Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: qu5j++Z8j9olF8VbE/hxs8jT5x9BL5vzb/AaDzactdU=
Subject key identifier: C8:DD:2C:0E:7F:C1:E4:46:F4:1F:5F:5D:AD:AA:BE:A8:D1:A9:6D:1C
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 01967E3371BE4D14E4A08AE1486953D1DEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 08FE
Signing time: Mon 28 Apr 2025 21:00:22 +0000
Manifest this update: Mon 28 Apr 2025 21:00:22 +0000
Manifest next update: Tue 29 Apr 2025 21:00:22 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: XiJTC9uZE64JLQ-yExGhaUIj9ts.roa (hash: GHx3lHTTCp62cSR5kKkHCq7uXPra6/CRt/DIw9vc7JY=)
3: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: nSkTou2AHti3IsNtWKsPTMxyBQRw+v4AdH22e9CCVvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:71:be:4d:14:e4:a0:8a:e1:48:69:53:d1:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Apr 28 21:00:22 2025 GMT
Not After : Apr 29 21:00:22 2025 GMT
Subject: CN=c8dd2c0e7fc1e446f41f5f5dadaabea8d1a96d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:75:74:e6:81:b9:30:9d:ab:e1:29:64:e9:
d4:ca:92:b2:fc:dc:fb:d0:dc:a6:8d:43:22:6b:e2:
c9:2a:46:24:df:72:b5:d5:29:14:64:60:b8:84:aa:
2a:13:f9:8f:46:da:a1:9f:20:b8:c6:52:dd:80:d6:
09:37:b9:8c:bf:f7:cd:9b:5d:38:7f:36:29:40:a7:
a9:1d:56:fc:48:37:b3:bc:a9:62:73:2a:64:ae:92:
d4:e8:32:ff:b9:f2:b7:59:71:4c:0f:f4:43:63:18:
a1:f8:df:5f:0f:cf:90:cc:10:5d:1c:33:e2:f1:47:
29:7d:70:bd:3a:ca:54:1b:4e:e2:4e:94:24:71:7f:
3b:6d:c1:35:99:80:e7:db:41:7c:4c:f3:28:35:3f:
9f:35:ef:b1:68:29:aa:8b:10:da:37:71:6c:92:ea:
ac:69:27:4a:2c:ac:6b:dd:2d:10:23:91:a0:e8:fb:
f9:10:71:2f:d5:4b:e0:39:35:2c:7f:c7:25:68:cc:
dd:50:c6:8c:05:71:5e:fe:a7:1a:33:75:1e:93:7b:
4b:fa:97:f0:c9:1b:a5:7a:f2:2c:14:77:16:34:1e:
fb:ce:dd:1e:2c:30:a8:80:40:fd:89:dd:aa:01:e4:
e0:02:30:b9:48:42:15:09:2a:2e:74:88:a8:e8:c2:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:2C:0E:7F:C1:E4:46:F4:1F:5F:5D:AD:AA:BE:A8:D1:A9:6D:1C
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:04:1e:32:b6:65:53:4a:ac:2d:3e:29:b4:eb:0d:a1:7b:25:
27:39:80:15:d6:03:88:20:39:bc:e4:b3:70:f6:a5:55:96:1f:
16:49:4a:05:af:02:55:91:f0:db:a5:6b:6f:ed:c2:79:9c:2c:
f3:04:15:88:f5:e5:63:a7:d0:21:ef:46:15:cb:94:42:8d:5f:
22:25:63:f3:d6:7c:2b:08:51:db:64:e8:3d:89:33:f7:a1:9f:
22:d3:68:b6:80:6d:bf:6c:04:b0:05:4d:23:2e:79:b8:51:94:
dc:52:bf:3f:2e:79:91:fa:3c:89:fc:02:88:fe:f4:68:58:87:
36:eb:1e:50:27:89:1a:b2:35:5a:57:54:0b:6e:f1:8c:22:bd:
a3:65:fc:2f:20:01:64:63:9f:8d:46:f2:01:b6:95:73:41:95:
5a:90:de:5e:72:29:64:9f:20:78:06:67:eb:65:29:c7:d6:50:
51:34:89:00:6f:f3:76:4e:8e:cb:5e:fe:68:ff:8a:26:dd:95:
24:58:4b:04:b7:5a:88:9f:5d:2b:4d:41:5e:c0:fc:6e:5e:5a:
99:fc:fe:66:39:25:73:76:3e:39:d2:e3:1b:e0:6c:4b:85:3e:
05:f3:6b:94:cc:f5:56:29:3b:2d:64:9e:3f:1b:6a:63:27:d0:
4b:33:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:14:57 2025 by rpki-client