Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: Slg22jefLcoKl1zKr0vG5rGqMmLBP3x3qL/acn6Qf0c=
Subject key identifier: B9:63:A2:DB:44:19:09:EE:F8:FC:73:13:9E:C5:C7:6D:26:9F:26:55
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01967D8E7EA81AF6C21196213424C13F9CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 18:00:12 +0000
Manifest this update: Mon 28 Apr 2025 18:00:12 +0000
Manifest next update: Tue 29 Apr 2025 18:00:12 +0000
Files and hashes: 1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: uKqWrtmO3H0SK8KgVnjcRpoCdzBffMC6vfRV0D1Cc0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:7e:a8:1a:f6:c2:11:96:21:34:24:c1:3f:9c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Apr 28 18:00:12 2025 GMT
Not After : Apr 29 18:00:12 2025 GMT
Subject: CN=b963a2db441909eef8fc73139ec5c76d269f2655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:f4:37:01:e2:65:b7:45:5d:fd:49:a1:d0:
c7:d1:2b:d2:71:98:ff:b8:68:69:a7:98:e9:0a:c6:
c9:36:c8:18:59:92:fb:35:85:7c:9a:ce:91:e7:d0:
85:d5:82:47:32:f0:67:eb:95:d3:2f:46:20:16:92:
c8:2a:61:33:39:3d:43:72:09:96:b5:4f:9a:5f:57:
3c:82:5d:cb:78:3a:cb:37:cb:17:c2:7c:f0:8e:b0:
fe:a2:02:f9:83:40:7f:72:1d:32:1a:1b:4f:c9:1d:
87:85:e3:19:74:45:4b:78:bf:52:9e:51:89:d0:ea:
d9:3f:3e:53:a8:83:fe:e4:25:c9:d2:47:ad:6a:55:
92:c6:ae:29:bf:79:03:c0:43:b5:7c:31:33:d6:96:
e4:18:3a:32:7c:cc:97:05:f5:da:a8:14:9d:39:55:
d1:30:69:71:4e:b9:08:54:bc:73:ba:0f:01:4e:93:
cf:90:3b:dd:e5:eb:7f:a2:ed:d7:08:b2:31:98:07:
2e:7e:57:10:cb:ca:a7:21:31:e2:62:25:e7:c9:5b:
9b:c2:d3:7d:5c:f2:aa:32:71:74:0f:93:4a:01:02:
55:f0:e7:dd:7a:97:db:29:bf:4a:a0:cd:2a:a9:69:
6e:ce:8c:38:ee:43:0a:59:30:50:10:67:b4:a1:5a:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:A2:DB:44:19:09:EE:F8:FC:73:13:9E:C5:C7:6D:26:9F:26:55
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:dc:64:d7:38:f1:35:65:16:e8:0e:ad:4e:b0:ac:c2:6a:
1d:35:8d:8f:30:e4:56:f1:0d:36:09:2f:3f:61:22:89:b6:9c:
cc:7f:f3:36:48:8e:1a:f4:cf:32:d0:d2:8f:d4:77:fb:fb:7d:
4b:10:d6:fd:e8:70:5a:c1:83:4a:b7:50:ac:c3:3b:e2:9e:69:
68:8f:64:a7:fa:e4:6f:ca:35:47:38:96:ad:aa:32:5b:14:96:
cd:b2:8c:86:c4:e9:56:99:1a:66:58:95:45:bf:a4:29:03:86:
b9:30:d8:a6:f5:95:4e:cd:4b:bf:9b:3b:56:b0:6a:bf:af:25:
59:04:93:5d:dc:cc:3c:f8:49:ef:b5:6d:d1:79:d7:b7:75:5e:
0f:84:3f:e6:a0:35:e1:06:a8:38:b1:2d:5e:62:57:59:ad:ce:
3f:f9:ca:8f:89:30:4f:34:38:0e:45:2e:0c:da:ac:66:d9:31:
32:ed:53:04:04:d2:5b:59:c3:ad:83:5f:67:07:ee:67:d9:48:
96:fe:b9:8e:f2:d7:d9:82:50:32:05:ff:ec:43:50:93:b5:9f:
9b:40:2c:a4:55:68:7f:74:f5:5c:2b:68:b8:66:dc:3a:34:5d:
86:d8:d6:94:c6:9a:68:86:bc:44:96:5e:19:2c:48:45:bc:d2:
c3:e8:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:52 2025 by rpki-client