Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: yPZqdqz5NKZVGSaIvPSQUmVcbAQVwdHIuN+zCSXltpU=
Subject key identifier: 58:8A:AB:9B:B7:72:BB:CB:21:AA:31:42:E4:79:42:A4:E5:DA:1A:3E
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 0196B36A7397B16E2AE802A0F16AFD59C0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 05:00:20 +0000
Manifest this update: Fri 09 May 2025 05:00:20 +0000
Manifest next update: Sat 10 May 2025 05:00:20 +0000
Files and hashes: 1: 2U0FmiNPuRsirMYN3FGklZxDD9Q.roa (hash: eQCdTyNKllRfFUhh8G66WPNPQZuFFFeE0Jbe10gfxJs=)
2: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: d78BWZgfqTtpvtM+6qep5jzNt8C+UlHTWI9FoLpZnPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:73:97:b1:6e:2a:e8:02:a0:f1:6a:fd:59:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: May 9 05:00:20 2025 GMT
Not After : May 10 05:00:20 2025 GMT
Subject: CN=588aab9bb772bbcb21aa3142e47942a4e5da1a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:26:34:08:a0:c8:ad:e7:42:7c:eb:6e:c3:
de:b4:f6:00:e7:9d:8c:cb:f6:6a:f6:6a:b9:d3:1e:
f1:f5:dc:cd:a3:38:9c:ff:49:42:cf:f6:98:93:7d:
e5:26:76:5a:56:19:a4:6d:3b:65:af:f8:73:3b:38:
1b:e0:99:98:fd:3f:15:8c:21:4f:7c:1d:03:40:f4:
9b:ae:ca:8d:3c:9f:c7:81:36:b7:c0:43:e9:0c:89:
36:e3:40:18:7f:4b:97:a6:5a:2b:0d:54:3f:43:42:
71:2f:9b:f2:fd:7d:2a:df:cf:89:66:88:aa:11:be:
d3:92:7d:62:11:2b:ec:c9:68:6d:d1:cc:9d:1f:4d:
c3:6d:1f:83:6b:b7:ae:3d:12:e7:5d:d2:7d:95:38:
20:cd:4f:31:ad:f1:35:90:ad:b0:4c:df:49:c4:29:
3f:55:95:1f:b9:29:4f:37:79:a4:03:53:23:64:ae:
9f:2a:3b:18:eb:00:3c:d1:cf:79:64:7c:98:ef:42:
a6:ea:a9:d9:16:d0:32:d1:cf:31:10:be:a1:c8:1b:
d6:b1:b3:7e:33:d1:5a:17:7d:9a:73:96:a0:65:7d:
0a:51:34:b7:e9:2c:50:02:b3:ff:af:cb:e6:7b:42:
26:91:58:bf:25:ea:28:ee:9f:4a:11:a8:e8:17:f1:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:AB:9B:B7:72:BB:CB:21:AA:31:42:E4:79:42:A4:E5:DA:1A:3E
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9d:7a:b3:28:16:00:9b:d2:47:18:3e:0d:9c:b3:67:bd:18:
6b:67:f1:59:82:5d:80:e5:33:9a:d6:74:bb:2f:ad:eb:c7:1f:
2f:3a:a5:3f:c0:7c:b9:42:53:b8:16:6e:21:d1:bb:d5:dc:34:
f8:3d:37:13:d2:72:2b:b8:4c:98:7b:04:e5:20:a9:84:50:84:
ea:3c:60:6c:24:1b:06:7a:bb:5e:9f:e3:26:8c:5e:45:c8:f5:
30:df:63:4e:90:a1:e8:e8:fb:d9:2c:95:5b:2f:eb:97:cb:19:
e4:e0:73:83:af:e7:64:e9:3d:59:d0:f8:31:dd:c9:ce:c5:b1:
ac:b6:00:fd:b3:79:50:2e:82:1a:5e:5b:e8:f7:c2:e0:73:f8:
01:25:f7:7a:5f:0e:6d:a5:ee:a1:f7:7e:a5:ae:46:a2:41:1a:
4e:c6:b9:f5:90:de:20:bb:9b:e3:68:b0:70:be:04:56:c5:7b:
cd:aa:cd:af:ab:e8:c3:62:02:0c:e1:f5:50:16:47:3a:8d:7b:
2b:88:bc:02:7e:80:6f:65:74:a1:1a:09:b4:40:90:33:90:32:
a2:0c:4f:08:6b:e2:3c:b3:dd:6a:20:1d:ec:92:ec:83:e7:1e:
00:6d:74:f4:ac:1f:17:0c:cf:b4:81:31:e2:0e:88:00:12:0d:
6c:e3:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:45:13 2025 by rpki-client