Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: 5hhXwn5ndKflJHQh+oBsr1eb3Y/gC2fz5cc+M+vpgN0=
Subject key identifier: 22:50:E0:D6:1F:F0:60:10:D8:7E:18:24:EF:9D:92:51:85:5D:32:B6
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 0196857FDCFDB6EAEC97FDFFF4133D2AFD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0E35
Signing time: Wed 30 Apr 2025 07:01:11 +0000
Manifest this update: Wed 30 Apr 2025 07:01:11 +0000
Manifest next update: Thu 01 May 2025 07:01:11 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: d018cRZvVjPtSzBD6wrMNkAaqIktsrvKgRQpnDAJZgw=)
3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:dc:fd:b6:ea:ec:97:fd:ff:f4:13:3d:2a:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Apr 30 07:01:11 2025 GMT
Not After : May 1 07:01:11 2025 GMT
Subject: CN=2250e0d61ff06010d87e1824ef9d9251855d32b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:44:b5:13:87:3a:cc:a2:d4:d2:cd:9a:47:
36:c3:04:e0:4f:90:fe:34:6e:f1:e0:5d:4a:33:4f:
ae:92:7e:82:ff:90:65:c3:d6:23:74:43:8c:15:50:
61:4b:44:c9:59:c3:e8:5a:f5:3b:4b:31:35:4d:3f:
60:3e:d7:1a:f0:ca:c2:c2:f8:51:f5:61:da:88:ef:
67:9d:0e:27:d3:51:2b:fb:1e:97:45:cb:6b:bc:e2:
32:c0:01:b5:01:7b:02:7e:19:17:33:a2:90:c2:3b:
64:a6:ba:3f:f8:fb:6d:6c:f2:48:ea:31:36:e5:5f:
31:00:14:f9:c8:25:f5:fd:ca:9a:13:19:db:fc:cf:
d0:57:a7:34:cd:ee:b6:74:00:e7:89:a8:2a:70:41:
fa:64:9e:27:cd:ce:2a:c4:61:7e:f8:ee:58:7f:b8:
f5:4b:91:3a:a9:07:3d:70:d6:54:cf:ac:bf:f1:7b:
77:ea:38:ee:84:90:c6:b0:aa:0c:0e:71:47:90:94:
2d:15:3f:6e:7f:de:96:c0:9f:6f:fe:78:92:f1:c8:
f0:6a:92:18:f1:a3:41:b3:b7:23:4e:b6:2e:cf:4a:
4c:5f:57:aa:73:6c:d6:28:c1:1a:97:10:1e:36:35:
9a:e3:9d:d6:e8:f8:e7:f9:7a:6e:bf:5c:7f:f1:03:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:50:E0:D6:1F:F0:60:10:D8:7E:18:24:EF:9D:92:51:85:5D:32:B6
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:e0:a3:e2:b8:cd:83:62:16:06:20:c8:58:d6:b5:fa:15:
8a:55:24:2c:8c:9c:29:fb:0a:ed:04:6e:38:74:2a:b1:58:88:
a4:62:a0:a3:7b:d2:a2:d6:bc:62:d2:d1:a5:15:3b:3d:8c:4c:
b4:ec:17:39:7d:32:87:b9:50:85:25:d5:56:ae:2e:a0:d4:05:
9c:35:2c:df:28:1a:f8:5d:57:b3:47:2a:40:4f:5f:78:d3:f4:
3e:d2:7c:45:09:db:4d:40:08:55:90:28:c5:6b:d2:c8:e1:15:
12:7f:eb:27:d5:29:15:05:13:0b:70:62:a6:c9:77:0a:20:9f:
b0:3b:bd:13:3c:7f:24:f9:27:20:d2:11:9f:32:b4:50:3d:ed:
8a:a8:bc:78:49:3f:bb:f7:cf:42:64:11:56:de:ee:9a:72:78:
2a:fb:aa:50:3d:17:d5:60:1e:26:b6:a6:c1:7e:fd:79:73:22:
60:3c:bf:5d:74:1e:16:1e:46:ee:13:0e:52:9a:27:12:cc:6c:
36:81:73:93:3c:57:62:8b:2c:37:4e:c5:27:42:0e:1c:a5:88:
d3:51:16:84:c7:6f:b8:dc:a5:ed:a5:99:1e:d6:cd:9b:31:f7:
81:6f:b9:28:84:92:2d:83:e0:1e:5c:83:9e:03:44:8c:ce:88:
84:0b:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:25 2025 by rpki-client