Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: rD/iThGuypZ2a+iekrBgtyrZ+quspXVHST7G1mFg0sk=
Subject key identifier: 6A:4F:2A:EA:D1:F5:CC:34:3B:02:04:54:62:99:7D:06:91:9F:E0:73
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 01969FE44748AF6C4A75472A6C8D1AE843F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0C0C
Signing time: Mon 05 May 2025 10:00:59 +0000
Manifest this update: Mon 05 May 2025 10:00:59 +0000
Manifest next update: Tue 06 May 2025 10:00:59 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: 8bEVC/K+t6hx6aHvQ3Vr8vfGvPAah4LQAMALQK1OKnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:47:48:af:6c:4a:75:47:2a:6c:8d:1a:e8:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: May 5 10:00:59 2025 GMT
Not After : May 6 10:00:59 2025 GMT
Subject: CN=6a4f2aead1f5cc343b02045462997d06919fe073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:e5:57:05:7c:dd:db:6d:34:6b:45:6e:b3:
d2:06:15:54:14:ec:7a:b0:21:e6:61:76:4a:05:54:
ec:06:56:ed:6a:1e:21:4e:6f:1f:7c:85:d6:66:51:
09:45:be:69:56:5d:29:af:e8:89:0e:34:12:90:96:
c0:68:60:fd:78:ae:9e:53:53:1e:03:ea:5c:f2:c5:
50:de:e1:94:33:ab:33:8b:90:d6:b2:c1:21:51:98:
a3:f2:b0:b6:ed:25:2a:13:83:51:ec:0a:17:84:ba:
6e:3b:c0:dc:41:76:57:4b:5f:c4:ea:70:42:18:fc:
8d:3d:68:03:0e:f7:d0:df:03:df:c7:bb:6e:26:98:
b4:34:e5:a6:9a:94:6b:17:92:d0:f9:1f:6c:d9:f4:
04:94:99:8a:89:08:fa:bd:5b:b6:55:83:a1:ba:ca:
43:da:c5:04:6a:88:30:76:24:9e:77:0b:28:ad:c7:
81:02:3b:6d:e7:26:2e:7e:85:8b:02:50:6a:60:a6:
ba:ed:e4:ed:df:0e:69:a2:ee:0e:f0:96:4d:ba:50:
ca:d8:03:5a:8a:67:97:f6:8c:ce:9c:ee:81:95:0a:
88:d7:a5:c1:cd:ac:4a:e7:85:78:6f:8d:69:ed:6a:
c8:14:28:f8:83:cf:45:ae:df:a7:bb:8f:b6:7a:8c:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:2A:EA:D1:F5:CC:34:3B:02:04:54:62:99:7D:06:91:9F:E0:73
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4b:62:57:c9:31:b0:10:71:7e:d8:2d:7c:25:54:0f:fa:e6:
26:82:35:6e:60:89:e8:65:c5:b7:b8:49:f5:87:ec:5e:fa:f6:
fb:8d:99:f0:bb:13:f2:21:f3:38:4b:de:6d:90:c5:fc:8b:14:
29:28:3f:61:ef:bd:b9:61:ea:f2:93:05:d4:8d:27:77:18:16:
72:73:bc:83:2a:ed:e4:55:1c:25:bc:51:2f:ca:75:df:e5:21:
16:11:fe:1d:88:a1:54:dc:a2:ba:98:1d:27:6b:b4:d8:9b:4a:
c4:74:f4:91:ed:58:d1:c0:eb:b7:df:04:8f:da:fe:e5:b1:e9:
b7:e4:25:c9:5d:4c:a9:de:8d:05:fb:b2:37:40:27:83:6a:12:
70:3e:3d:51:b1:e9:61:f4:fb:1c:7a:49:6e:2c:8a:31:08:a4:
6a:f7:2d:b2:a1:89:67:df:f9:96:37:39:a4:5f:f2:91:b3:27:
2e:7f:14:a2:46:5b:c7:08:f0:2d:8f:5e:b4:5f:86:46:6d:8f:
40:9d:38:ee:83:64:87:32:1e:f1:5a:17:8a:e0:31:fa:7b:ca:
8f:12:e3:83:2e:fc:ec:49:8f:56:5d:3b:6d:1e:53:66:ba:f0:
7b:16:1d:4c:bf:05:e2:27:0b:0b:76:ed:5e:aa:7f:39:87:99:
b9:c1:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:48:16 2025 by rpki-client