Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: lz9GcCq+QIcUxWvC++I2bZ5jYdakT7IRnZgvO8PWy8g=
Subject key identifier: 0D:F2:48:B6:62:53:CC:E3:B5:95:0D:C2:77:7A:09:E5:5A:50:94:96
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0196CDCF86303989C19299659CF1DBD358BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 154F
Signing time: Wed 14 May 2025 08:00:51 +0000
Manifest this update: Wed 14 May 2025 08:00:51 +0000
Manifest next update: Thu 15 May 2025 08:00:51 +0000
Files and hashes: 1: kvgwT2CIxiAz0KGy17PsocByagw.roa (hash: uswWYZe8p+8Gmx/n8zkQaGQ6Q2+Rru2JGoDveoK/xUw=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: 0ULxK67LRY+NlUUM7gI1rRLAaRJoG9g5AbivOpHMgTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:86:30:39:89:c1:92:99:65:9c:f1:db:d3:58:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: May 14 08:00:51 2025 GMT
Not After : May 15 08:00:51 2025 GMT
Subject: CN=0df248b66253cce3b5950dc2777a09e55a509496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:41:4a:0e:d4:ed:66:99:80:3d:84:92:c8:
c6:50:31:71:ea:fa:90:9c:06:de:84:fd:26:21:e9:
8d:66:25:39:d7:f8:99:75:3f:5f:77:04:4b:75:cb:
78:74:13:e9:0d:76:9b:cf:e7:87:a3:43:f4:1e:0f:
d2:7c:ec:ae:8c:c3:0d:56:86:aa:cb:24:ce:84:0a:
de:62:c0:59:a9:a4:20:73:06:bd:a5:9d:9a:29:ee:
8a:90:bb:7c:2d:f7:b4:b8:e7:61:09:fd:1b:dd:59:
28:05:19:da:fc:60:f7:b1:eb:34:b7:8f:00:b1:65:
1e:b6:07:b9:21:31:c7:ed:c6:e2:c3:ef:93:91:dd:
e8:67:4b:fd:2c:40:9b:96:ce:8b:fe:47:d6:4b:bd:
c6:b8:e8:a4:6d:f8:11:a1:53:87:ed:78:9b:cf:51:
02:ea:34:61:a4:b5:a6:dc:71:fa:88:cf:63:9f:9e:
84:61:24:d2:a9:ef:c8:53:1d:4e:db:9e:ab:53:7b:
aa:5e:cb:fe:9f:c5:33:b6:6d:b1:ff:dc:90:e7:cd:
e2:62:58:5b:93:76:25:a9:dd:13:1f:c5:57:4e:3b:
52:dd:ed:e3:0f:ce:60:79:23:bc:55:40:09:3b:84:
6c:20:b7:e3:02:66:c5:2f:d9:31:fa:6a:4a:db:fe:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F2:48:B6:62:53:CC:E3:B5:95:0D:C2:77:7A:09:E5:5A:50:94:96
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a0:52:b0:d4:84:b0:52:2a:1d:fb:d7:ec:2d:03:a3:d4:53:
a4:a7:61:c7:83:6f:4a:0e:93:2f:b3:04:24:56:95:c6:52:3f:
55:b4:49:2e:1a:8f:1d:1f:96:11:33:46:0c:d0:5c:75:14:0d:
eb:e6:b1:51:62:f2:53:17:81:77:36:b7:25:6d:14:96:d0:4f:
ee:f9:f8:14:63:fd:d2:a9:c1:62:fc:5b:d8:c0:53:51:38:dc:
2f:bc:20:d1:df:6f:9d:49:02:0b:0c:86:06:12:50:70:2f:a3:
2b:c4:b2:ad:7e:ea:43:05:d4:09:39:9b:2f:be:01:ec:f0:4b:
86:3f:c9:34:b6:a5:8b:5f:08:d3:6d:59:70:28:b4:87:5f:e0:
80:8a:77:49:a1:67:e1:9b:09:d4:04:b4:6a:6c:ad:91:58:07:
ab:4d:76:3d:e2:4d:2a:eb:74:b1:de:cb:d8:cb:e5:fc:52:2c:
ce:18:0f:4f:55:24:6c:39:e0:99:00:18:bf:26:60:7a:62:69:
38:c7:b2:84:7d:75:15:5c:df:24:f4:30:0f:d9:44:ce:fe:82:
21:eb:8a:42:8f:cc:aa:d2:65:5e:87:d9:f4:bd:31:9b:22:e9:
31:79:26:c2:6b:ba:28:2a:01:26:0c:b0:18:a7:47:61:12:3c:
0d:4e:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:19:19 2025 by rpki-client