Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: l7gj7KjE7kah0wGEuKHmhAmdsbffQqcOACv62HrkkHQ=
Subject key identifier: 6B:57:5C:DB:90:C0:E1:B4:7E:53:3C:96:F6:73:7A:C4:2E:11:CE:E6
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 0196821109AF3C83A15E089724556A625CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0AFA
Signing time: Tue 29 Apr 2025 15:01:16 +0000
Manifest this update: Tue 29 Apr 2025 15:01:16 +0000
Manifest next update: Wed 30 Apr 2025 15:01:16 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 8acwpBz646P+o4cR97+Y+/Nl4V2+id2y14CcBTUx4MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:11:09:af:3c:83:a1:5e:08:97:24:55:6a:62:5c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Apr 29 15:01:16 2025 GMT
Not After : Apr 30 15:01:16 2025 GMT
Subject: CN=6b575cdb90c0e1b47e533c96f6737ac42e11cee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:21:77:5d:c1:8d:9a:57:5f:77:7f:db:3f:
36:12:4c:ed:97:18:49:5b:a3:62:07:5a:1b:47:76:
c7:d7:dc:4d:d6:41:f2:21:ca:09:c9:73:31:19:da:
2d:82:e8:a0:63:3a:e0:95:62:5d:bc:3c:30:32:69:
a8:de:3e:24:59:4e:2a:c8:17:53:58:0b:a8:81:9d:
69:8f:3e:34:29:df:f7:61:14:cb:be:5b:0f:1b:64:
60:90:97:df:06:e5:5e:5b:93:4e:3a:79:ab:31:23:
3b:0d:58:74:94:37:69:c3:54:8a:23:56:0e:4f:5a:
cd:0a:01:a4:e8:63:bd:75:be:58:f8:1f:35:6f:a6:
3f:ea:d8:61:8a:35:af:7d:01:ea:63:70:0d:1d:00:
b5:11:74:9e:ec:67:91:fa:22:e6:0b:91:6a:e1:7c:
61:b7:9c:91:6b:fa:13:c1:95:30:e1:fa:7a:0d:e3:
10:8e:d2:f1:1e:2b:2e:28:c7:3a:37:b9:63:53:c6:
18:8c:9a:d4:1b:f3:97:82:af:71:e0:3f:f3:15:db:
5e:6f:36:75:50:cc:bd:c2:dc:6c:ad:22:48:cc:c3:
f9:7e:4f:4a:eb:ba:43:b1:82:d1:d9:3c:65:b4:d9:
3f:b4:71:6b:4d:96:73:93:24:51:6d:64:d2:b3:9a:
65:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:5C:DB:90:C0:E1:B4:7E:53:3C:96:F6:73:7A:C4:2E:11:CE:E6
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3c:9f:14:27:f8:1e:a2:9a:6a:fe:49:ba:d9:df:6a:07:23:
d5:b2:f1:23:45:fe:d0:ae:b9:8d:35:b7:b7:5f:bf:59:f5:4c:
23:21:23:a6:ca:ea:bb:ba:ba:95:14:5d:63:5b:71:50:e0:2b:
98:ca:6b:cd:d8:bb:3f:17:24:6e:98:79:93:f7:4b:84:d4:c3:
17:aa:93:69:f9:19:bb:3f:4f:52:a6:26:78:8b:cd:df:a8:75:
74:89:e3:97:71:50:29:b1:ae:31:7b:0b:dd:a8:63:d4:0b:6c:
d6:51:61:e7:88:e9:e6:2f:a2:71:e7:b0:9d:2d:63:5f:e9:3c:
b6:bd:c2:a0:97:7d:b4:c6:37:31:b3:11:15:0c:dc:4e:5d:ec:
ab:ad:6a:58:f4:de:96:22:f0:f9:e6:28:d5:d3:a4:8d:3c:40:
c8:99:66:4e:50:f3:d5:03:b7:10:8c:09:2a:2f:00:e1:24:ed:
8f:46:3e:58:a7:86:28:ea:b6:fe:1f:0a:31:a3:94:d6:68:96:
d7:58:a5:b5:e5:09:cc:0d:88:da:d3:5f:3f:16:b7:52:9d:e7:
61:6f:66:68:e6:3e:75:2b:e0:1d:a3:92:bb:55:9c:21:e0:13:
83:8e:2f:e4:40:a8:9c:2e:05:c8:e6:b8:ad:21:4b:ac:6c:f0:
1b:2e:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:34 2025 by rpki-client