Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: yK834KbVtkgJRC4JycVYs7ys//wSu3T4kRm6vXhmums=
Subject key identifier: D5:6C:29:C0:C4:E3:3C:0C:DA:EE:E8:CF:E9:6D:33:B4:0F:EC:DE:46
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019683232A84A972AE7ADFEA42547C11186B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 10B5
Signing time: Tue 29 Apr 2025 20:00:41 +0000
Manifest this update: Tue 29 Apr 2025 20:00:41 +0000
Manifest next update: Wed 30 Apr 2025 20:00:41 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: pceAy28uBhBKG8AqN/MaD3usx/2+agU7EYzccJP9ADk=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:2a:84:a9:72:ae:7a:df:ea:42:54:7c:11:18:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Apr 29 20:00:41 2025 GMT
Not After : Apr 30 20:00:41 2025 GMT
Subject: CN=d56c29c0c4e33c0cdaeee8cfe96d33b40fecde46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:61:51:d8:fa:f9:c1:b2:35:bb:75:c8:e6:
ed:08:f3:60:16:43:9a:9d:0a:77:9b:51:97:a1:dd:
a0:6b:c4:dc:47:70:02:f0:cc:24:74:cd:3e:cb:6c:
97:41:2b:73:5f:1c:8a:10:63:eb:3d:24:3c:fa:68:
f5:8c:32:a1:a3:41:b4:1c:9b:2f:ea:d1:82:a3:58:
6c:14:9e:16:dc:98:dd:15:9c:1b:d0:c6:2a:b0:13:
23:9a:5e:99:56:33:43:8f:89:cc:41:21:cf:d2:c3:
8d:da:a1:13:f8:4d:a0:4d:fb:b9:ee:8b:7c:85:6a:
28:79:24:00:4d:9d:3d:0c:65:73:59:3a:1d:a9:fd:
39:ad:0c:e1:1c:a0:e8:11:30:10:c9:f5:3b:cf:7b:
09:d6:56:92:b3:cb:67:57:5f:56:49:31:b9:4f:d1:
df:3a:d1:a0:4a:50:d0:59:a4:23:68:fd:e9:ee:4c:
a2:63:41:56:4f:49:15:28:0f:38:40:f9:c4:28:e0:
61:05:56:8b:f9:74:79:8f:bb:80:2c:06:90:ac:c8:
bc:55:92:43:9b:a5:f5:77:c8:3c:13:4b:d5:7b:59:
d9:85:90:26:26:bc:ab:0f:45:aa:ed:19:2f:ed:4d:
2d:ff:32:40:8c:f2:a2:e7:ed:12:95:5a:b9:de:a5:
db:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:29:C0:C4:E3:3C:0C:DA:EE:E8:CF:E9:6D:33:B4:0F:EC:DE:46
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2a:14:cd:4f:67:ef:bf:bd:ef:ce:42:8d:d8:bd:10:ed:e7:
13:4a:31:36:d1:68:91:64:3b:84:c2:5a:29:2b:f4:79:f2:c2:
a4:56:45:20:b3:d0:9f:94:48:9b:f4:75:72:a5:70:71:c0:a8:
27:49:8d:2c:55:cc:f8:0d:2a:53:9e:2c:67:a6:61:d9:a9:c4:
4a:c7:1b:5d:c6:1a:6e:6f:db:71:4f:4f:54:8e:65:84:ec:cc:
2f:b3:c0:07:15:d2:86:03:3a:65:72:80:cc:a7:fa:e2:f3:ff:
4d:a0:c8:17:6f:96:0b:0b:6e:c1:4e:ac:80:f7:e2:8e:30:3f:
39:6b:da:60:6c:27:e9:f6:02:04:de:5d:93:c0:5e:66:98:91:
73:09:db:00:93:a7:6f:7a:fc:d9:85:6f:00:d1:02:90:c2:c2:
b3:f7:76:e0:e8:79:4f:32:04:80:6b:0f:62:3c:55:03:8d:59:
bb:6e:f8:00:ec:92:30:47:00:ef:b9:5c:93:b9:f2:d3:91:4c:
16:f4:71:35:26:98:fe:97:58:13:10:14:b7:b7:a1:f4:41:c1:
03:fe:b8:64:77:e8:e7:e3:d9:bd:ea:32:e3:ad:9b:ce:78:d8:
48:8a:e7:c0:ad:08:38:53:1e:d4:e5:ab:d9:81:b8:34:c8:2d:
bf:c6:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:00:55 2025 by rpki-client