Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: JY+vXp6ddv09rPnpRom4icOH7Zdr8+20CSTXkbUYYpM=
Subject key identifier: F1:AC:90:70:BE:6F:A3:3A:68:2F:79:0F:5F:44:9F:DC:AC:0F:A8:B2
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 0196BC6DF7C59F8A33337CB61C50CD5A1D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 23:00:45 +0000
Manifest this update: Sat 10 May 2025 23:00:45 +0000
Manifest next update: Sun 11 May 2025 23:00:45 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: MX2JkIFuhrar2CWaAl99eEglkPi39bQYlxOzzfR9jtI=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:f7:c5:9f:8a:33:33:7c:b6:1c:50:cd:5a:1d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: May 10 23:00:45 2025 GMT
Not After : May 11 23:00:45 2025 GMT
Subject: CN=f1ac9070be6fa33a682f790f5f449fdcac0fa8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:d1:c7:0b:d0:b6:e6:d2:c6:b7:3b:9c:2a:
1c:9b:f2:ab:6f:3f:d8:92:c6:c5:0f:8a:10:b0:5c:
8c:d2:a3:8e:a2:5d:4c:0f:64:f5:04:4b:92:e6:f9:
7f:b3:d5:4f:86:87:a9:f2:0c:a5:73:53:c4:87:c1:
f9:d6:80:be:9d:03:b3:3e:2a:5a:0b:89:e8:1c:2a:
9e:30:2c:5a:c9:66:4b:98:9f:6e:d8:ea:91:d7:51:
0f:20:11:12:fd:76:e7:ad:20:7f:3f:5d:22:27:17:
91:4f:d2:03:40:d2:5f:8f:b8:c3:d7:11:7c:78:80:
10:7a:8e:10:93:31:74:42:5c:99:d4:39:c3:84:d6:
bc:0d:11:a6:48:f6:69:ca:fb:9f:98:7a:c7:21:eb:
4f:e6:e2:cb:d2:0c:ba:80:df:53:55:b3:6c:42:45:
48:98:5a:e9:ac:ec:50:c9:0c:f1:57:fa:52:dd:a7:
8c:cd:18:cc:d2:f9:b1:f9:f7:34:fd:fd:71:fe:6c:
30:99:d9:5f:b1:f2:40:24:70:cf:7b:f2:5e:09:57:
24:4e:67:09:24:37:75:3c:df:66:e2:75:1a:b6:68:
dc:68:e6:c8:67:b3:d9:59:19:3d:1e:b7:1f:d5:2e:
44:c9:b5:dd:2c:35:be:63:c2:74:00:69:93:23:e4:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:90:70:BE:6F:A3:3A:68:2F:79:0F:5F:44:9F:DC:AC:0F:A8:B2
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4f:1f:05:ac:d3:26:5c:1a:c5:61:f0:2d:fe:0e:34:e0:07:
c0:da:87:e6:29:41:82:cd:05:93:c9:73:fd:01:55:d6:80:ce:
63:b5:c3:58:e4:a1:2f:4e:29:19:3d:4d:6c:17:4f:9b:3a:1e:
de:75:ee:cf:27:2e:91:21:5e:41:b3:26:12:c8:be:ca:4f:38:
a3:c9:ed:b0:7a:c7:b4:c5:9a:85:17:f8:41:68:de:3f:25:5c:
ce:85:48:0b:13:47:22:bd:6e:d7:3c:b7:51:dd:ea:c2:fc:95:
43:f1:22:c3:99:bc:dc:d1:1f:23:3c:3b:84:60:1e:95:be:5b:
10:98:a9:75:ec:22:20:1e:1b:29:1f:c5:53:2c:79:96:ed:2e:
32:3f:84:0c:f4:52:e0:be:f9:af:f9:e2:d2:db:d3:b6:12:91:
67:32:d7:49:3d:32:7d:ff:a2:6b:02:37:4b:87:ce:96:50:dc:
6e:a8:cc:8d:5e:82:c9:73:95:7c:57:73:1b:bd:33:ba:52:b8:
60:aa:21:24:85:5b:6a:54:0f:fc:b2:b2:d5:c8:d9:79:3c:51:
c8:c8:a0:da:8e:b0:fe:ec:e5:60:b9:1b:b9:ce:a1:b2:5b:19:
63:25:23:3a:7c:21:e3:48:3a:c2:41:e9:de:52:94:14:d2:c7:
18:45:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:06:13 2025 by rpki-client