Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: cllbHUE+r42izJypCu0vl8/YQqrrJWZeuhE8cqPh4NI=
Subject key identifier: 90:67:B8:73:D4:F4:37:81:8C:51:65:0F:8D:ED:53:D8:36:63:E9:43
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 0196D77784A7089C08F4141CB02C0B99CCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 1541
Signing time: Fri 16 May 2025 05:00:56 +0000
Manifest this update: Fri 16 May 2025 05:00:56 +0000
Manifest next update: Sat 17 May 2025 05:00:56 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: 9uiP4xW71A33lj6WkOrPdkgLthf8S/I6L7R6SznTBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:77:84:a7:08:9c:08:f4:14:1c:b0:2c:0b:99:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: May 16 05:00:56 2025 GMT
Not After : May 17 05:00:56 2025 GMT
Subject: CN=9067b873d4f437818c51650f8ded53d83663e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:61:d2:f7:9c:6c:01:a5:3c:72:cc:10:8f:
56:ea:1f:3b:da:3d:33:d5:89:6e:92:39:1d:6f:6e:
73:74:2f:ce:18:5e:a1:f9:5e:8a:de:d1:cc:e5:60:
cd:c1:01:4c:72:4d:91:33:4f:44:11:88:d0:09:5b:
be:f2:9c:20:be:00:63:12:60:fd:d8:8e:0e:cb:47:
cd:2f:17:b0:fc:05:5d:11:ca:33:5c:f4:9d:0a:92:
96:cd:1d:20:a5:89:d2:d3:63:cf:be:d6:3d:5b:fa:
c8:27:46:6c:3e:cb:c2:62:68:d9:44:0e:ad:d5:a2:
2a:d7:3a:4e:dd:e3:1f:61:2c:ca:b2:4a:62:0e:8d:
77:39:52:49:ce:ff:0f:3f:84:f1:4e:91:f5:fd:d6:
5b:99:9f:9d:80:66:d2:c2:b4:84:3c:b4:4c:e6:93:
36:9c:2b:79:fa:ad:3e:05:53:de:8a:e3:a8:28:83:
e6:59:f7:f5:22:9b:2f:9d:50:84:42:66:6b:fb:08:
0f:53:a3:7a:70:9d:28:11:dd:e9:55:b0:a1:1d:c6:
de:c2:89:73:8e:bf:e0:89:db:88:22:1f:76:d4:88:
6d:1c:82:1c:a6:f1:23:f7:48:00:ee:31:2b:76:df:
1b:bb:63:a7:fa:7e:b8:55:9f:47:19:45:00:5e:af:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:B8:73:D4:F4:37:81:8C:51:65:0F:8D:ED:53:D8:36:63:E9:43
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d4:53:eb:b6:50:7e:19:93:ca:b7:49:91:aa:5b:8b:dd:28:
9c:79:1b:ef:88:a6:03:61:6c:d3:03:1e:05:e1:53:ec:1a:49:
92:9d:d4:df:e6:ab:80:17:8b:e3:57:d0:75:5a:4e:fe:f6:9e:
84:84:cd:99:51:9c:5a:5c:ba:ce:f6:24:f8:fb:0f:67:11:ef:
11:83:ad:f1:b7:56:f1:50:9f:c9:79:46:55:e0:38:fc:29:eb:
08:08:0e:65:96:8b:cc:76:3d:c4:54:64:a5:35:b8:dd:97:f3:
e2:5f:2e:fb:3e:ca:7c:3a:a3:75:c0:51:1f:2c:d9:86:00:86:
ef:10:31:ca:8d:12:6c:fc:e0:e9:45:7b:a6:5f:48:4c:a2:97:
bd:66:b3:0d:60:0e:71:4c:74:d2:8d:2a:a8:64:69:16:93:be:
b7:c3:d4:48:1a:a7:6f:7f:e3:e8:7a:06:46:e9:b6:d8:32:16:
28:d0:3a:71:bc:ef:e6:1d:68:6c:73:95:7c:c4:da:9e:ec:59:
27:ec:c0:0d:71:32:93:c2:94:08:99:a8:7e:f9:45:e3:05:06:
8a:8b:23:28:28:d3:fd:51:1b:f7:9e:a5:97:c2:85:94:14:6e:
b6:43:a8:01:1d:14:f4:45:6e:52:11:61:dd:e4:82:c4:4b:76:
23:4b:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:14:33 2025 by rpki-client