Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: R2Myq3d4eunpZ1ORH+9yV2YIjCKTBNhfwtAWhVwuq0w=
Subject key identifier: D5:8E:AE:3A:71:98:D6:F4:6D:7E:EA:6A:B6:AF:BE:28:54:9F:50:A7
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01967F464120899CA249B3E1EAF8B9B53705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 02:00:32 +0000
Manifest this update: Tue 29 Apr 2025 02:00:32 +0000
Manifest next update: Wed 30 Apr 2025 02:00:32 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: CUaqx0jyhgl/mGt+UKqMyv/sVq1LXyCzqCJn8sivSyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:41:20:89:9c:a2:49:b3:e1:ea:f8:b9:b5:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Apr 29 02:00:32 2025 GMT
Not After : Apr 30 02:00:32 2025 GMT
Subject: CN=d58eae3a7198d6f46d7eea6ab6afbe28549f50a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:e8:fd:8b:1a:49:38:bf:1b:61:6d:15:2d:
5d:95:44:07:99:e5:77:1d:b9:82:2d:7e:bb:e7:0e:
8e:14:bd:76:5b:22:19:a5:7d:1b:d8:ce:7a:f4:4d:
d6:3c:bf:ab:5e:da:ea:61:76:0a:bb:e2:e4:24:18:
8d:c7:d1:cb:f0:2f:8e:4d:9e:c3:68:03:7d:58:22:
88:e8:09:1c:49:5d:fd:02:3f:15:06:9e:a9:a8:37:
f2:7d:2c:54:60:ac:cc:53:9e:ac:61:ff:70:42:da:
2c:1e:1f:95:14:71:31:d0:f0:98:22:66:bc:18:d2:
1d:0f:bc:cb:41:d8:a6:27:e3:4c:ea:39:04:1f:92:
e9:f2:77:c4:cd:38:37:9e:87:30:b1:0a:38:63:9b:
f8:68:21:ea:a7:7d:e2:15:2f:01:55:60:13:33:d0:
ec:53:78:41:a9:9d:b4:16:8f:e8:0d:4e:88:e4:8c:
7f:7b:9e:3c:ad:c7:1b:3e:5c:c2:62:8d:98:75:7d:
d3:47:42:79:0f:c5:57:35:c2:62:1c:c6:8a:de:5c:
83:08:44:3b:98:7e:58:cb:8a:c4:d5:ee:21:18:41:
72:f6:73:f7:75:27:bd:38:bb:a0:4a:79:d8:50:1a:
b0:71:6a:cd:c4:10:f6:ad:b3:ae:fd:1c:d5:da:99:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:AE:3A:71:98:D6:F4:6D:7E:EA:6A:B6:AF:BE:28:54:9F:50:A7
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:76:46:70:1a:31:06:6f:31:fb:29:ff:78:8e:ce:1e:74:
00:a1:01:0c:ee:56:a2:e6:e4:99:45:e6:f8:0b:28:11:58:48:
79:8f:e6:3b:a3:8b:c6:60:f8:90:c1:09:e8:85:cc:51:67:ec:
4e:37:04:da:e7:80:66:aa:ba:0a:bb:a8:33:c6:57:f0:40:c5:
6b:30:bd:bf:74:c8:9a:0e:56:6c:b1:5c:4c:9b:75:06:44:67:
67:71:69:11:95:94:80:19:8e:5b:7f:95:fa:42:c2:16:c8:0c:
df:43:36:14:e9:34:40:62:0e:33:3b:b5:65:c7:8d:cd:9c:9d:
24:0b:64:2e:26:61:94:a7:76:6a:02:d4:50:5b:45:46:1e:be:
0d:fc:67:58:38:bf:40:f7:e9:75:16:ec:a0:ba:50:4f:59:b9:
bb:52:ca:bc:a8:75:9f:31:53:1c:d8:03:49:fc:ca:af:74:4e:
fb:9b:ed:a3:01:ed:6d:6b:bb:e0:72:f7:a4:79:52:0b:93:85:
6d:9a:50:eb:d0:ed:9d:b2:80:fe:ca:0f:27:20:9f:37:cb:60:
e0:78:de:b6:47:0c:1d:5f:8c:84:01:57:ef:e0:56:6f:cc:d0:
df:79:8e:70:63:47:2d:6e:d3:b7:58:96:b9:5b:26:16:20:ea:
29:8f:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:40 2025 by rpki-client