Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: R7UvS/H1IBFw+FbK8gq6cBkmwpqBtOvv9xOwcTIioC0=
Subject key identifier: 86:11:6B:67:1A:3B:87:E7:0F:50:44:C6:5E:66:66:C0:1C:1D:76:36
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 01968359CD6203CBB1DE354AA9865259413C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 21:00:22 +0000
Manifest this update: Tue 29 Apr 2025 21:00:22 +0000
Manifest next update: Wed 30 Apr 2025 21:00:22 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: IF9ss-sy9yvnm-nHGofeLVRarxk.roa (hash: 2ET7jL1bePjM+quMou/IL9fIy3wVf50O3tX+ei7Qlno=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: tVf8foPfTvMkcrXY6qPFDzFkqhaUI8H25PwmjkS/h/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:cd:62:03:cb:b1:de:35:4a:a9:86:52:59:41:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Apr 29 21:00:22 2025 GMT
Not After : Apr 30 21:00:22 2025 GMT
Subject: CN=86116b671a3b87e70f5044c65e6666c01c1d7636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:6e:69:23:92:9c:b3:dc:12:9e:9c:e8:f9:
df:e5:de:68:78:80:21:c5:e6:48:09:a4:6e:b3:94:
26:9d:be:61:80:c7:44:6f:2b:f5:ea:4f:66:3a:49:
16:47:15:05:46:71:8a:2a:8c:99:75:ac:b0:84:16:
41:2c:a7:90:1f:51:38:bc:e9:66:4d:c3:29:0a:dc:
65:18:a5:ce:2b:78:a4:27:b3:00:c7:b2:7e:fa:03:
11:9c:77:e0:60:55:43:ec:9d:1c:c4:6a:3f:81:07:
59:fc:ba:c2:46:a2:2c:2a:e3:06:5b:e6:ce:02:f3:
7b:f7:c2:70:3a:36:73:7a:4b:f4:99:a6:24:60:7b:
79:a3:3e:3c:19:7d:b5:63:19:f9:5a:4b:e4:62:71:
0e:40:08:b1:06:f4:a2:a8:33:6a:44:04:e5:be:79:
16:56:20:f2:2e:18:a2:a4:4e:37:29:03:4d:11:ad:
d5:f4:b7:92:5c:66:fe:3a:04:99:be:fe:36:58:35:
8b:e1:aa:27:fe:ca:19:d5:91:9b:a2:a2:ae:8b:0d:
01:06:69:19:ac:c6:2d:35:73:9a:65:b4:f1:8e:4a:
65:7f:1a:33:30:59:79:1a:26:6d:57:2e:17:ec:cd:
a6:e0:c3:0c:ce:e5:6a:8e:86:fe:2a:9c:cd:67:df:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:11:6B:67:1A:3B:87:E7:0F:50:44:C6:5E:66:66:C0:1C:1D:76:36
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:08:35:13:50:7e:72:5c:d4:bc:ff:dc:b6:e9:81:34:b0:37:
81:b5:bb:40:16:03:e4:02:7e:cc:9c:60:e2:c8:78:41:91:c5:
a0:80:b8:12:6e:a2:ce:1d:f6:27:ba:2b:59:c9:62:ea:de:b4:
85:fc:5a:47:91:b1:16:37:16:7c:e7:ec:02:df:d1:33:da:89:
84:be:60:fb:9e:0b:4d:93:61:0f:14:cb:5c:31:20:51:20:ad:
75:92:87:c0:7f:db:6d:48:24:bb:38:18:c6:c9:99:c9:d0:f4:
c3:bc:6e:ec:e6:2f:87:a8:ba:a5:d7:51:37:be:f8:9e:78:f4:
cf:c4:5d:28:d9:d4:8f:11:b0:f4:12:f4:1e:cb:45:e7:c0:4b:
2f:e7:d8:b0:b9:36:1c:d7:65:f6:c6:57:e4:2e:a0:36:c1:84:
ae:cd:1d:fb:fa:1b:ae:ff:c3:e7:e7:0d:6f:f1:e6:01:35:00:
5f:0d:42:42:6f:86:3a:d9:f7:a9:85:34:f9:2d:b6:71:b3:2a:
14:b6:57:54:c2:f3:72:53:46:d5:41:e0:6e:c9:ff:0c:d7:c2:
59:ec:80:fd:e9:aa:8d:7c:ab:8f:f2:26:7e:b4:2a:1a:05:2c:
61:b4:1d:e8:02:f8:24:3b:92:78:ae:1b:6b:a4:33:f0:2f:34:
0c:fe:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:05 2025 by rpki-client