Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: jfboZhwU3KNHZYuPH3ztFNl2iy4EWNQhLdbbIA2IOq8=
Subject key identifier: 17:42:55:3D:C0:A9:D2:0F:D6:ED:03:F6:FD:CC:5F:CE:4C:DB:90:A8
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 0196CE742AA5D4DF0AEF651FDBAC3168B5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1540
Signing time: Wed 14 May 2025 11:00:41 +0000
Manifest this update: Wed 14 May 2025 11:00:41 +0000
Manifest next update: Thu 15 May 2025 11:00:41 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: YRwGKQCrJHA5VGCZ3BsPxEMrQOXiB1X2NlQ1bNCv7lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:74:2a:a5:d4:df:0a:ef:65:1f:db:ac:31:68:b5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: May 14 11:00:41 2025 GMT
Not After : May 15 11:00:41 2025 GMT
Subject: CN=1742553dc0a9d20fd6ed03f6fdcc5fce4cdb90a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:6d:fb:d3:de:98:f4:89:a2:52:65:da:3e:
f4:09:80:5b:96:34:36:8f:7d:1b:06:8e:f6:e5:c0:
54:d2:dc:13:4f:c1:c8:27:31:4b:a6:de:6c:e9:8c:
e9:ab:8d:01:16:e0:f3:11:b0:c7:e0:95:0b:f7:ac:
eb:b7:ec:fe:74:e5:b7:49:b0:18:57:19:e5:01:4f:
4a:79:06:16:2a:4f:9b:4d:a9:be:45:ab:6d:4f:e5:
0e:57:4e:5c:76:7c:8f:8e:c4:cf:94:17:3a:75:4d:
40:aa:a1:ec:76:29:ac:0b:b0:c8:62:f8:4f:a6:6c:
31:e8:f8:3e:0c:19:0b:92:1d:80:e3:c8:a7:b4:b2:
f8:8d:7f:06:e4:fc:71:54:14:27:36:32:0c:69:d7:
be:92:fd:ed:7f:c9:cd:df:1a:ea:dc:df:fc:8b:c2:
4c:73:9c:09:16:65:53:a7:a2:ad:e3:02:f2:10:3f:
9d:8b:03:97:19:1f:63:16:f5:7a:e0:9d:4c:4c:89:
c5:de:b3:d4:81:97:4d:af:48:52:1c:3a:fa:9c:b1:
19:7b:b4:ad:ea:07:bd:c1:cf:2e:a0:e4:ef:d5:b3:
e3:cd:00:d3:44:67:a6:68:9a:5d:af:9e:26:64:9c:
5c:61:f1:21:3c:6f:2d:62:3f:4d:b3:4d:9a:c4:50:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:55:3D:C0:A9:D2:0F:D6:ED:03:F6:FD:CC:5F:CE:4C:DB:90:A8
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f1:e7:8d:aa:e5:84:79:59:81:b0:44:c9:6f:63:0c:e1:ae:
ee:79:49:09:e7:8f:49:4a:5b:fa:6d:ed:64:59:37:13:f5:7b:
c8:dd:85:61:3f:7c:67:70:43:7b:2b:21:6d:65:a1:56:f0:8e:
51:7d:8c:f0:db:97:c2:f8:72:c7:96:66:c6:05:04:6d:49:76:
b8:60:73:b2:92:b9:8c:83:04:02:62:3e:94:91:6c:cd:4a:c9:
e1:88:48:39:85:66:e0:4c:3d:89:c0:90:5b:ae:78:1c:e7:d6:
a1:49:fc:25:80:50:e2:a3:1b:3a:cf:99:5c:70:ff:b5:c7:5c:
1e:62:3e:f0:95:c6:2c:06:33:fb:22:90:9e:d1:d7:2e:6b:90:
74:6b:0e:ce:f5:2f:f3:e8:aa:64:9d:76:47:1d:12:71:ac:4f:
28:12:ad:32:c7:58:d2:b4:51:1e:e5:53:69:50:8a:37:d3:93:
b9:14:71:9d:3f:31:b7:91:fe:9a:1c:99:ac:21:60:f5:b0:2e:
36:16:43:78:f8:f1:ff:6c:a2:69:05:24:c7:56:a1:7c:19:fa:
c7:9b:09:38:0d:46:d3:26:ef:f5:7b:0b:ca:2f:ee:ec:cf:93:
a7:ef:ad:b6:20:6e:e0:21:f9:a8:c1:54:f8:b7:43:2a:e4:27:
e2:a8:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:48:42 2025 by rpki-client