Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: kAbALWOOw8Ly1IXnkgGndzGy6RozNv/UKUcwSIMzArE=
Subject key identifier: E2:FB:4F:AC:3D:F7:20:11:0F:AB:4E:89:4D:4D:1E:4B:85:58:5D:61
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 0196CCF3DBB96099DF120722C27DF89E0906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 0119
Signing time: Wed 14 May 2025 04:00:55 +0000
Manifest this update: Wed 14 May 2025 04:00:55 +0000
Manifest next update: Thu 15 May 2025 04:00:55 +0000
Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: SAejyQqU1/LuXPBVog13TYzsNzW+SBMkWafiraC1J9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:db:b9:60:99:df:12:07:22:c2:7d:f8:9e:09:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: May 14 04:00:55 2025 GMT
Not After : May 15 04:00:55 2025 GMT
Subject: CN=e2fb4fac3df720110fab4e894d4d1e4b85585d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:9c:2a:bd:f5:37:42:83:29:9c:87:ef:61:
63:04:a0:bd:20:cf:42:6e:1b:32:a1:10:e6:cb:91:
a3:f1:bd:3f:95:d1:c2:cf:ad:83:c6:16:e2:97:c7:
42:6f:37:85:e2:6d:01:a7:d5:4a:2c:60:63:3c:d0:
fe:68:8e:35:0f:cf:a2:82:e0:aa:8a:2d:72:ff:52:
4a:7d:b9:06:50:bb:d5:b4:c8:4f:f0:4b:b6:05:3e:
e8:3c:7b:43:52:0f:e1:7b:36:21:1b:d7:7e:47:3e:
5a:7b:47:56:25:50:fb:f8:89:d4:20:ab:7e:de:4f:
56:58:fa:2e:c3:7f:3c:eb:a8:89:fe:95:4e:7c:b2:
09:20:c9:ae:73:72:ae:ad:cc:fb:e8:42:03:1e:1f:
ad:32:41:c2:b0:52:07:a7:19:8d:ad:d5:25:f3:90:
4a:56:b9:85:99:4a:d1:0c:65:1b:33:9f:86:84:81:
7c:39:c2:5f:6b:6f:9e:be:a0:95:42:35:ad:4a:d4:
dd:90:8f:96:f4:d9:53:85:ec:0a:9e:c2:0f:a3:76:
42:ef:df:d0:2c:45:03:72:cc:8a:c4:68:1a:85:12:
81:2a:de:60:15:aa:38:d4:0b:73:e4:52:e1:77:b4:
5f:23:7d:04:99:45:10:4c:f5:81:b1:eb:35:5d:3d:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:4F:AC:3D:F7:20:11:0F:AB:4E:89:4D:4D:1E:4B:85:58:5D:61
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f2:58:7a:04:e1:10:07:d8:a7:6c:c0:99:c4:8c:62:c1:93:
bf:6d:3e:c1:cd:25:88:20:e6:f1:17:30:13:29:78:91:89:25:
6e:8f:af:c5:d5:e7:39:18:35:65:e8:c9:a4:5e:6a:04:33:58:
3f:56:91:34:a3:b4:36:68:a3:ed:d3:0f:61:b6:23:0b:f1:a1:
41:44:a5:da:29:96:b6:22:cd:c6:93:a6:b7:27:9d:c7:28:6a:
a8:07:4a:4d:6e:7a:c6:87:f3:a0:cc:65:f6:6e:eb:94:40:8a:
d5:87:1f:b1:5b:a5:f5:f3:8b:a1:a2:db:12:af:64:4f:da:a6:
42:e1:37:38:17:a5:eb:85:71:c7:fa:4f:2b:cc:da:fe:36:61:
c0:2e:07:5a:80:7b:5c:aa:d1:2d:0a:46:c0:44:93:19:89:97:
f2:3e:f4:44:f5:bd:19:a2:72:8a:09:91:2f:f7:4d:9d:5d:45:
aa:46:aa:c9:bd:33:b4:0e:a8:ed:84:eb:35:97:c9:40:2a:27:
99:ee:a5:8c:3d:92:01:6d:9e:78:10:b9:9c:20:d1:38:ff:9c:
32:6e:e3:c0:fd:be:00:27:51:3e:41:e1:09:3b:57:ab:f5:86:
3f:b0:b4:14:12:4a:28:3d:93:6a:b6:08:13:58:45:a6:0f:e7:
7c:07:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:28:22 2025 by rpki-client