Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
File: _XBhwg1PCXYTrAMTI3pt8rsstdw.mft (raw, json)
Hash identifier: V2AbmnmsPgNCKYycqjIqKqRGfId+pJH1TCLxKxTSRRk=
Subject key identifier: E8:9D:A8:EA:9B:D3:8E:31:F4:EA:F6:2C:81:7D:47:ED:5F:23:A6:4F
Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Certificate serial: 0196821101DB211084E45CA1E234DF0A9872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
Manifest number: AA
Signing time: Tue 29 Apr 2025 15:01:14 +0000
Manifest this update: Tue 29 Apr 2025 15:01:14 +0000
Manifest next update: Wed 30 Apr 2025 15:01:14 +0000
Files and hashes: 1: _XBhwg1PCXYTrAMTI3pt8rsstdw.crl (hash: HMRoGetEP6TnGnuMjBXwYsA6q94QmgGIM2Bo+6JmjFg=)
2: oenpcHzg8QPV-rJqJOxh7sUU4JM.roa (hash: pI8sI3HGC0XwZjUjUuA9QCNQ3HFZ2jSXO5rE2e12GoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:11:01:db:21:10:84:e4:5c:a1:e2:34:df:0a:98:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Validity
Not Before: Apr 29 15:01:14 2025 GMT
Not After : Apr 30 15:01:14 2025 GMT
Subject: CN=e89da8ea9bd38e31f4eaf62c817d47ed5f23a64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:1f:c0:c3:e0:4b:a6:7b:44:5f:94:eb:45:
c8:06:e9:35:29:48:c2:f3:d8:45:43:86:cb:41:bb:
83:60:f9:5c:74:cd:fc:0a:1e:02:a9:7c:96:cb:be:
cc:a3:12:02:99:dd:1b:0b:ad:90:e4:ed:0a:9e:50:
c8:8a:37:b8:bd:08:47:43:f4:8b:00:77:d2:7f:eb:
a9:70:48:4a:78:6e:ce:50:a6:14:85:f6:6e:fd:5d:
9e:8d:43:cd:be:c8:aa:70:ab:6f:ae:36:e7:c4:cf:
a3:94:85:01:c4:c5:f9:29:bf:7c:0b:f2:32:6f:d4:
26:e4:53:37:f4:db:19:a2:01:6c:eb:ea:95:a7:35:
e0:72:55:f4:62:53:53:71:d9:a9:1e:78:85:d1:86:
c6:f7:69:e9:e3:f3:01:96:4c:01:d4:18:cd:24:5f:
67:ab:20:a2:e5:e9:5f:dd:b3:84:7c:8c:a0:5e:9e:
5f:e0:9e:18:0f:f9:dc:14:4e:80:c0:cc:bf:94:a2:
3d:27:42:c3:f0:1d:c7:f0:39:a2:51:98:ec:d0:69:
b3:3e:1c:51:33:5a:ce:bb:eb:2b:b3:8d:68:b7:04:
05:d9:ea:e3:64:9f:82:aa:29:86:f0:74:1f:bb:af:
13:3d:39:ae:84:b1:08:b0:e4:d3:53:79:15:9c:36:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:A8:EA:9B:D3:8E:31:F4:EA:F6:2C:81:7D:47:ED:5F:23:A6:4F
X509v3 Authority Key Identifier:
keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:1b:ca:59:1c:6d:d2:b2:c0:dd:fa:18:f9:e8:99:c2:78:
86:43:75:d7:02:f6:85:d0:20:2a:46:57:9d:c5:b4:d9:4a:ad:
cf:d5:cd:57:ed:66:36:d8:a6:94:1c:c8:be:f3:da:bb:9a:cd:
e1:b3:74:b3:a7:5c:1b:76:b5:d2:92:34:29:ce:b5:40:81:48:
d9:36:49:7d:f6:e2:70:43:7c:7e:83:58:dd:b2:2d:cd:ef:79:
d7:de:2f:fa:99:58:52:f3:26:aa:16:cd:25:f5:e2:46:ad:2a:
5f:d6:65:1e:12:9f:54:37:89:2a:1f:b5:8d:69:d9:0f:3a:56:
63:dd:ae:fb:f6:aa:42:bf:7e:5d:9c:c4:11:ea:63:43:76:fb:
92:59:4d:29:2a:f1:9f:76:58:b9:51:4f:a9:08:6c:82:81:cc:
b7:a7:32:db:b6:9e:75:af:0a:de:43:5b:5a:40:e2:de:3c:2f:
b3:d0:59:e6:4e:46:73:f8:b5:89:b1:d6:a7:c5:76:51:6c:7f:
1e:69:2c:e8:e8:98:aa:ad:9f:05:46:77:93:60:37:9b:f1:3b:
2e:05:26:0a:45:a4:17:78:34:56:9b:07:a5:9a:d8:c6:e9:5f:
c9:39:b8:fa:eb:f0:3d:2f:91:43:5c:4c:f3:5d:75:13:24:dc:
65:5c:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:54 2025 by rpki-client