Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: IZo944mDw/6CmsL5cuEh5jK+ZyIGiJMp5s9Uydmjxsw=
Subject key identifier: 15:CE:6F:17:86:9B:3A:9E:52:27:D0:19:DA:B2:A2:48:F7:CB:7E:39
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 0196BFDC5A901566CEBC4DE0BA4EE352E1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 0413
Signing time: Sun 11 May 2025 15:00:11 +0000
Manifest this update: Sun 11 May 2025 15:00:11 +0000
Manifest next update: Mon 12 May 2025 15:00:11 +0000
Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: gBPtcF1A0gSE8nfeke9WM45PCaqjyfpWeTpAKhve4ek=)
2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:5a:90:15:66:ce:bc:4d:e0:ba:4e:e3:52:e1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: May 11 15:00:11 2025 GMT
Not After : May 12 15:00:11 2025 GMT
Subject: CN=15ce6f17869b3a9e5227d019dab2a248f7cb7e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:31:42:91:51:1f:54:8d:e5:d3:c7:93:ad:
52:da:3d:c5:1f:f4:bb:69:fc:84:20:73:b1:eb:8f:
ff:db:68:0c:dd:1c:5d:f1:05:94:75:7f:fd:8a:3f:
e6:48:91:ad:5f:7f:48:c5:69:ea:1c:f6:fc:05:47:
cf:b7:aa:39:3a:fc:a2:ef:65:bc:f8:3b:82:f6:80:
92:5d:80:96:4a:0e:c5:28:6b:65:03:fb:6b:93:07:
90:43:de:54:fb:37:24:4b:07:55:07:28:5c:a0:62:
d2:6d:b7:f0:81:cb:88:6c:9f:13:dd:91:70:29:ac:
89:d7:ae:3a:b9:8b:37:17:e8:da:e9:d4:2b:19:20:
9a:94:14:da:be:22:bf:3b:7e:a7:6b:09:be:a0:37:
28:47:b7:80:ba:46:e5:bd:51:69:9a:2e:e4:de:82:
08:10:ac:69:69:1e:b4:63:a5:fa:e9:f0:4d:4e:c8:
e5:96:fe:19:d5:87:b7:73:01:a3:e8:41:e5:4c:42:
b9:e9:bd:42:9a:00:bb:b4:88:58:bc:6b:b9:b6:b7:
3c:96:f1:47:39:8e:1b:48:94:7f:e8:7b:69:13:0f:
f9:5d:76:2a:be:58:68:c4:b7:66:e5:fd:0c:19:2d:
03:66:95:7f:b6:e4:1b:0b:5c:0f:3d:0e:15:38:1f:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:6F:17:86:9B:3A:9E:52:27:D0:19:DA:B2:A2:48:F7:CB:7E:39
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:22:94:a5:67:9f:52:95:79:01:31:d0:b3:89:f7:5d:f7:05:
ee:8d:b5:00:37:f8:f6:ef:75:b7:1d:b9:f2:9a:ec:32:f2:8f:
55:29:54:ef:dc:51:e9:b3:77:60:1b:09:47:88:c0:9a:6d:f9:
21:f0:c3:67:72:61:42:64:cb:b7:08:68:28:3b:1e:73:50:21:
3f:ca:cd:9e:23:89:80:9f:69:02:cc:a8:b5:3c:42:10:d9:52:
0a:8f:3f:88:2c:0d:ba:a6:49:ec:24:88:09:81:db:f5:d5:75:
10:8c:4e:93:3f:dc:c4:cc:0c:e7:00:e5:10:62:5f:28:cd:71:
b2:c0:5b:75:00:df:45:c1:3e:90:66:a2:68:b3:b2:e4:4e:05:
ac:f3:27:30:5e:ea:19:3a:f5:5c:4d:94:77:7b:12:31:c3:fc:
be:ae:72:a9:3e:3b:f5:02:07:b9:6e:f3:08:9e:fc:05:6b:45:
2d:a3:5b:61:cf:ab:ca:f4:a8:2f:95:0f:32:a1:8c:1d:51:7e:
5f:e4:3d:fb:7b:aa:f5:ed:63:c8:07:92:a7:79:3b:45:23:9f:
41:da:94:55:ad:12:ad:17:cf:98:41:10:9a:31:dd:ab:3b:b6:
9c:3d:9f:41:27:92:5c:bd:d4:55:b2:08:19:c6:2b:1b:2f:0d:
ad:1f:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:18:12 2025 by rpki-client