Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: K93zduR/270i82Pio6jGzyJJJh17AePFiIQNw1j9Mo4=
Subject key identifier: DC:54:C5:6F:88:32:E8:8B:65:80:1E:70:DC:9A:2E:58:15:A7:9E:C3
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 0196DDE732D953DCEA64D4D8C9A3D1E4595B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 1544
Signing time: Sat 17 May 2025 11:00:38 +0000
Manifest this update: Sat 17 May 2025 11:00:38 +0000
Manifest next update: Sun 18 May 2025 11:00:38 +0000
Files and hashes: 1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: R1bGrNnh95AIRBcs1uZ2qjARPcC41ZyiuoBKo/CFC30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:e7:32:d9:53:dc:ea:64:d4:d8:c9:a3:d1:e4:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: May 17 11:00:38 2025 GMT
Not After : May 18 11:00:38 2025 GMT
Subject: CN=dc54c56f8832e88b65801e70dc9a2e5815a79ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:46:30:4b:3d:83:9b:8a:f9:62:7e:49:e7:
a5:8e:60:54:a6:d6:9d:85:ff:f5:ef:29:14:8e:26:
05:8d:b9:43:14:4b:3d:70:36:d2:0a:1e:98:56:47:
1b:1f:0a:a0:55:f6:91:8c:d2:83:7b:d3:5f:53:cd:
09:03:eb:22:84:f4:fe:94:cc:28:29:97:20:d8:7e:
99:11:70:c8:b6:71:f5:e9:9a:f5:31:0c:8a:b5:fa:
c1:05:22:db:f2:4f:29:8c:bf:cc:58:71:2c:af:40:
f0:09:66:5a:16:e7:12:85:49:51:08:a5:44:0d:a3:
3f:c4:78:9d:db:6c:a4:7e:9e:08:3a:07:99:94:80:
7d:90:ac:53:2d:32:98:7d:11:02:2a:31:0c:bc:fc:
f9:c1:5f:26:c4:0a:20:0f:b2:cb:1e:da:6b:2a:1c:
48:93:0a:a5:6d:00:1c:17:68:d4:85:d7:ef:7b:3e:
e4:3d:f8:19:8d:04:dc:54:76:75:7c:6f:10:99:12:
90:62:16:20:4e:21:a6:2f:2b:e7:7b:2b:c6:a9:1a:
26:e7:17:4d:44:6e:47:1c:27:45:05:14:cb:1e:9c:
1f:b7:2b:05:e7:ad:ca:e1:8b:68:c8:46:91:bc:ef:
3a:39:af:5b:3a:91:85:a8:e7:73:4b:48:5f:ed:a8:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:C5:6F:88:32:E8:8B:65:80:1E:70:DC:9A:2E:58:15:A7:9E:C3
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:af:60:ab:be:e2:ff:91:0e:bb:33:fc:57:32:2d:ee:7d:ce:
a3:78:60:0d:5a:de:5a:a2:9a:ab:2a:92:f2:c9:25:32:15:cb:
84:af:24:e1:0a:5f:dc:d9:47:9e:27:15:ac:0d:bc:81:26:1d:
bb:59:8b:3e:9e:5d:fe:64:fc:d4:cd:84:d9:31:51:fe:d8:b3:
58:e5:ce:28:bd:92:f8:41:0d:1e:72:73:02:a4:ed:4b:62:ed:
19:43:75:24:22:db:0e:f5:ab:c2:14:a7:43:a6:86:f7:e0:13:
b6:b0:7e:55:02:44:27:c6:f4:a2:86:fa:d6:e6:78:32:e0:99:
b2:d9:23:0d:10:ec:f6:b5:f9:cc:78:2f:02:17:44:05:dd:3f:
05:d3:3e:99:36:6c:0b:86:41:b3:3d:84:ef:7f:d8:0e:ad:e4:
5f:5e:87:1d:88:6b:ab:5a:ff:9b:82:21:c9:f1:36:7e:dc:ca:
b6:0e:c1:f6:7f:15:93:1c:2f:f1:46:6e:36:6d:e6:68:c5:90:
c2:11:75:9a:0a:ef:bb:fc:50:d4:83:92:71:f7:06:ae:04:e7:
ab:f0:e5:73:b3:ba:38:f5:e7:48:19:65:6f:55:00:03:54:05:
81:03:e0:b9:fd:57:c4:f8:8e:df:32:c6:39:9c:10:c8:ed:a0:
fd:bc:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:39:58 2025 by rpki-client