Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: 40hYbrJpsKEzaGVBein/rk03u72pMvKb2hkKmJFOF0s=
Subject key identifier: 2E:12:64:78:88:47:DD:1F:DF:94:D9:F5:93:4A:83:4A:03:60:8F:98
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 0196BF6F4E1C801CD3F1C094E264FD4A2AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 09EE
Signing time: Sun 11 May 2025 13:01:04 +0000
Manifest this update: Sun 11 May 2025 13:01:04 +0000
Manifest next update: Mon 12 May 2025 13:01:04 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: mfKi5W6M7hRy5GB1VSM5LS6Vy8UKnF04M4mLqim01mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:4e:1c:80:1c:d3:f1:c0:94:e2:64:fd:4a:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: May 11 13:01:04 2025 GMT
Not After : May 12 13:01:04 2025 GMT
Subject: CN=2e1264788847dd1fdf94d9f5934a834a03608f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:71:28:7d:6f:cf:4f:cc:f1:f9:50:cd:39:
6c:26:d4:d3:1a:35:d9:e7:6c:44:15:e5:24:18:ef:
d6:55:38:fa:a2:8b:28:9c:db:eb:a1:44:60:30:a5:
4f:2b:27:52:86:36:7a:fd:bc:b6:42:5b:3e:1e:b6:
b9:4a:e6:15:4a:8c:18:a4:87:8d:7d:e1:ce:a8:48:
f3:c5:9e:17:e9:af:0e:60:2b:86:aa:16:a9:77:90:
7b:77:96:65:bd:47:06:6b:47:00:03:5e:63:d3:b7:
0f:15:df:b9:38:66:f7:5e:75:cb:e0:6f:c8:03:2f:
51:df:e4:87:5c:58:56:e7:fd:bb:0b:12:71:01:31:
b0:9d:02:d7:2a:cf:77:5f:35:88:b4:de:68:bd:48:
f3:a3:3b:d8:62:96:e9:a2:61:af:5e:d0:5d:2b:5a:
31:e6:2b:c0:21:6e:8e:00:8e:fd:3f:0d:9e:8a:dc:
30:33:9f:ef:5a:ff:48:cc:31:69:4a:17:cf:df:cb:
61:62:9a:00:ab:a3:11:80:0e:0a:55:2a:28:32:ea:
fd:22:f8:22:a5:ed:fe:03:3a:31:0b:3b:5c:8d:fc:
8e:ec:fb:47:c7:a3:e1:a4:57:a3:f2:eb:31:54:66:
20:78:83:be:ed:4f:89:c6:4f:dd:80:f6:88:d6:0b:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:12:64:78:88:47:DD:1F:DF:94:D9:F5:93:4A:83:4A:03:60:8F:98
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:10:b2:aa:c3:03:58:20:29:b6:6f:2b:c2:bd:fc:8c:f6:50:
f8:c3:d6:7a:d1:f3:bd:8a:4d:89:80:47:5f:bc:72:8c:ad:16:
f7:70:33:bb:6f:39:de:f5:53:1f:29:b1:0c:65:f3:44:24:3c:
95:5b:07:ef:0c:17:df:5d:89:f1:b8:b5:0f:2d:9c:12:88:10:
b1:8e:f5:19:53:27:f8:51:77:71:13:7d:e8:6d:73:80:b6:60:
2b:04:07:58:38:3c:ef:43:19:59:b6:01:44:7d:1b:1d:bf:ca:
ae:cd:39:55:bc:88:32:b9:87:a4:25:84:fe:4a:ae:a4:e8:77:
cf:5a:5b:c1:43:ae:34:7d:eb:13:f2:10:46:1c:e7:0b:79:dd:
10:58:a1:48:8d:cf:51:7a:d7:8f:5a:43:83:38:5b:80:ef:00:
b6:e0:c8:0e:9e:4d:7d:d2:de:fb:2c:0d:5c:9c:98:65:d5:57:
29:af:3d:ad:b5:74:c3:7a:0e:cf:79:03:58:1c:65:5d:53:83:
b1:4f:bc:2e:a3:ce:bf:4b:19:9d:75:1c:0e:5f:16:29:97:ae:
7c:e3:2b:6e:43:dc:e6:ea:db:ce:dd:6a:7c:3b:9d:29:d6:d2:
2d:a4:9e:f0:11:41:27:9f:74:c2:dd:e4:e5:34:de:5c:7a:4d:
21:8e:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:12:40 2025 by rpki-client