Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: OLgcPgBC1zP+7d2bUwm+3xUuVxPALj8KN/iUevPmYFY=
Subject key identifier: F9:78:E8:A2:BF:64:94:A5:A0:CD:C8:62:3D:1D:31:00:12:32:0A:70
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 0196B558F868F14062FADFFA88E5DF03443D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 14:00:28 +0000
Manifest this update: Fri 09 May 2025 14:00:28 +0000
Manifest next update: Sat 10 May 2025 14:00:28 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: IumsmMYU38p9i5Ufuq0HiU8i15e7uX3fCsjU0bf3CIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:58:f8:68:f1:40:62:fa:df:fa:88:e5:df:03:44:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: May 9 14:00:28 2025 GMT
Not After : May 10 14:00:28 2025 GMT
Subject: CN=f978e8a2bf6494a5a0cdc8623d1d310012320a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:8e:c0:43:e4:79:94:dc:7c:31:ff:de:5e:
80:67:ce:8b:db:f1:10:6b:47:cf:b6:1f:b2:29:83:
36:57:b3:2b:a6:d2:ba:a4:de:2a:65:93:9c:c3:89:
6f:3e:16:37:79:e8:22:54:1b:11:35:66:9a:ac:c3:
98:71:d7:27:a6:eb:c7:12:ee:f9:8f:eb:52:09:3d:
c0:13:d9:a6:14:67:b1:a0:96:28:b7:f3:79:98:d1:
90:bb:7c:c2:b9:b8:4e:cd:db:0b:38:8e:82:01:04:
da:f1:ec:a9:c2:db:e8:a6:f8:0c:ba:fe:6d:89:bc:
90:83:39:2c:d4:6b:23:a5:5d:63:70:a5:82:e9:30:
8c:dc:d4:bc:45:43:8f:a0:af:e4:2e:16:72:d0:69:
60:ff:c3:a3:34:8b:29:d5:98:77:52:0d:3b:c5:2b:
a0:9a:f5:10:55:fc:43:91:b9:15:e2:71:6a:c0:b9:
4d:be:b5:95:44:36:2c:cf:ae:74:d3:22:26:a4:2e:
f8:5b:3f:af:3e:66:71:15:8e:e8:8f:d1:d0:27:71:
04:72:3c:45:08:61:e9:3c:d5:76:e2:96:53:42:17:
eb:13:3f:58:fd:4a:a0:53:4a:5b:69:0f:7c:12:70:
28:ed:f1:45:06:a5:f9:56:cb:b7:67:63:33:28:d5:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:E8:A2:BF:64:94:A5:A0:CD:C8:62:3D:1D:31:00:12:32:0A:70
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d9:d2:2b:ff:17:2c:ec:7f:28:a3:cf:8b:19:58:8c:bb:55:
25:68:e7:4b:f1:0e:e7:de:53:82:d0:98:eb:d8:93:dd:da:f4:
f1:33:34:62:73:ea:80:59:19:3d:15:6a:61:f8:59:52:9f:4b:
47:c6:d1:bf:f9:b9:16:c5:64:c8:7a:78:7d:e7:31:6e:82:b9:
8f:00:c5:ce:f5:45:36:13:53:4b:29:27:68:0c:27:da:49:50:
c9:ff:04:8f:72:87:bb:14:c4:a9:d4:ce:fd:52:5c:e0:80:59:
ff:4f:29:4b:83:5e:85:0c:51:79:2d:bb:cb:a0:51:6b:5f:10:
ae:2f:50:fc:58:d7:e9:b5:70:35:54:1f:f0:af:41:38:05:c9:
8d:3a:1a:27:64:13:eb:c2:b6:30:58:e0:94:28:12:d6:01:0d:
62:59:9a:62:b0:3a:71:d6:af:39:96:bd:87:50:be:a6:a7:df:
bd:a6:18:43:77:76:ff:a3:21:32:94:52:ea:c5:dc:25:9e:12:
0e:a8:7e:35:2f:71:f2:10:62:13:5b:d5:af:ca:74:89:87:71:
6a:48:1b:9f:25:5c:34:86:49:b8:06:1e:27:fa:6b:98:75:18:
cb:8e:15:f4:75:c4:13:68:36:d4:8b:72:b9:02:bb:6d:47:3d:
cb:e2:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:20:54 2025 by rpki-client