
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
File: xYSSMuOUO_JXydyuqw75LTCkz60.mft (raw, json)
Hash identifier: xkgOm/Pc1UDylYOe4Bahb0WNA4YrrTzg5BM5qsg+3yk=
Subject key identifier: 29:05:9F:31:8A:D9:7E:7F:19:03:19:EE:96:74:34:44:DB:FE:35:FF
Authority key identifier: C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
Certificate issuer: /CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Certificate serial: 0196C570A1D59070CEBBAD96D2236311BA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
Manifest number: 04C7
Signing time: Mon 12 May 2025 17:00:15 +0000
Manifest this update: Mon 12 May 2025 17:00:15 +0000
Manifest next update: Tue 13 May 2025 17:00:15 +0000
Files and hashes: 1: Ax2MQ5Lb54u4442Uota7T1lDXqU.roa (hash: WtpxYyNpcHNC3G/vVwvJ9snmh6XrLgpD5cHVaG5LTa8=)
2: owZzsAnJSaU1iNYi45n_txLL9DY.roa (hash: mcBj/ytCvuFdEBFFZvoIyH3aWBfrAgmYQKhMFyspI2M=)
3: p5VeBb53f0-trs6dCEU052R8j6M.roa (hash: Xnzai9MWsx1KpCjRV19PKhOCyTafRZxI8PEiad1933g=)
4: xYSSMuOUO_JXydyuqw75LTCkz60.crl (hash: 463AQEVhLkuXA8wN2kRBBgSZCbtu9eXQat+6UQBtPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:a1:d5:90:70:ce:bb:ad:96:d2:23:63:11:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Validity
Not Before: May 12 17:00:15 2025 GMT
Not After : May 13 17:00:15 2025 GMT
Subject: CN=29059f318ad97e7f190319ee96743444dbfe35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:5a:9e:1d:6c:5a:13:f5:18:9a:81:0b:34:
5f:d1:38:0c:83:d7:53:58:60:19:c9:64:f9:dd:01:
bc:72:a7:25:83:24:8d:d5:b1:5b:b9:fa:37:38:32:
7f:8b:dd:f4:6e:2f:72:c1:26:49:ca:a6:1b:e0:f1:
2d:42:66:d5:18:34:c1:18:62:58:38:4b:e6:12:53:
89:cf:c2:b0:eb:37:73:44:d9:73:ce:5f:c8:a8:64:
60:1b:79:cb:ea:b0:36:e5:5b:84:c2:f7:74:c6:61:
27:bd:2a:66:ee:0d:55:2b:02:2b:b2:42:8c:06:79:
c4:0b:06:e5:bb:04:86:16:05:a9:a7:47:16:fe:7c:
81:b7:78:ff:69:c8:7e:df:a2:57:10:0b:a0:4b:30:
c4:63:6e:fe:59:76:b2:a6:9c:cf:4f:3f:05:6c:ca:
03:bd:68:b2:2d:95:fa:db:4e:bc:28:0b:80:a5:b0:
74:5f:35:0e:8b:ba:f4:f6:41:ec:cf:1f:12:85:64:
ad:5f:eb:39:03:23:6d:87:c6:ec:88:95:f9:fa:e9:
a4:ad:e1:cb:1c:71:4f:60:f2:4b:4f:d5:24:8f:69:
47:a3:fd:6c:0b:63:06:ed:73:a1:ca:0d:51:6d:1e:
ff:a0:21:47:9b:6e:1e:5b:d2:98:48:da:2f:5c:dc:
d0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:05:9F:31:8A:D9:7E:7F:19:03:19:EE:96:74:34:44:DB:FE:35:FF
X509v3 Authority Key Identifier:
keyid:C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:16:95:e2:82:49:ba:3d:ef:73:ff:1a:c8:8e:87:13:bd:26:
7a:ca:ed:56:75:d7:e1:67:83:d5:f7:ea:a0:f1:60:d0:cd:ce:
6d:e0:2b:2c:ce:8c:0e:33:e2:c7:de:fd:2f:8c:3b:0b:7b:f6:
89:de:b0:11:7d:dd:ef:3e:d9:1e:8e:f8:68:72:7b:31:4a:26:
38:6d:a4:1f:a7:43:56:7c:8b:67:f0:7d:5d:71:88:38:50:01:
67:08:b3:d1:fd:b0:45:e6:a8:48:08:22:6b:22:85:3a:c4:21:
31:a7:f7:34:a4:46:da:e9:c7:5d:ac:fd:0d:a6:7b:52:79:5e:
f7:f8:f6:bf:18:e2:0a:7c:0a:0d:89:95:33:99:f9:fa:d0:92:
00:e6:2f:4d:2e:e4:e8:90:2c:7d:6a:fc:71:d3:a8:b9:99:5f:
51:74:7a:ea:d0:85:fa:a3:2c:f3:a7:c8:ed:d9:db:1f:80:10:
b0:3f:a7:24:67:49:a9:a9:02:d1:3b:5e:c2:48:83:0d:c2:73:
be:a0:40:5e:95:05:d3:90:fd:15:b1:51:9e:e0:59:a2:b4:ea:
48:ac:06:47:be:44:e1:66:99:2e:90:1a:4b:9b:0f:a5:50:8a:
f3:d8:85:84:98:ad:e0:07:b6:12:ba:01:60:54:5b:dd:74:7f:
38:d4:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:48:33 2025 by rpki-client