Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: bgRbm+Rs4KqmACFBvJudj+FdoMMkv/DShhNX4JX/h4w=
Subject key identifier: 00:9B:41:98:45:21:20:D0:DB:02:11:99:DB:58:DF:70:FA:6E:F5:24
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 0196B66BDEA937D8E47406D97FED64BF9131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0C15
Signing time: Fri 09 May 2025 19:00:44 +0000
Manifest this update: Fri 09 May 2025 19:00:44 +0000
Manifest next update: Sat 10 May 2025 19:00:44 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: 8tucX+WN5ZBJgqQKp9x3lssqnVXpRjhv7OaGKiB/PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:de:a9:37:d8:e4:74:06:d9:7f:ed:64:bf:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: May 9 19:00:44 2025 GMT
Not After : May 10 19:00:44 2025 GMT
Subject: CN=009b4198452120d0db021199db58df70fa6ef524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:37:a8:d6:e1:32:42:6f:df:1c:45:ec:25:
e2:1d:b8:c2:07:2d:47:25:8b:37:bf:6e:75:c1:07:
5b:39:8a:63:e7:5a:b8:6e:2d:fe:85:f1:f3:a1:5a:
57:32:e2:10:f3:9c:33:63:b7:a8:7a:8d:63:09:fb:
7b:47:d3:1d:52:56:cf:2a:ec:54:6b:3f:4a:d2:08:
43:cd:4a:91:02:01:d8:46:04:30:fc:5d:91:ca:3f:
cf:ca:b5:a1:dc:75:07:c1:00:7e:6d:5b:a9:21:b0:
95:50:86:1d:8c:c0:80:83:d8:d5:98:63:30:94:d1:
c4:62:7a:94:21:62:4c:0e:cd:91:7d:52:ec:64:0f:
94:f9:09:76:d8:2b:f6:d4:87:5c:ee:c4:60:18:02:
37:f2:a6:48:ff:e3:d5:2e:89:3b:e4:61:e0:50:19:
91:a0:54:7f:a6:ee:39:13:6b:e5:66:0b:88:07:89:
f9:4d:9b:e4:76:5c:c0:04:26:20:70:e0:2e:8f:1b:
14:ff:8f:87:13:a3:55:09:c4:13:d6:b4:59:2f:68:
6a:f5:dc:72:26:91:3d:65:5d:26:57:76:75:bb:d6:
9b:e2:78:b6:f7:3e:65:78:24:ca:92:61:e7:27:08:
57:a8:13:89:cf:87:bd:bf:55:40:73:5a:c0:5c:a5:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:41:98:45:21:20:D0:DB:02:11:99:DB:58:DF:70:FA:6E:F5:24
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e6:97:2d:15:f8:bf:a8:5e:4b:25:b8:e6:8e:01:ce:d0:cb:
18:29:82:fe:02:d5:d1:e7:e3:e9:66:78:bf:f9:fe:c4:f0:0f:
d5:7b:1d:16:73:49:0f:ce:ce:d3:a4:ce:b8:94:b6:3a:43:62:
eb:a4:25:ef:15:4d:b1:fe:65:11:a5:6d:39:23:fa:70:15:39:
cc:1c:d7:ef:4a:d6:1c:f3:2f:67:4c:47:52:37:ea:d0:36:9a:
f9:66:b2:cc:d3:c1:46:48:82:4d:f7:eb:74:ca:1b:d7:b7:5e:
13:bd:d5:00:59:a9:c0:dc:a4:ad:69:29:16:3d:9e:43:a2:e1:
0d:2d:3e:7e:9a:1c:91:b3:ac:da:01:56:bd:3a:ab:71:a9:8b:
85:46:83:84:66:05:32:52:26:0b:78:6d:80:07:15:bc:5b:54:
f4:6e:53:fe:18:dc:3f:71:41:82:69:16:c6:6f:7f:ae:79:58:
d9:c4:d6:92:06:3f:e9:c8:06:e4:cb:7e:36:15:c3:8e:69:67:
e8:69:c7:f1:17:c8:e0:87:7d:32:d1:df:5f:fb:aa:08:6d:fe:
a1:89:c7:03:af:76:d2:aa:30:bc:d8:ca:3e:4e:91:ed:ce:d2:
53:8a:ce:8d:ef:a0:30:5b:a8:d7:25:94:be:51:34:9d:0b:e4:
46:12:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:01:27 2025 by rpki-client