Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
File: xagvOTbyRO3LYBPhIdUadpDRNZk.mft (raw, json)
Hash identifier: QGhRjOHlP6kshvpGpCRmJglelLBGbOK4IEwtGPx8Z+Q=
Subject key identifier: 62:F1:2C:EC:D9:B0:AF:A9:D0:2D:4E:C6:F5:C3:47:B2:85:97:D7:99
Authority key identifier: C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
Certificate issuer: /CN=c5a82f3936f244edcb6013e121d51a7690d13599
Certificate serial: 019675D564C8C860CB45E2259574F08AEB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
Manifest number: 125F
Signing time: Sun 27 Apr 2025 06:00:41 +0000
Manifest this update: Sun 27 Apr 2025 06:00:41 +0000
Manifest next update: Mon 28 Apr 2025 06:00:41 +0000
Files and hashes: 1: XSbdHCVCRCiTj8mv8uqC5jKu2Wc.roa (hash: 5E+fKGQdMloCaM1N6c8AjIuVH6v9QdhsvGHXvp3zGN0=)
2: xagvOTbyRO3LYBPhIdUadpDRNZk.crl (hash: We/dA7WOk4DT2c+mnplXA3YF/ETMc0Hp8yJGfpq7pIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:64:c8:c8:60:cb:45:e2:25:95:74:f0:8a:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a82f3936f244edcb6013e121d51a7690d13599
Validity
Not Before: Apr 27 06:00:41 2025 GMT
Not After : Apr 28 06:00:41 2025 GMT
Subject: CN=62f12cecd9b0afa9d02d4ec6f5c347b28597d799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:7d:a2:a2:3d:ed:9a:ae:20:e8:1d:39:56:
b8:df:c2:bf:65:4a:34:00:22:fa:f1:5b:d8:ef:58:
f3:38:da:10:db:21:28:ed:d5:52:a3:1a:c9:23:f0:
31:01:e2:67:3a:f3:78:60:c3:9d:46:74:3e:89:d1:
1b:94:d5:20:74:3b:97:4e:da:bc:d1:de:6f:55:38:
d4:2a:92:35:2b:df:c9:47:28:a9:e4:73:41:b7:82:
b9:3c:15:0c:60:f1:6d:0f:21:d8:9d:fd:a5:8f:9a:
c0:a0:a1:1e:cf:d7:32:eb:eb:72:5b:34:3a:b2:40:
c2:1a:00:ca:a5:3b:8e:04:fa:7d:58:55:83:2f:b5:
08:49:c6:f6:88:0c:bf:02:2e:5e:9a:10:7e:e2:1d:
74:99:ba:26:ce:86:00:5e:c7:c2:a1:e7:a1:24:69:
e9:34:17:40:ec:37:e5:6d:6a:e3:79:b6:d4:5b:70:
e5:93:69:70:aa:04:1e:11:6f:08:2b:91:18:e8:3c:
4f:53:7e:eb:e9:b3:d3:7d:4c:6e:50:fb:0d:f0:a9:
f3:31:15:c0:28:b9:2b:62:77:c2:92:b7:25:96:9f:
29:88:77:ab:64:0d:ee:f0:91:7a:94:58:f8:e5:f2:
fa:7b:70:f7:d3:08:58:5b:0c:8f:86:3c:79:6f:ae:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:2C:EC:D9:B0:AF:A9:D0:2D:4E:C6:F5:C3:47:B2:85:97:D7:99
X509v3 Authority Key Identifier:
keyid:C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:90:0a:ce:5a:d1:ec:93:86:97:11:ac:19:bf:f9:22:c4:
c7:2f:f1:af:19:fc:1b:d7:86:37:91:c1:55:85:45:1d:49:fe:
79:26:f3:5f:bc:b9:0a:7a:ea:78:eb:6d:20:58:12:a4:fc:07:
0e:5c:12:e5:ca:af:b4:62:a5:5d:a3:e4:65:e6:83:95:4b:a3:
da:a4:7b:8c:6a:39:d7:9c:4e:88:6c:9c:32:a7:5a:40:42:27:
1c:83:fe:b0:24:7a:ff:ae:4f:eb:e2:53:db:c5:88:65:5f:6c:
71:aa:a7:a5:29:7f:fc:2a:a5:bb:62:00:9d:54:7a:e0:29:7f:
94:6e:73:57:9f:2b:41:d7:d4:94:d6:af:c0:5e:71:28:be:6b:
96:ef:49:da:1b:6b:60:67:18:e6:57:83:d4:36:af:4e:d9:59:
83:95:f6:13:0a:44:95:f8:e8:00:ec:5f:8c:02:fe:a5:81:b4:
42:b6:74:35:17:37:71:4a:28:da:34:50:12:13:11:a4:d7:5f:
3a:9b:f2:3f:b5:c5:8f:98:58:e8:e4:56:05:74:63:ff:d7:f1:
ee:2b:63:c8:9c:8a:59:f2:de:9e:b6:4e:f1:e4:4a:40:7e:c7:
d1:b3:0b:be:6a:13:d0:f1:61:4e:91:f8:9a:a8:b7:b7:52:f1:
18:b0:63:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:05 2025 by rpki-client