Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: 98qeDh2eQoAsZCdtMqxJPLOQ8SVbC9tFLaUhj081yw8=
Subject key identifier: 33:84:F1:4C:92:EE:4F:47:EB:B5:D5:C1:6B:BE:32:14:03:9D:86:7E
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 01969DF5C7C1E2A3EB72B718100976F5ED48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 125E
Signing time: Mon 05 May 2025 01:00:52 +0000
Manifest this update: Mon 05 May 2025 01:00:52 +0000
Manifest next update: Tue 06 May 2025 01:00:52 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: AutOY32mlYWvWae+eYMBczRhQatlVkKaaiXbxZBIAkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:c7:c1:e2:a3:eb:72:b7:18:10:09:76:f5:ed:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: May 5 01:00:52 2025 GMT
Not After : May 6 01:00:52 2025 GMT
Subject: CN=3384f14c92ee4f47ebb5d5c16bbe3214039d867e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:8b:3a:82:62:7f:ea:c4:03:28:40:92:8d:
54:09:f0:72:75:d3:d7:0d:c4:2e:42:c5:ea:ac:c5:
8b:41:d8:b9:9f:3d:f5:a3:0a:15:cc:12:f9:fd:6e:
c0:a6:8e:42:3a:e0:24:58:78:3e:15:79:73:a4:9c:
da:b5:1e:f0:fd:a9:c9:e2:97:8d:c8:1c:62:83:d5:
d7:6a:11:05:55:42:87:ac:c4:a9:02:a0:64:6d:09:
a5:c5:41:ef:f2:93:d9:db:14:4e:59:6f:0d:f0:0d:
95:df:1b:ec:96:31:72:06:43:d4:50:50:5c:98:07:
43:98:6c:b5:10:e7:3f:c2:3f:d6:6c:80:cc:c5:4d:
bc:b6:0b:5f:bf:1c:c7:93:bd:a7:b9:23:18:4d:fe:
a2:9f:e5:bb:54:69:c5:16:bc:ad:d1:49:1a:e9:bf:
68:a4:cb:99:fa:fe:d2:73:97:77:a8:41:60:30:9b:
b8:f2:95:6c:fc:2a:0d:0a:20:4a:78:ad:33:9f:76:
52:b5:51:58:be:28:1f:5c:43:d8:ee:8f:23:e0:07:
2d:2d:e5:2d:94:e3:76:1d:83:4d:80:91:f4:e5:b3:
93:c7:19:0c:c2:7a:20:52:d9:ad:e9:e9:85:cb:dd:
d1:00:7c:48:25:89:8a:22:6b:23:c9:c4:ef:d6:97:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:F1:4C:92:EE:4F:47:EB:B5:D5:C1:6B:BE:32:14:03:9D:86:7E
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2c:ff:4c:b9:c8:77:c0:2b:a0:c9:1b:3d:79:39:8e:4c:3e:
08:f2:71:81:1b:db:c9:58:f5:ef:ce:52:38:19:c1:6e:b0:3a:
f4:05:5b:62:93:44:01:5c:30:83:b4:8b:a2:f7:93:51:17:af:
18:1d:16:62:c0:47:5c:69:74:df:91:b0:b9:0a:e4:32:be:63:
09:3a:76:1f:76:ad:4e:0f:e5:73:0a:8f:0a:55:cf:6b:ef:36:
ba:79:45:a4:73:09:08:7f:59:51:bc:c1:c8:df:5f:3b:e6:f4:
70:7f:40:48:a3:90:0e:9c:5d:a6:1d:99:b9:c0:c0:e6:dc:de:
d3:06:1f:33:64:c1:d6:61:e1:c7:0b:3a:44:f9:76:ce:d1:35:
97:9c:d7:d7:49:be:c8:e2:53:0f:ac:a4:c4:84:5a:83:38:cf:
31:f3:0b:11:bc:e4:a0:52:c5:99:e0:b0:fa:2b:21:b5:e1:3a:
b1:d6:09:f0:85:b1:3a:d6:1d:79:b2:4c:fe:3e:d6:cb:d3:7a:
a4:27:27:dd:be:cd:0d:ec:3a:a4:e3:98:01:1e:31:fb:a9:e7:
8b:ab:78:9e:84:47:3d:c6:30:26:69:4a:a2:4c:a3:5a:8a:7a:
6a:61:bd:43:17:9a:29:58:56:f2:f4:2f:a2:1f:01:96:01:9c:
ed:98:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:12:45 2025 by rpki-client