Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: aUWFzpYoeMXv6GRKykXwgd33sKt/tBpJze2GultEYfE=
Subject key identifier: 48:31:9F:DF:BF:A3:62:32:F1:7F:14:00:D6:5A:4D:01:60:1A:6E:85
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0196CA2947DF21591E25AFE5925468CD3D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1176
Signing time: Tue 13 May 2025 15:00:24 +0000
Manifest this update: Tue 13 May 2025 15:00:24 +0000
Manifest next update: Wed 14 May 2025 15:00:24 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: jhi+owyAIwkUE5RfU+uqLmId/0hvvf0MefI+cWGlWAU=)
2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:47:df:21:59:1e:25:af:e5:92:54:68:cd:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: May 13 15:00:24 2025 GMT
Not After : May 14 15:00:24 2025 GMT
Subject: CN=48319fdfbfa36232f17f1400d65a4d01601a6e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:8b:b2:cf:1e:90:df:3a:e7:64:14:73:5d:
b7:bd:d4:a0:86:55:4e:cb:cb:cc:ee:dc:17:63:a7:
9d:ae:96:05:4a:a8:8c:15:92:81:85:91:96:26:99:
e7:42:eb:ca:b3:51:6d:34:fe:c1:ff:17:cd:0b:98:
de:4c:65:64:41:a4:c7:ba:64:4a:a7:03:05:7e:71:
5b:8c:f2:c4:56:fb:10:35:41:4f:d6:2e:f5:c8:3a:
f5:b9:5f:fe:ca:b8:31:2a:dd:a0:2c:e7:3f:28:c2:
6b:d6:82:5b:8a:2c:8f:ed:dd:6b:0f:93:30:1a:ac:
9e:c9:39:71:46:7e:a0:54:6a:24:26:89:b3:3b:e4:
ca:29:4a:0b:7e:12:13:6b:a6:c4:ad:bd:1c:98:24:
21:cf:fd:ca:1a:a9:2b:d9:f3:28:82:a2:81:99:6e:
27:97:4c:13:08:99:76:49:f9:c7:37:60:25:fa:fc:
8c:0e:05:12:02:b1:1d:1c:c5:9e:36:ed:4d:7d:3b:
59:b8:0f:32:78:b9:3f:97:56:e9:af:64:cd:f3:46:
fc:25:08:d0:09:06:72:0c:c1:1c:0f:96:bd:11:0e:
10:6e:ca:6d:42:ae:31:95:e1:51:a2:87:69:a1:e5:
af:7b:f6:55:16:50:50:d3:30:20:e3:09:db:0b:9c:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:31:9F:DF:BF:A3:62:32:F1:7F:14:00:D6:5A:4D:01:60:1A:6E:85
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f3:ec:1c:2a:cf:73:24:d9:a2:14:6b:2f:6c:93:0f:11:60:
42:56:b9:41:3a:04:79:c9:6c:91:29:06:8d:c9:78:4c:b1:02:
b9:04:cc:26:41:94:8f:54:ec:dd:e9:09:97:b9:14:5e:53:d8:
b6:11:1f:79:5a:4d:98:22:a9:9b:2f:e3:5e:99:1b:22:6a:e1:
e8:b8:f1:64:7f:0f:73:79:0e:65:e0:1c:70:00:0d:7d:21:c0:
ee:ce:bc:2c:a0:91:b3:26:62:74:7e:be:47:d1:24:a0:57:15:
44:40:44:a0:0d:2f:66:c6:f3:1b:2f:da:e6:89:3d:1b:2d:a9:
f7:03:a7:38:7f:f7:5f:7e:26:38:7c:26:fd:5d:a8:e1:c4:55:
9f:b3:b8:49:47:53:fd:3d:dc:3c:a2:79:80:e2:07:d6:00:8c:
3c:36:09:a2:69:0a:3c:1e:25:0c:c9:1a:1a:23:c9:aa:84:ac:
b7:1c:0c:90:94:fe:30:5e:c6:46:4d:26:08:b0:d4:15:1d:f4:
fa:df:3d:a7:48:3c:8b:df:d8:c7:de:49:66:84:bb:82:28:85:
bd:30:1f:7a:ca:12:18:30:84:98:bb:f6:fa:04:d0:8d:29:f6:
06:d4:37:16:a3:ce:97:0a:0d:76:3a:43:5e:c7:e3:1a:d5:03:
9e:56:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:45:16 2025 by rpki-client