Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: cSxTb1uNtd4pcRzS3giMVOi6Ig/e3f4fEnPU6TiAIgg=
Subject key identifier: AE:58:90:AE:0B:25:FA:B0:20:CC:74:CC:0E:BF:CF:9B:15:81:AC:DE
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0196A277BDB76A5788422D6DEAA5D38B0358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 22:01:18 +0000
Manifest this update: Mon 05 May 2025 22:01:18 +0000
Manifest next update: Tue 06 May 2025 22:01:18 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: uRiy7z7TOPgZmcBrPGx4dz8a/Lhdsy6hZDCSk871+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:bd:b7:6a:57:88:42:2d:6d:ea:a5:d3:8b:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: May 5 22:01:18 2025 GMT
Not After : May 6 22:01:18 2025 GMT
Subject: CN=ae5890ae0b25fab020cc74cc0ebfcf9b1581acde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:9c:f1:79:a7:bb:e6:56:96:37:92:96:26:
1a:6f:a3:03:b8:6d:dd:ca:46:c0:86:67:09:b4:9f:
ba:70:1a:7c:34:c6:e0:a9:22:d5:32:35:6a:2c:4a:
50:12:1a:23:db:60:72:2a:60:9a:49:e1:64:90:2e:
a5:24:34:d5:f5:2f:a9:dc:5d:2c:40:f7:06:74:b5:
1c:6a:bf:07:8b:ab:ec:97:6a:9a:83:0f:07:d9:73:
f6:50:24:29:a5:01:8a:ee:8d:10:f0:50:c8:a5:76:
34:77:0c:06:f9:6e:b9:8d:80:c5:65:15:c0:05:24:
ad:18:0d:91:f2:a5:a0:cb:fa:9c:16:b9:1d:64:97:
63:26:04:f4:ee:37:c4:8e:1d:21:93:88:9a:69:62:
08:ff:96:d2:ba:ad:ea:db:80:f7:e5:d4:34:6c:99:
be:ee:f2:d3:10:db:16:f7:dc:0f:37:64:f0:00:8b:
91:22:61:5e:ed:ce:c7:28:50:af:9a:57:40:ab:be:
71:86:19:27:6b:10:d7:6f:2d:48:d6:2f:8f:4c:d2:
75:04:3a:66:b9:32:98:9a:af:c9:1e:51:cb:bc:93:
41:f0:fd:b3:88:6a:8f:87:d2:e7:3a:39:7d:11:98:
e6:f5:7f:92:3f:1d:ed:e1:95:4a:fc:46:6b:10:4a:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:90:AE:0B:25:FA:B0:20:CC:74:CC:0E:BF:CF:9B:15:81:AC:DE
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:f5:6d:06:c5:4a:57:30:6e:2f:ca:16:89:51:20:74:78:
c3:90:4c:37:68:df:6a:f3:2a:86:4f:e1:16:34:d0:2b:52:0c:
38:93:30:7d:d8:b6:bc:a1:3c:9a:cf:5b:bd:6e:6b:c1:54:e2:
dc:2b:68:0b:1d:cf:95:fd:f7:7f:36:0d:37:f2:7d:94:3c:f0:
bd:d1:86:f7:65:e5:b9:81:58:56:22:8e:a7:73:9b:4e:66:56:
9c:31:81:e3:a2:cd:c6:65:79:5b:c9:30:24:c0:03:03:0e:ac:
e2:6e:2a:b0:13:2a:e1:75:69:29:61:6e:3e:b1:95:67:ba:36:
92:fc:08:41:b1:a0:24:f8:35:9c:89:03:c8:13:6e:cf:8a:0b:
fb:d8:8c:ed:aa:d4:48:d3:38:17:fd:b3:d6:0d:f9:cb:16:14:
79:8c:13:5e:e9:47:89:a4:0d:ba:d5:ba:60:f5:f7:81:5f:1a:
4c:ba:7a:c0:cd:c9:a7:3b:c1:97:ae:54:9f:98:10:36:ad:81:
f6:0a:bd:17:43:c0:82:eb:62:d6:88:5e:e7:aa:e4:9f:a4:15:
e9:cc:c0:bd:5a:a1:45:77:d4:5b:64:0f:73:ca:e1:fb:ee:7d:
d3:47:21:c9:09:2b:72:60:b3:50:b9:2f:f5:e2:3f:ba:80:9d:
91:ec:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:22:40 2025 by rpki-client