Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: /ZCWjY14+D1keKnPeECdWeoE0OKKBAZayKzSY5FbYEo=
Subject key identifier: 9A:96:14:B6:7D:BE:5A:1C:B0:ED:4A:50:ED:52:8C:F3:A2:EF:FB:9E
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0196B10EA3AEBE55C6906731A60827164717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 139E
Signing time: Thu 08 May 2025 18:00:48 +0000
Manifest this update: Thu 08 May 2025 18:00:48 +0000
Manifest next update: Fri 09 May 2025 18:00:48 +0000
Files and hashes: 1: BhzUAWAmqJa_PA-L7yjY7FT9Af0.roa (hash: MUBzsjqvQyVXx3qdpZLrInMDFQqgnqT5UakUiyluBrA=)
2: HCKNxU6TCLkO6DVpZ3lA90mNVKU.roa (hash: Xh6VoAi/B2yrRWzytdRx21/eskMRRaoQHczwQgtUHG8=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: 5PHUlkU2mDphxS+GobCFI+Hgu/hzR3Upg8V/FwHWOlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:a3:ae:be:55:c6:90:67:31:a6:08:27:16:47:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: May 8 18:00:48 2025 GMT
Not After : May 9 18:00:48 2025 GMT
Subject: CN=9a9614b67dbe5a1cb0ed4a50ed528cf3a2effb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:c9:7f:21:dd:6e:22:6f:89:6f:da:2c:64:
5e:4d:6c:74:a7:10:c9:3e:7e:9e:b9:b7:8a:b5:d2:
2b:2c:b9:4f:1e:55:6b:4a:43:ba:17:4c:be:75:ee:
32:b6:74:c6:74:39:aa:1d:87:cc:72:cb:05:0a:9c:
07:62:c3:ca:8d:fe:57:03:48:38:ac:6b:cc:58:4d:
f5:d9:c1:e7:64:b6:c0:2b:bd:0a:1e:cc:8a:c5:97:
03:9d:46:21:17:0f:dc:06:b3:25:ab:0f:3b:93:b6:
ab:c2:67:9d:70:bd:bd:fe:5d:c0:28:de:e8:bf:9c:
5b:d7:91:79:36:5a:84:2d:b9:96:be:dc:a1:46:bf:
15:40:e0:76:16:46:6b:c8:99:b8:39:2f:d5:e9:1e:
b5:23:dd:d0:ea:61:d8:21:c0:64:de:eb:b1:0e:15:
b2:07:7b:3c:26:87:21:11:83:15:de:ab:07:1a:6d:
58:22:a9:8b:bb:e2:90:af:e5:da:54:f8:d5:d5:f2:
e7:4c:a0:bf:ef:82:cb:f2:25:7e:7e:3f:4b:af:5a:
82:b7:e0:39:1c:f0:7d:07:ad:77:96:f5:1a:ff:e0:
e0:eb:7e:25:58:d6:7b:ee:98:f1:98:23:a8:cf:33:
ca:ea:aa:d5:58:3e:c4:aa:7b:e8:6c:70:b3:43:45:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:14:B6:7D:BE:5A:1C:B0:ED:4A:50:ED:52:8C:F3:A2:EF:FB:9E
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6c:14:82:36:fd:de:a3:ca:7d:5d:85:37:21:e1:2b:85:18:
a9:24:5a:3b:66:a3:96:24:82:89:57:7d:16:61:d9:ff:61:0a:
81:08:e8:8f:fe:6f:51:98:16:b8:d5:34:5c:9e:a0:28:37:c0:
3d:7c:ce:11:39:57:73:81:31:ef:63:93:12:02:b9:07:0a:40:
7b:00:51:63:7f:5d:bf:6c:e1:da:bb:93:af:d6:c5:4c:70:06:
d3:a5:fd:09:2a:9e:cb:a4:76:a9:27:30:f0:cb:f9:02:39:e3:
7b:c6:d2:9b:c4:04:e4:7f:41:92:21:01:e6:8e:94:ba:c4:b9:
4d:aa:0a:10:46:9b:24:4b:9b:34:1b:a8:d5:82:37:bd:c6:43:
63:3b:8b:3e:1e:ec:3d:40:48:05:94:e8:4c:8d:25:78:7e:ab:
3a:b8:5e:06:7c:ef:c1:ed:1f:b9:53:8f:ff:a4:93:2d:8c:64:
03:2a:2f:0c:de:02:e9:01:ec:ce:cb:fa:1a:50:7d:57:35:a2:
0b:ad:82:16:73:eb:77:a5:e6:fa:af:4c:9e:ee:ee:b1:45:ae:
5f:ab:2d:15:72:b0:ae:2a:0e:77:de:de:ef:fe:e8:16:c4:04:
2d:a1:ef:f1:f2:d9:da:e2:cd:61:62:32:be:9c:ea:22:bb:80:
05:39:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:37:45 2025 by rpki-client