Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: Wigl39B/MIiDVm4uwolJjlXHe+JIxU+PtfGe1SR4z6Q=
Subject key identifier: 4E:49:91:F5:9A:6E:0B:44:ED:39:A0:72:DC:AC:10:CE:FE:F9:79:66
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0196C427CB51E2EB08862C858848260D0EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 11:01:04 +0000
Manifest this update: Mon 12 May 2025 11:01:04 +0000
Manifest next update: Tue 13 May 2025 11:01:04 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: qj85/+AJ4d3hjV8fVlcW2NqYuWgv9dubfojZ5ZyCuoE=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:cb:51:e2:eb:08:86:2c:85:88:48:26:0d:0e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: May 12 11:01:04 2025 GMT
Not After : May 13 11:01:04 2025 GMT
Subject: CN=4e4991f59a6e0b44ed39a072dcac10cefef97966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:1c:fa:49:d3:f3:90:c7:9a:06:df:f6:68:
c3:ec:7a:98:69:a8:e1:8d:64:9d:6d:5c:8e:46:b9:
cd:6d:7a:b0:a1:35:ec:55:1a:c0:2b:a7:cd:6a:23:
18:5c:9e:dc:13:e0:01:97:4f:8b:28:c8:d3:c3:e0:
62:35:7a:fc:49:43:29:db:5a:60:01:ea:7f:ad:7e:
79:43:dd:2f:92:06:93:38:5f:ff:9d:2d:4c:db:72:
6c:79:15:cd:08:5c:73:9a:cb:eb:21:8d:ee:46:f5:
5a:90:e1:8b:9e:6a:2f:af:7b:c1:ca:5f:09:17:df:
13:20:f9:30:7b:40:b0:3f:68:d2:2c:d7:6b:21:31:
40:ad:71:58:f9:ee:60:10:7e:d7:b7:82:83:f0:76:
6a:71:5f:5a:f0:b2:1e:44:df:24:f6:26:ae:92:3b:
72:a2:45:08:15:9d:84:33:88:a2:8d:0e:25:de:56:
17:03:f8:a7:6a:8b:f5:e2:f2:96:76:f3:de:5e:70:
c4:38:a4:c3:87:3b:b3:53:f8:0a:51:ed:3c:ce:8a:
da:82:9e:4c:a8:34:18:41:c2:4f:29:f9:73:6f:8f:
12:f4:d4:aa:b0:19:6a:83:b6:bc:1d:aa:67:0d:bb:
6f:5f:fa:20:fd:df:99:d2:65:68:dd:4e:9d:3a:42:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:91:F5:9A:6E:0B:44:ED:39:A0:72:DC:AC:10:CE:FE:F9:79:66
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:1d:08:89:70:91:d7:bc:96:46:f0:ec:f2:cc:eb:e7:da:
b6:78:1e:c7:ba:18:3e:07:88:7b:b4:7b:16:13:f7:68:f7:d8:
e3:b1:98:86:a5:76:4c:74:97:a7:41:81:61:08:58:10:75:ec:
72:79:54:35:5d:72:28:96:3b:b1:15:e6:e7:0a:e4:d7:54:86:
84:0b:83:6a:f7:3d:ec:c3:39:27:ee:c6:9d:80:15:9c:ab:c0:
83:b7:74:e0:29:ae:c9:86:de:70:e2:37:45:b9:2e:dc:60:ec:
57:93:b9:7e:ce:9f:87:26:67:71:91:08:57:31:c5:50:65:68:
df:67:b5:ce:09:aa:48:e3:ca:6c:f5:b5:b3:f2:76:ab:c2:47:
b1:7b:c2:b9:8e:bd:40:c8:86:a1:6f:fa:96:f8:a5:0f:08:d9:
5b:bb:3d:6a:f3:94:1a:a9:49:72:fe:9a:95:9d:31:99:ae:f4:
66:44:81:d0:9e:e2:24:01:1d:24:54:de:ab:d8:5a:88:03:28:
d1:e4:a1:85:63:89:66:30:50:33:79:b9:70:5f:a5:45:2e:d8:
df:22:41:73:b6:c0:e5:5b:a3:15:73:2a:59:7b:27:ba:b5:e7:
91:10:e1:0a:16:c0:f4:3f:8f:bf:65:7a:15:82:15:fa:fe:dd:
f5:4f:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:43:40 2025 by rpki-client