Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: 9m+LAdhbRlECL3yNUFygqNxYJRgyqiWgCHRzRoQURkk=
Subject key identifier: 2D:D2:3D:75:77:16:40:9B:90:B4:F5:06:0E:8B:1D:79:A9:41:AF:23
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019675D5129F38659C7E87FB9932711EA0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 06:00:20 +0000
Manifest this update: Sun 27 Apr 2025 06:00:20 +0000
Manifest next update: Mon 28 Apr 2025 06:00:20 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: 5pM/syqztoBL59quOmFZc/DO6RxjC6iQwMVQx41CHtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:12:9f:38:65:9c:7e:87:fb:99:32:71:1e:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Apr 27 06:00:20 2025 GMT
Not After : Apr 28 06:00:20 2025 GMT
Subject: CN=2dd23d757716409b90b4f5060e8b1d79a941af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:ff:19:37:aa:fb:9a:bf:0e:af:ee:6d:cb:
ab:a9:e4:54:3b:45:19:b7:68:d7:f4:58:dd:12:38:
77:16:9f:8c:39:26:ab:84:29:07:4b:a0:af:5f:9e:
fc:a3:e2:57:41:e6:71:97:4b:a9:62:54:35:9f:14:
ad:ee:63:31:c8:5e:1e:d4:e5:3d:ab:e0:14:45:cc:
b5:da:08:55:91:27:c6:0e:7f:9e:bb:46:9a:de:85:
61:90:65:54:1d:50:48:97:c3:0d:14:a2:61:c2:bc:
12:91:e9:0c:71:bb:6f:50:77:bd:99:6e:f0:84:dd:
73:b7:87:39:27:df:47:f7:c0:36:d5:67:b7:13:e5:
7b:a8:ed:af:21:4f:b9:4e:8c:ed:da:3d:ef:e3:bf:
54:2d:77:99:db:60:8d:0a:fe:45:8f:d9:2d:d1:63:
9f:87:79:9b:f5:5a:53:f0:18:b2:ec:09:85:e3:de:
fb:c5:62:48:aa:42:a3:e3:95:3e:36:6c:b9:5b:a2:
c9:e1:e8:2c:78:64:1c:f0:f9:5a:ac:f6:5f:72:ba:
8d:12:19:bb:3b:7c:63:0b:59:18:17:ac:0c:85:87:
e4:df:df:ae:04:e9:d1:51:52:64:64:39:e4:c4:54:
59:28:b4:ed:80:f0:ac:a9:cb:04:d4:fe:70:c2:b9:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:3D:75:77:16:40:9B:90:B4:F5:06:0E:8B:1D:79:A9:41:AF:23
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:de:c0:15:09:28:c0:11:5b:d6:99:31:60:ab:a1:17:fa:
74:78:68:ef:5c:21:a9:63:4e:5b:4f:4a:82:bc:f6:d8:be:3a:
e4:cd:58:43:d2:59:bf:89:91:d0:19:ef:a2:61:86:7a:21:27:
68:20:7e:ff:d7:65:9a:93:72:7c:1e:91:0b:40:c3:e7:a9:7b:
76:c6:9a:ea:92:63:dd:b2:8b:e6:40:ee:b5:c0:32:c1:e9:d2:
ee:7b:56:df:ca:50:1d:9e:d9:ad:49:08:64:66:50:52:72:9c:
66:09:8c:c0:dc:8e:82:82:05:83:61:97:e0:30:f0:74:85:09:
ad:b3:be:37:50:74:e7:32:bf:a7:43:eb:56:08:f0:cb:e6:2a:
8f:8f:84:cb:83:65:ea:ca:10:48:43:c0:d9:29:c3:82:bd:15:
22:de:74:36:cf:3a:cf:9e:3e:ca:b5:ec:76:2b:98:0c:f8:f1:
7b:bb:7b:cc:42:ed:36:bd:65:0e:9b:75:58:eb:f8:60:8c:92:
0c:0b:c8:68:36:5a:fb:63:5e:7a:50:8d:10:40:19:3c:e2:26:
d6:de:86:4e:50:de:ca:13:38:38:6b:3f:5f:7b:29:33:c9:5e:
16:16:2a:cb:e9:3f:8e:06:2a:3d:e1:a9:50:e1:82:ff:e6:b0:
49:45:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:11 2025 by rpki-client