Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: 4adlzK1m5Mp/eiRnSaEtSA1OTqD/ktxo+llSDocw49g=
Subject key identifier: 22:38:DF:98:ED:20:B6:6C:CE:56:F7:B9:0B:47:50:BB:5A:9B:FA:79
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 0196B5FDF136E37B8FE2F797E83BD04DA54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 17:00:40 +0000
Manifest this update: Fri 09 May 2025 17:00:40 +0000
Manifest next update: Sat 10 May 2025 17:00:40 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: 6MDecBJI6w0MtuVDdwOyzNwCioZNt8eUwlPU23Hh8UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:f1:36:e3:7b:8f:e2:f7:97:e8:3b:d0:4d:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: May 9 17:00:40 2025 GMT
Not After : May 10 17:00:40 2025 GMT
Subject: CN=2238df98ed20b66cce56f7b90b4750bb5a9bfa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:e7:f2:0c:61:4d:d4:38:3b:a0:fe:84:75:
62:e2:27:db:5e:07:33:9a:73:a7:ac:63:85:01:5e:
77:63:c8:ed:02:15:4e:ef:0b:f0:21:36:ce:f0:dd:
c9:86:e5:aa:59:d4:f0:ac:c9:1a:e6:1f:40:73:28:
4f:e2:8c:23:26:33:55:4c:c9:7e:a7:7d:5b:8f:fc:
39:ea:1c:1d:a0:b4:15:d0:a8:a5:49:9b:64:de:80:
d8:93:9d:37:31:51:cd:9e:47:d3:00:1d:5e:77:fe:
6c:41:4d:a1:7c:38:aa:13:6f:46:de:ad:90:84:64:
f6:fc:7b:e9:8b:5a:8f:ae:39:57:78:61:bd:99:b9:
89:14:af:01:d8:db:e9:ff:8a:db:93:8b:56:29:c7:
dd:e4:5c:6b:29:7a:83:f5:9f:89:34:0e:b1:a6:1c:
12:76:5a:54:dc:a1:b7:14:7c:a4:03:c8:f5:d0:21:
55:df:32:f2:f6:86:dd:f4:33:c9:21:0e:37:be:07:
bd:2a:69:df:3b:4d:32:e2:83:66:ac:53:a9:d9:92:
8f:73:c9:36:56:a9:c8:bf:70:e2:01:54:7c:35:fb:
79:ac:c7:ad:eb:4b:6a:3f:4b:2a:6d:da:05:43:04:
9a:88:b8:e6:08:ba:7a:62:f0:e7:cb:42:f8:d0:9a:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:DF:98:ED:20:B6:6C:CE:56:F7:B9:0B:47:50:BB:5A:9B:FA:79
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:6e:f1:c9:e9:f3:94:d9:22:f0:e1:74:48:a6:b7:d2:0c:09:
48:81:ed:bc:fa:5a:b8:0a:01:26:2d:e6:6e:d9:bd:f2:04:3d:
e9:d7:a7:f7:d5:5c:e4:6e:31:c5:43:c2:f3:d1:88:45:5b:0a:
aa:ab:7f:5c:ba:8f:d9:ac:9b:c0:ec:ce:06:3d:89:51:2d:b7:
2b:b9:53:33:1a:9f:68:57:db:47:5f:1b:7d:9d:a0:bf:b3:e2:
e1:8a:0d:a9:4d:c2:0c:0e:83:a7:34:18:ef:18:0d:2d:37:8a:
fb:4c:1d:73:36:13:0a:ba:77:30:d1:cf:26:cf:ce:d6:10:00:
ab:22:2e:3f:5d:74:da:0d:3c:f0:6e:10:d7:fb:31:94:32:75:
b0:2d:d9:47:16:bd:5e:71:19:ac:36:d8:75:ac:cd:96:37:04:
ea:24:7c:ca:e2:88:21:a8:87:43:88:f9:d2:a9:da:22:72:22:
88:2d:14:a6:91:0f:ec:1e:10:e2:e6:27:a5:6e:a0:36:9e:ee:
9b:2a:e6:a7:82:75:73:4e:24:c7:4d:bc:5d:9b:d2:39:b8:db:
b2:15:ca:c4:c6:3a:9a:8d:6d:4f:de:ce:dc:a8:31:82:a4:88:
ec:f1:05:5c:d3:1b:99:3d:4e:87:14:83:47:12:ef:0b:f2:a0:
28:46:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:11:42 2025 by rpki-client