Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: 7hXfTXAvqpLB3WAD5rMF6wuKD4okSDW1cT5kkIsUj8s=
Subject key identifier: FC:30:0F:DA:FA:4F:4B:3B:76:CB:17:87:39:13:32:61:18:AE:5F:6B
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 0196760D0AB1FE2D9D8B4FBBC92B9FC3D316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 11C2
Signing time: Sun 27 Apr 2025 07:01:28 +0000
Manifest this update: Sun 27 Apr 2025 07:01:28 +0000
Manifest next update: Mon 28 Apr 2025 07:01:28 +0000
Files and hashes: 1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: 48qmZDtXJoERlkPqA23OJt7mKtBKxcUyQiHtDi/RrdA=)
2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:0a:b1:fe:2d:9d:8b:4f:bb:c9:2b:9f:c3:d3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Apr 27 07:01:28 2025 GMT
Not After : Apr 28 07:01:28 2025 GMT
Subject: CN=fc300fdafa4f4b3b76cb17873913326118ae5f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:c4:c3:56:98:9d:09:79:ce:cd:75:65:88:
27:c2:73:98:00:31:93:12:4c:1a:21:67:2c:8c:9d:
58:a5:63:86:33:12:f6:22:b3:ef:90:24:6e:4e:3c:
76:c3:3e:01:a4:b1:17:2a:fd:c9:28:2b:ed:fe:b8:
e7:9f:24:b2:73:9e:7a:b2:eb:e9:62:17:57:41:a8:
88:b6:5c:57:89:b2:42:cf:db:d5:b4:14:af:b9:2f:
48:42:9a:8a:4e:a3:62:5b:67:55:2c:89:e9:1f:8d:
48:17:ec:bb:f1:1b:cf:00:f1:54:25:e4:23:16:c4:
8b:27:1c:e2:88:1d:c0:95:f4:7d:9a:36:4b:1b:00:
af:bb:f7:c3:1b:2d:ea:1b:2f:10:3c:ce:c8:72:11:
72:63:7a:6c:e7:90:a2:4b:2b:be:0f:16:31:c4:fe:
21:d3:b1:cf:96:cf:f3:2d:63:d0:c8:b1:ed:9c:2b:
17:1f:28:e9:fd:de:73:0c:1d:d2:af:90:4b:60:1d:
0c:81:ec:c1:f4:2e:da:9e:ec:b9:48:c4:58:28:d7:
f8:7e:10:6f:08:ad:03:48:60:2d:d7:79:37:70:16:
39:14:93:e8:ea:a1:ff:3b:b3:44:72:5a:8a:55:76:
4e:e8:8b:93:b9:68:a0:5a:a8:49:27:3b:88:6c:e6:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:0F:DA:FA:4F:4B:3B:76:CB:17:87:39:13:32:61:18:AE:5F:6B
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:11:df:01:fd:80:50:91:f2:6d:ad:2b:dd:43:93:fd:78:
df:fc:dc:85:b2:1b:f3:49:83:45:15:73:f5:95:c0:1e:5f:e1:
f7:31:e0:7c:07:ad:8d:1b:ae:9a:35:41:7a:b1:ad:82:5c:60:
0e:45:4a:e9:37:7e:29:04:b8:de:a5:d7:25:f9:c3:a1:cf:7f:
b3:d3:7c:13:f3:aa:fa:a5:4a:c8:f4:3b:04:0c:9d:7e:13:df:
e1:6d:49:07:f0:69:cd:06:26:ee:c6:8b:a0:45:c4:a9:5b:a1:
2d:15:36:9b:25:80:66:56:6c:5e:b8:ba:73:ce:19:92:db:18:
5b:4c:a9:57:a1:27:f9:5c:59:34:4c:29:04:b5:9a:7e:f6:75:
30:3b:2b:c1:6a:07:fe:41:30:a5:d4:d0:f9:09:53:30:57:d8:
f3:b0:34:05:21:45:77:da:93:6e:92:cf:14:dd:97:c1:5e:8a:
d9:d3:43:37:d8:f7:7b:1b:8d:07:f4:63:eb:ae:de:c6:ae:e5:
db:5a:5f:e1:43:ef:22:f8:10:0e:3e:d7:f5:7e:70:ad:be:69:
2a:66:69:82:52:f0:4f:f9:bd:48:28:b8:b9:09:4b:b6:c9:be:
22:64:2d:04:e0:38:6d:4d:d4:51:98:6d:83:44:c3:63:61:94:
2e:ba:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:49 2025 by rpki-client