Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: 12tdm4maQN7CYnsexNQUsKhSBWJRV68HSlpJVCRJDoY=
Subject key identifier: BE:0F:B5:68:F2:AF:06:4C:82:2E:7F:04:44:DB:4E:6E:EF:94:38:61
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 0196CB73561EA93D1DDE38BD6F81819777BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0979
Signing time: Tue 13 May 2025 21:00:55 +0000
Manifest this update: Tue 13 May 2025 21:00:55 +0000
Manifest next update: Wed 14 May 2025 21:00:55 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: niI+2oyYrBWptdvZjHISMXe8rQtCxbIpuD3sQQbYL3w=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:56:1e:a9:3d:1d:de:38:bd:6f:81:81:97:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: May 13 21:00:55 2025 GMT
Not After : May 14 21:00:55 2025 GMT
Subject: CN=be0fb568f2af064c822e7f0444db4e6eef943861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:ea:08:7b:63:15:d9:ff:20:e5:d0:18:ed:
3a:f6:cd:dc:e9:4f:78:88:a9:61:4b:a2:ee:c8:5f:
33:63:e1:1b:63:87:a6:87:e2:fd:35:e9:8e:53:cc:
89:2a:fc:9b:d2:9a:0f:68:8c:fe:1e:c0:30:d3:22:
43:1b:25:a0:04:cc:3b:da:84:8b:97:55:a5:f6:f7:
96:e8:96:39:c2:dd:01:12:34:a3:0c:d6:73:02:75:
85:ba:99:82:b8:35:d7:8e:3b:da:b2:cb:cd:1b:ce:
c7:94:65:f1:18:a8:db:3a:26:36:f3:15:4a:8f:58:
44:90:c9:a4:bf:d1:e3:ca:0a:40:26:05:89:2f:4e:
f6:2e:72:47:bc:a3:6f:18:6f:d5:6c:60:f0:61:82:
04:4e:bc:ea:7a:c3:82:bb:cd:4b:29:da:93:90:b1:
d7:0d:77:23:4b:6b:6c:25:a9:3c:d5:61:b5:56:97:
e5:c6:5e:26:62:f0:ab:f4:b5:ab:d8:98:c8:93:1c:
ad:29:3b:44:c1:75:2b:99:e0:dc:f9:79:1e:2f:a8:
ea:f8:37:d6:ef:d6:3e:75:72:8c:19:75:d9:2c:f6:
77:dc:7b:eb:ec:c1:65:91:e9:6f:c2:55:68:f0:7b:
7e:0c:80:01:46:c7:76:24:c4:1c:c2:8b:76:47:69:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:B5:68:F2:AF:06:4C:82:2E:7F:04:44:DB:4E:6E:EF:94:38:61
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:3b:b6:c1:83:36:0e:07:c4:cb:13:da:6b:ef:6e:bc:5d:
b8:fb:44:29:cd:b4:af:f4:21:13:3c:e6:5d:e4:e2:72:4e:54:
c7:42:19:18:8d:2b:32:ec:cc:07:26:c2:60:73:04:08:cb:e9:
aa:a2:3f:11:d7:b8:97:28:d7:9f:23:d2:e9:db:a8:07:43:2b:
fc:05:56:cf:d6:d0:05:dd:13:96:3c:40:3a:10:d2:c3:17:58:
7b:4a:d2:b0:c5:5e:5e:a1:a2:70:a1:cb:c8:d0:d6:be:8d:e8:
e2:f7:84:ff:19:b0:52:e4:7e:44:ab:a2:42:97:9a:8e:97:0f:
2e:a4:ce:14:dd:d0:90:c3:d0:5a:61:a4:d2:01:13:50:28:e2:
8a:53:0a:49:93:ac:fb:b0:c2:be:e2:b0:46:ca:50:9b:a1:94:
bf:c0:55:0b:7c:c1:bc:60:3d:62:06:b0:37:3b:e3:8e:e0:9c:
6d:b1:23:ad:19:22:84:53:c4:72:6f:40:cc:21:e7:8f:4f:7c:
13:df:6c:9f:59:ed:2d:57:c8:7a:ff:32:66:19:89:64:37:4d:
6b:ce:80:d5:69:bb:01:1c:85:1b:5a:49:28:5a:8b:d8:d3:65:
14:17:7e:3a:45:5b:85:7c:50:f2:78:65:e2:93:45:c2:00:21:
f5:19:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:33:11 2025 by rpki-client