Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: MOCmWjvYYNjU98M4755i28tT6Y+xHLnwYHlMrEJiw+c=
Subject key identifier: 25:33:15:6E:DA:0C:6B:A2:05:7E:6D:DF:42:D9:0C:58:21:70:C9:BF
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 0196C4951D458619C4BD7896205AB4F1D197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 13:00:28 +0000
Manifest this update: Mon 12 May 2025 13:00:28 +0000
Manifest next update: Tue 13 May 2025 13:00:28 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: bCw49ujQjLU91zsCu+/QCN/jCrIP4aErfIDlanBwNgA=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:1d:45:86:19:c4:bd:78:96:20:5a:b4:f1:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: May 12 13:00:28 2025 GMT
Not After : May 13 13:00:28 2025 GMT
Subject: CN=2533156eda0c6ba2057e6ddf42d90c582170c9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:87:2d:94:0b:6c:01:36:4a:08:68:a8:bc:
39:d3:50:5c:19:d2:fb:d7:85:15:db:ef:9b:a4:60:
69:0b:26:4c:cb:87:7f:13:5f:5f:0f:d8:40:95:f8:
ef:e1:56:c3:6e:6e:7c:09:c6:84:b4:c9:a9:f8:e5:
d5:70:5d:24:bd:ef:2b:8a:51:84:75:e4:24:49:5a:
a8:b1:b2:3b:ba:94:b2:81:a9:44:d2:fb:2d:d8:3f:
97:93:fa:02:c3:aa:70:ed:27:61:e3:65:36:38:7b:
39:13:59:43:c2:b3:79:0a:01:40:13:01:47:e9:64:
ee:b1:6b:32:54:30:03:e8:98:9b:fb:30:77:5f:e1:
47:35:89:73:c9:20:03:87:3e:a7:ce:f4:6d:19:ef:
ec:6c:72:b9:63:cf:5b:93:b9:df:6c:83:06:36:b8:
4c:a6:13:50:2a:7b:fa:45:5a:f3:f8:d2:79:68:81:
aa:70:d8:7e:25:4d:da:5d:c5:c8:72:44:cb:2b:db:
be:3d:ae:6d:54:00:e7:2e:83:01:7f:25:f3:00:67:
88:94:95:4e:c4:4b:c4:bb:3c:ea:bb:9f:ee:7a:7c:
a5:4c:25:19:21:a5:28:11:4a:21:b5:e9:68:79:a0:
4d:63:b7:20:10:8a:34:e3:71:d8:6c:2f:0b:be:f4:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:33:15:6E:DA:0C:6B:A2:05:7E:6D:DF:42:D9:0C:58:21:70:C9:BF
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:59:02:d8:54:05:64:92:cd:18:7a:2a:55:84:36:9d:98:
a4:5d:8c:59:d1:01:c9:e4:3f:76:73:19:60:53:14:7c:9a:35:
0a:8b:35:a5:84:92:78:0c:b9:36:15:2d:bb:40:ad:ff:2e:b4:
db:8d:09:cf:f1:53:f1:fd:ca:9b:87:1b:5b:9c:e1:a4:10:1e:
86:e8:8c:be:06:bf:ee:bb:08:64:0d:ff:bd:53:1b:30:ed:91:
7b:bd:31:ef:db:dd:12:1b:c3:05:ea:c2:f1:ae:2a:36:c7:1d:
c2:7d:56:4f:d0:a6:62:81:8c:56:fe:d6:70:f6:10:5c:26:b1:
8f:f5:f5:f6:08:f6:43:a2:27:27:84:4a:aa:4b:10:70:c8:87:
ca:45:9f:35:16:bd:69:43:ca:5e:ea:25:61:e3:14:25:63:12:
88:a7:c3:08:84:d3:7f:02:45:9b:77:37:d8:b7:3a:ca:61:61:
f5:f9:11:d9:ea:84:98:77:ab:fa:70:41:bb:5f:ad:6a:ae:54:
3a:46:19:f8:c8:cf:44:61:38:94:14:71:5c:43:b6:3a:46:b4:
85:ba:20:23:14:31:fe:9c:20:63:a8:46:6c:22:d3:77:8f:97:
bc:49:14:97:34:10:20:b6:91:f6:e9:ee:c2:97:39:7a:c0:9a:
fb:83:dd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:28:34 2025 by rpki-client