Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: OwgKZDdLfacrGUD/ShWeFxk59jF1qiGT6Z8yKwlDo6Y=
Subject key identifier: 15:5A:52:8C:48:2F:92:46:9A:30:05:7D:D6:88:09:C2:B1:58:53:60
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 01969D8781BB95EE262ADCB7810EA9BD03E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0800
Signing time: Sun 04 May 2025 23:00:25 +0000
Manifest this update: Sun 04 May 2025 23:00:25 +0000
Manifest next update: Mon 05 May 2025 23:00:25 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: qCrmtG0zyG767Xm3l9J4GPGMVWPNHGojHv3fUDvtMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:81:bb:95:ee:26:2a:dc:b7:81:0e:a9:bd:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: May 4 23:00:25 2025 GMT
Not After : May 5 23:00:25 2025 GMT
Subject: CN=155a528c482f92469a30057dd68809c2b1585360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:60:36:aa:c2:e2:54:c3:4b:12:ba:0a:60:
aa:3d:25:d2:68:79:0b:df:22:cc:ba:5a:1d:25:83:
00:b2:8e:3a:c8:b2:56:e2:f3:82:dd:18:c2:a1:70:
bd:ef:71:f2:eb:cd:ee:21:42:f9:95:a3:7f:56:4c:
a1:ea:85:76:81:d7:73:b6:f2:ab:c0:54:f5:a7:18:
6b:b4:53:ac:27:2d:4f:dd:64:c9:85:4c:4a:86:7f:
87:3d:45:f6:25:08:a9:05:c9:02:86:25:a2:7b:70:
cc:49:44:52:99:20:90:8a:af:71:74:de:54:94:e5:
0d:ff:7d:74:18:23:4f:7e:28:f2:4b:5c:10:9b:db:
87:4e:78:a2:0c:0a:07:1e:74:5f:3b:61:f8:df:97:
57:e1:7f:a4:93:47:7b:db:bc:57:72:20:77:67:ab:
fc:9c:77:e7:f5:19:34:ad:73:0c:7d:fb:11:69:3f:
9b:35:2a:99:d7:f0:e2:8a:09:4e:39:50:c5:ba:f2:
17:48:a8:07:05:67:fe:b1:4c:a5:2a:43:5c:1d:48:
10:9d:88:7c:8c:69:17:4d:a5:4f:57:82:6a:6f:5a:
69:cf:47:00:7d:83:f6:d2:9f:7d:ab:e0:a3:ad:de:
cb:61:b2:fe:6c:84:f3:8c:ea:5a:f3:66:ac:a9:c8:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:52:8C:48:2F:92:46:9A:30:05:7D:D6:88:09:C2:B1:58:53:60
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e5:b9:5b:ae:c8:68:71:7f:53:42:b0:10:b5:7d:7f:8b:8d:
0e:28:38:ca:83:53:2d:82:b2:93:75:31:32:1f:23:e7:75:b8:
47:43:e8:60:ad:c6:9a:7e:9d:f3:00:e1:5e:79:e1:88:4a:e7:
ae:2c:c2:81:7d:2d:ee:f2:c3:09:62:81:77:eb:0d:73:4b:d5:
80:31:1e:97:0c:70:4b:b7:7f:4e:00:2c:7c:4c:24:7c:26:07:
4e:9a:52:a1:24:ea:a7:2c:e0:b8:8a:ba:b5:4e:8e:1b:3f:c1:
53:6e:8c:d0:e0:22:3c:c1:b6:93:42:ab:09:bd:b7:05:01:90:
3d:1a:3e:2f:b4:76:dc:4f:49:b6:b3:38:f5:fc:59:49:ce:44:
2b:42:74:c6:79:2d:71:1a:a3:8c:e5:08:fb:23:2d:02:41:a6:
fe:1b:27:30:8f:38:8d:96:cf:8a:20:af:1a:8a:b4:82:1e:25:
a1:41:23:72:14:20:de:4b:f7:bf:3b:b0:b1:3f:55:0e:c3:14:
22:f6:6f:8b:85:f5:c5:08:40:af:7a:95:cf:e2:36:21:ce:b4:
32:8f:b4:de:de:e3:85:76:e4:75:a4:73:a1:d2:15:35:20:e6:
08:52:07:1f:72:16:6d:74:af:b0:77:d5:47:8c:4e:d4:b5:fd:
c3:67:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:46 2025 by rpki-client