Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: EVyOmqBhgPDi1eeHhiHOf6fCQGnROyvFptXxTKPkEpA=
Subject key identifier: B4:0C:9D:7E:F5:06:79:F4:2E:D1:CC:0E:5E:5F:4E:BC:48:A5:83:91
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 01967868858B2BFF31DDE40E6D4DD39DCD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 18:00:37 +0000
Manifest this update: Sun 27 Apr 2025 18:00:37 +0000
Manifest next update: Mon 28 Apr 2025 18:00:37 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: GP5bmjn7JXwEXGh6d22Hjxdk+AdWW13qhsQsttUAVWI=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:85:8b:2b:ff:31:dd:e4:0e:6d:4d:d3:9d:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Apr 27 18:00:37 2025 GMT
Not After : Apr 28 18:00:37 2025 GMT
Subject: CN=b40c9d7ef50679f42ed1cc0e5e5f4ebc48a58391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:98:09:15:42:34:86:07:2e:de:f7:7d:39:
b0:25:ac:00:ac:19:c0:3b:bc:67:3c:28:61:bc:4f:
a8:07:2e:13:76:27:d1:3e:46:34:8f:bb:1e:9a:99:
84:a3:42:83:ee:07:e8:5a:e2:b5:86:74:29:9d:2f:
25:d4:40:9e:63:3f:84:dd:b1:62:56:76:2e:e0:6b:
70:5c:3f:4b:00:dd:49:7e:ef:fd:73:43:11:80:d0:
0c:f7:59:2e:30:a0:b3:79:b1:31:ae:51:9a:8a:66:
07:35:40:bb:b4:c3:9b:65:0a:04:d5:86:ff:a7:7c:
38:21:41:c1:c1:60:a2:f4:f1:18:68:64:1b:eb:84:
13:9d:40:3c:f4:59:c9:27:fb:4d:f7:62:0a:8d:7a:
90:6c:f2:1b:96:a8:46:c0:dd:1b:3d:1d:21:3c:db:
88:96:ae:9f:a7:6e:db:a3:4a:41:03:c7:0b:f2:bf:
ad:4a:30:47:6a:68:cf:42:e6:6d:cb:45:5b:f9:b7:
51:59:b3:10:77:ca:82:55:41:58:f1:26:2b:7e:b7:
4f:ab:0e:d7:13:ff:30:03:3d:41:92:59:fe:44:48:
cf:90:0c:ce:37:81:d6:89:c3:a0:da:96:50:c9:67:
5c:bc:09:b5:c4:12:0a:e4:89:a0:cf:fe:0b:0b:4b:
6b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:9D:7E:F5:06:79:F4:2E:D1:CC:0E:5E:5F:4E:BC:48:A5:83:91
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c5:37:3a:74:b6:92:0b:f9:66:74:fb:ea:31:92:92:70:bd:
e8:ec:d7:de:26:1c:be:6d:30:ae:16:15:e1:d6:2c:c9:d9:a3:
10:d5:03:25:59:c8:19:76:7c:b0:09:77:9c:30:57:0d:96:65:
27:91:7e:ae:35:26:e3:5d:b8:f2:11:cb:88:0d:6c:74:f8:70:
c3:29:4a:ef:6a:c8:5f:c3:82:81:f2:92:9c:81:33:70:c5:51:
59:34:a8:a9:e1:08:46:58:a3:aa:2f:6e:43:63:5d:f1:1c:87:
90:00:b8:10:77:fd:27:b1:be:b1:20:10:5d:44:f1:da:40:ef:
5e:5b:f8:0b:45:61:98:b3:45:8d:79:0e:cf:d8:c3:7e:50:1c:
86:e4:48:8f:5c:2f:f5:a6:d9:89:25:f3:ac:a7:d4:cf:d5:15:
e0:99:8d:56:cc:04:52:ed:6c:84:5d:86:91:d4:68:7b:19:a1:
87:5f:04:46:e2:ad:46:93:bd:86:06:66:0b:fd:ff:e4:4b:c8:
78:d8:06:81:d7:1e:51:cd:00:9f:aa:52:b9:e7:22:01:e3:7c:
74:c8:c8:8e:2e:f1:68:56:9e:dd:a9:d3:b2:ab:ff:b3:25:2a:
38:a7:25:17:fb:c3:1e:2e:00:66:80:44:1f:04:0e:d1:fb:d8:
71:a6:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:43 2025 by rpki-client