Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: pfcBLqNTx58vnPrqsbty08qfURYWUTds4xbxToqQGoQ=
Subject key identifier: 05:19:27:1D:85:5D:C1:30:94:99:A1:9F:76:54:FE:DB:90:A1:7C:6C
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 0196BA7F5A2F92553C7559451ABCDAB6B11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 0433
Signing time: Sat 10 May 2025 14:00:30 +0000
Manifest this update: Sat 10 May 2025 14:00:30 +0000
Manifest next update: Sun 11 May 2025 14:00:30 +0000
Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: 9g1hKXLlBjjkKVO0jZrbLJyAR0EJW7Mxc3CXwfBChLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:5a:2f:92:55:3c:75:59:45:1a:bc:da:b6:b1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: May 10 14:00:30 2025 GMT
Not After : May 11 14:00:30 2025 GMT
Subject: CN=0519271d855dc1309499a19f7654fedb90a17c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:89:71:ad:84:72:da:aa:5d:df:d9:80:31:6c:
8d:ae:89:48:a5:98:94:97:34:59:a2:49:4f:64:9c:
10:bc:dd:42:f5:a8:ae:26:19:81:fa:b7:fa:c8:00:
3b:e2:b3:36:66:0e:52:03:75:77:78:08:a4:63:41:
f0:da:8c:8c:25:17:6d:3a:4f:8e:be:a6:ad:26:00:
e8:cb:19:15:f3:bf:92:07:a6:9b:cf:2c:dc:b0:53:
ce:71:0c:87:09:d8:5c:1f:af:37:8d:20:15:ec:e6:
36:8b:9b:d1:82:cc:fd:8c:19:94:62:1b:f0:64:1d:
9b:4a:f3:eb:5a:e4:d9:ed:65:f7:f9:7d:79:65:80:
cb:e3:93:4b:5f:01:14:84:9d:b5:f2:12:aa:c5:d5:
d2:45:c2:80:d1:99:de:2b:b8:9c:ed:b5:0c:6e:1d:
7e:3e:08:26:13:9e:cb:ba:41:25:ec:ee:80:33:bf:
8a:d2:49:6b:84:c7:5e:81:a6:6a:87:4b:34:a5:ee:
3d:9e:6a:ab:3b:c4:75:1f:f7:65:af:b0:9d:a2:5e:
a4:f2:6f:e7:86:62:ef:82:df:0f:ed:c7:46:f4:db:
98:6b:bf:25:76:b4:3d:0c:22:d4:2a:c3:61:2e:65:
3b:bd:7a:7a:d9:a5:61:8b:88:dc:8f:b2:a9:5d:e6:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:19:27:1D:85:5D:C1:30:94:99:A1:9F:76:54:FE:DB:90:A1:7C:6C
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:19:91:84:51:9a:f1:c9:b9:b0:01:ab:6b:cc:8a:20:58:
2c:99:a6:14:c9:b5:ba:e0:b9:85:75:90:fe:56:ca:78:1f:12:
ef:6d:44:ba:f6:47:fd:89:bf:40:82:94:8e:1e:14:cc:20:43:
e5:2c:db:5c:1b:d8:e5:d8:de:82:56:25:56:58:b7:57:62:47:
09:e7:bd:21:58:3b:b5:93:a0:e1:86:4a:5b:15:a1:8f:3d:3d:
b6:5d:9d:2d:b4:7c:20:cd:82:f1:5b:73:22:1a:24:7a:94:57:
2d:81:49:4e:6b:0e:fc:72:69:e4:f7:e1:3b:1c:b5:c9:7e:8f:
b4:f0:e0:8e:a5:83:e4:29:1e:b4:e2:19:8c:c6:f2:0f:4b:22:
cf:88:77:97:b5:a4:96:0e:5d:2f:72:87:3b:cd:e6:ec:46:88:
49:e8:dd:0e:96:bc:91:86:8d:c3:45:f5:1a:f3:3a:32:ab:81:
d0:78:bc:47:c2:e9:06:6b:87:d2:39:0f:7f:9b:08:cc:b8:bb:
7c:43:4a:c0:52:9c:fd:dc:5e:60:48:1d:6d:74:54:5c:11:bc:
f1:45:31:5a:39:82:c2:e9:2e:31:f6:47:4d:fd:4b:f1:ac:2b:
ce:08:5b:51:c7:31:98:6c:e4:c9:cb:46:44:25:d5:44:0a:c2:
91:e1:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:35:11 2025 by rpki-client