j902rGH941EsqmabRZgnRyU=)
5: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
6: h1tX918Ru7wMIHZ954P0v306Xyg.roa (hash: Zg0OUrwbI/zN84U1nYJmwSF5Cq40+ooxa0FqsV8xXqQ=)
7: nAYOjxNzO5dRvt8_CRbGHTd4KFs.roa (hash: Uo4ERWbv/tv9kXt93hPjc50gZuYNeg1Dqy1Fb1Nzfa4=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:99:0c:90:a3:b6:54:87:c0:25:3a:16:8a:c5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Apr 28 17:00:14 2025 GMT
Not After : Apr 29 17:00:14 2025 GMT
Subject: CN=b96bd59567752dab1f94cfb3e728f480f6ce96a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:2c:5a:41:a4:c6:be:3f:1f:7a:7d:ab:ab:
37:36:87:3d:46:48:f9:e6:04:c9:20:33:54:7f:21:
a3:ab:90:e8:24:7a:b0:91:02:1a:60:77:9e:77:a1:
da:55:e2:f6:3f:a6:bb:d0:9f:d4:73:ed:2b:8a:c8:
a1:9e:fe:be:95:cd:03:a7:87:f3:f1:db:9b:c0:45:
4d:0f:07:21:5c:96:95:a4:15:2f:98:59:f8:6f:09:
e8:87:b6:7c:28:c9:53:4d:fd:d9:d0:33:29:48:0b:
3f:af:2e:96:ed:e4:b7:22:e3:1f:db:3c:ec:9e:f8:
a8:0e:bc:f4:ce:42:0c:5e:97:bc:b7:da:69:69:38:
12:a5:37:33:45:b0:9d:0f:e1:e6:b9:33:e1:90:2f:
ac:0a:8c:40:70:ae:50:cd:ba:25:e5:03:99:e4:80:
85:de:e2:21:48:86:91:a1:42:5e:b0:27:f6:a8:41:
a6:10:03:75:e0:15:5b:e2:0a:cf:9c:6d:39:f2:0a:
98:ba:d8:83:72:c7:d4:91:4c:55:26:40:cd:c9:c3:
4e:5a:f6:b8:12:76:df:48:25:b7:75:6f:4f:ed:cf:
78:f9:b7:9f:b3:01:40:d9:2a:1f:e7:03:3c:18:e5:
36:6c:7e:42:84:83:5b:eb:75:4d:3e:9d:21:03:dc:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:D5:95:67:75:2D:AB:1F:94:CF:B3:E7:28:F4:80:F6:CE:96:A9
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:68:be:ea:79:5d:4a:d9:e4:13:9c:64:b8:71:73:e6:10:8a:
72:16:e6:e3:b7:9a:a5:79:52:8d:32:6f:3e:82:44:e8:98:54:
b6:13:ba:12:ec:28:0f:e4:66:0e:10:38:98:e3:15:ae:97:6e:
db:c6:01:a1:05:8e:34:34:c9:01:00:29:d6:e1:3a:c4:e7:4d:
39:d4:f1:72:99:ec:97:e1:e8:f4:5d:de:eb:67:43:dd:b1:ee:
62:20:91:98:df:ab:e3:e7:2d:1f:f3:48:71:97:c7:b2:49:66:
74:e7:64:fa:3a:57:e3:87:7b:a2:26:f3:8b:3f:de:8e:d3:af:
41:10:f7:49:80:d9:a6:ab:19:b8:85:85:3a:95:3a:d0:1c:d4:
8a:d5:8d:5f:8f:79:87:9a:55:37:46:1d:9a:91:95:db:b8:e6:
cf:1a:f8:da:84:c2:ac:0d:05:19:c4:30:a4:0f:29:0a:1a:a3:
33:c9:a3:2d:32:94:1c:be:ba:df:0f:82:ba:c6:b4:a8:3d:cd:
f1:96:f0:92:9d:56:59:1e:da:1f:6e:39:db:19:c3:ab:9d:03:
e8:42:07:6f:72:63:4f:12:89:f1:17:d4:54:2b:bc:26:2c:15:
9f:8e:05:a4:14:0e:4c:f2:47:d4:81:02:60:87:ec:a3:3a:bc:
c6:85:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:46:57 2025 by rpki-client