Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: 5rZKnaAq9oDsn/91z/Vbd5vPBX8gsHaJnk/m1izRoI4=
Subject key identifier: EF:CD:97:5E:4A:41:D4:5C:4C:D8:41:EE:B3:0A:FE:22:A0:7E:79:58
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 01967AC4E8F496ED58B81D080825CEC344EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 05:00:47 +0000
Manifest this update: Mon 28 Apr 2025 05:00:47 +0000
Manifest next update: Tue 29 Apr 2025 05:00:47 +0000
Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=)
2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=)
3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: jGUnIW1k3+B860hXofLS1PVuSRSfBcDAioEn85u4lCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:e8:f4:96:ed:58:b8:1d:08:08:25:ce:c3:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Apr 28 05:00:47 2025 GMT
Not After : Apr 29 05:00:47 2025 GMT
Subject: CN=efcd975e4a41d45c4cd841eeb30afe22a07e7958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:2e:45:e5:85:6f:7b:11:a2:84:79:92:9d:
46:4b:c3:b7:bd:30:c0:ed:72:f0:e7:a0:36:cd:6e:
3e:2f:bd:80:3b:53:8f:12:ad:84:7a:b6:a0:21:20:
e4:4e:d4:0c:43:60:01:ac:1a:1e:5a:c3:8c:fb:b0:
62:14:cb:a3:a4:b1:97:90:31:6e:58:09:86:af:af:
7f:d1:d7:1c:29:14:4f:70:d5:81:36:ae:be:8f:ad:
3c:ad:55:b4:c8:52:3f:4c:30:8d:d4:14:4d:c2:34:
d0:35:04:cf:f8:3c:95:78:d7:f1:58:47:47:2d:ef:
ab:2e:c6:1e:b0:af:f0:66:a0:8c:a6:ea:51:19:01:
7e:11:00:9b:5b:7a:c7:b9:44:b6:df:bc:71:38:c0:
6b:5b:cb:db:e1:2f:7a:35:05:1d:16:0c:2a:50:14:
2e:6f:14:d4:5a:49:04:34:36:ef:16:39:97:0f:54:
a4:c4:e4:47:72:0f:9d:56:c6:88:c6:66:7b:84:12:
07:a3:6c:f2:a7:a6:1d:7e:1e:98:2d:49:b1:21:3b:
69:74:c2:68:f5:3e:fc:c5:d8:4f:fd:1f:16:3e:cf:
80:65:9e:fc:f8:26:60:6f:b4:e4:f0:d6:78:23:4a:
cc:f3:cd:3b:65:da:61:70:55:7a:02:a6:a3:2c:7c:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CD:97:5E:4A:41:D4:5C:4C:D8:41:EE:B3:0A:FE:22:A0:7E:79:58
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:2a:c2:48:44:29:bc:a0:be:e6:5f:05:8b:2c:e9:ed:4f:
47:51:f9:dd:5c:f9:df:07:7a:ed:37:2f:07:b4:3f:03:1f:3b:
84:bf:81:b6:c1:5d:99:35:4a:e5:6c:e5:cd:3e:56:4a:3e:3f:
79:35:0a:92:ab:c1:ff:70:6b:bc:a0:dc:d8:a2:52:a8:6a:54:
89:c6:49:70:65:5e:e7:8a:f5:ff:e7:28:d7:05:ab:d4:1b:dc:
03:42:b7:84:96:ce:0b:0a:8a:7d:8c:04:32:86:85:eb:f1:63:
d5:23:a3:03:05:18:ce:d5:20:a1:97:8e:01:50:ef:71:b9:04:
21:03:62:f5:c5:1b:29:a0:3c:34:b8:be:24:31:69:10:9a:de:
c4:1f:c9:22:05:c8:f5:ab:87:88:f9:9f:da:fe:92:62:d4:2a:
f6:0b:18:40:48:2a:a8:32:4d:06:5e:18:99:66:18:c7:e0:fd:
29:30:ba:94:50:b6:e3:bb:19:c7:0a:97:e9:6e:f7:b2:8d:29:
c3:b5:fa:01:6b:f7:cc:6a:32:76:d3:96:ac:47:b0:03:4f:ab:
2d:13:57:b6:a9:56:1f:9a:c7:78:39:f1:c8:a1:cf:21:56:e6:
6e:03:39:b4:08:e2:be:5b:7f:3a:b3:27:9d:19:36:ee:73:d8:
23:0c:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:20:18 2025 by rpki-client