Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: 6Hjn+dWtmlKN8Ol3dKhMNEACwkGBC+lJC/2nVr53U8o=
Subject key identifier: 52:64:83:4E:47:4B:D6:4D:3F:57:8D:6F:09:7C:5C:A8:0A:04:55:FA
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 0196730B6A235FCF73245A61FE66EBFE92BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 0F71
Signing time: Sat 26 Apr 2025 17:00:49 +0000
Manifest this update: Sat 26 Apr 2025 17:00:49 +0000
Manifest next update: Sun 27 Apr 2025 17:00:49 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: ReAolo5AT1x2ROeWApchRfZesaUboPaF59YoOeO+9UA=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:6a:23:5f:cf:73:24:5a:61:fe:66:eb:fe:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Apr 26 17:00:49 2025 GMT
Not After : Apr 27 17:00:49 2025 GMT
Subject: CN=5264834e474bd64d3f578d6f097c5ca80a0455fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:6c:56:cb:8a:78:56:a8:a5:5b:7f:3d:0f:
5c:6d:08:d4:5a:14:25:85:e2:16:d9:ca:4f:66:6f:
4d:5c:0d:8c:80:d8:bd:83:45:75:83:66:25:f7:a3:
15:f9:a9:6e:b5:f9:0f:98:fe:2e:b9:29:76:7a:9c:
86:42:98:f0:46:ab:b7:e1:7f:30:dd:5b:86:41:46:
fb:59:4d:ff:90:84:da:a3:6c:d1:93:fa:04:a4:7c:
52:08:dc:02:2f:79:38:6d:f4:ef:9f:69:74:de:b5:
6a:0e:f0:f0:0b:d5:fd:05:80:1b:c7:9c:a1:75:c0:
1c:e5:c4:f1:a8:ca:81:f0:78:6c:99:12:b1:34:69:
29:21:1d:8b:07:a7:9b:ae:fd:ed:cc:f3:e2:68:bd:
fb:9f:d9:e2:a5:8c:fb:8c:3e:56:61:b0:de:7f:fc:
1b:ed:5f:13:0d:71:c0:f8:3b:3e:50:5f:b7:34:68:
bb:4d:14:61:e4:7c:dd:d3:29:dc:f1:b4:be:4e:dc:
f8:9a:b6:0a:bb:be:12:79:c5:1d:91:9f:3a:59:80:
f0:22:11:bb:31:32:e9:93:10:20:18:43:88:88:65:
b6:54:09:40:65:75:6f:a6:e2:0e:b4:e4:06:82:b2:
7c:71:95:a1:83:cd:43:60:8a:3f:23:7e:80:b0:32:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:83:4E:47:4B:D6:4D:3F:57:8D:6F:09:7C:5C:A8:0A:04:55:FA
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:0b:9d:56:f2:f4:07:d4:a5:64:24:06:74:ee:86:d8:82:
21:ed:9a:79:86:71:77:02:34:8b:91:29:80:44:a9:5d:4e:86:
33:b6:43:c1:4d:96:0d:1c:7d:7d:b5:09:75:89:47:c5:a4:5d:
55:12:51:b4:5d:ef:8e:35:c3:e6:43:81:b4:4c:63:5f:3d:b8:
fc:01:b2:10:4f:b9:41:e7:c5:89:52:e2:62:f9:8f:11:58:c3:
03:5f:c5:9a:dd:08:05:ee:fc:cd:a1:e1:ab:5a:49:ba:27:c6:
b6:95:92:23:e5:6a:51:fd:7d:00:11:5e:a5:13:24:fd:31:63:
8e:6f:67:cf:a9:cf:68:d3:18:20:39:49:13:d6:94:63:76:83:
6c:61:fa:38:2e:f5:1b:7b:60:de:f8:5a:7e:da:88:6f:8e:61:
9c:84:5f:8b:5a:24:08:a0:3f:6a:ef:c8:19:91:97:ae:79:89:
b4:9a:3e:f5:fe:2d:b6:72:87:b0:3a:08:48:7c:91:ca:56:97:
0a:b0:6c:d2:f7:2e:51:ef:a6:09:14:c0:85:26:0c:56:f9:10:
53:81:27:5b:a0:8a:ab:56:16:bd:c1:4d:ef:05:7e:01:87:85:
c6:05:89:2c:85:ac:39:9c:a3:11:ef:74:11:1d:63:39:5f:22:
f0:2e:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:40:22 2025 by rpki-client