Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: 3krOnr9pHBHSjkyYfBZOmS6hU3hhLpKXw/TPbU+XIw4=
Subject key identifier: 05:7F:38:1B:F7:4C:42:64:1A:9C:0A:D6:A0:6D:43:D0:4E:BB:56:83
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 0196C08174FF9F5347F0B362BAC795880ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 095B
Signing time: Sun 11 May 2025 18:00:31 +0000
Manifest this update: Sun 11 May 2025 18:00:31 +0000
Manifest next update: Mon 12 May 2025 18:00:31 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: pfSpCE87Sjskq4e32I6k7tNo/qF3UGVfM44DzZ33zpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:74:ff:9f:53:47:f0:b3:62:ba:c7:95:88:0a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: May 11 18:00:31 2025 GMT
Not After : May 12 18:00:31 2025 GMT
Subject: CN=057f381bf74c42641a9c0ad6a06d43d04ebb5683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:57:9b:01:f2:05:53:06:b4:d7:29:dd:b3:
a0:32:77:75:f1:55:25:13:0d:f9:24:74:92:00:5a:
c5:90:08:74:28:3f:04:31:2f:cb:41:02:c2:f2:0c:
e0:28:ed:cb:92:df:ee:28:d1:4c:b0:fa:30:5d:1e:
be:97:8a:fb:51:51:e7:1b:e5:ab:b4:9e:fe:ea:8f:
bf:64:88:8e:aa:09:50:32:18:40:62:9d:4d:65:fa:
89:9f:03:e9:b5:a8:ab:a5:0e:2f:79:4a:85:a6:df:
e3:ce:54:92:8d:68:29:6d:93:e5:4e:e0:7f:b1:06:
ac:5d:03:16:30:36:28:f0:65:d9:4c:13:9d:11:3c:
d0:c2:15:4b:26:d7:1b:ea:6f:bf:0f:55:47:35:98:
0e:33:8c:5b:58:1c:8c:d7:8a:55:9c:87:ac:3b:d5:
41:63:5c:ad:69:81:52:c6:d1:0a:61:d8:32:eb:dd:
a0:54:0d:1f:dd:13:09:8d:0a:de:41:eb:e5:60:3a:
b0:1d:c6:2a:c6:ff:27:90:19:00:21:f2:23:75:4d:
d7:37:cf:b4:db:91:81:49:5d:7e:9e:66:b6:cb:68:
b7:65:0a:e8:c6:33:a9:f4:a8:f4:76:cb:23:b3:32:
b6:91:af:df:4c:de:a5:bf:01:75:9a:6a:2b:fd:b9:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7F:38:1B:F7:4C:42:64:1A:9C:0A:D6:A0:6D:43:D0:4E:BB:56:83
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:04:59:f7:3e:ca:de:69:92:1a:f5:9b:4f:b4:4b:43:8f:aa:
50:0e:89:ce:bf:79:5f:68:ba:78:48:8b:ca:f3:0a:fe:8a:71:
b1:3e:fa:3f:a3:dd:86:5d:79:65:70:e3:a5:fe:77:a8:e9:6f:
4b:cd:52:a6:ca:95:b0:c0:22:15:aa:60:3b:f9:23:e7:b3:76:
e6:87:6a:f0:ec:fd:cf:07:ef:78:7c:54:f9:bf:72:71:37:19:
dd:4b:c2:3f:7e:f5:8e:d0:ba:97:5c:fa:d1:6d:85:0e:d2:a0:
b8:94:a8:f4:cc:67:46:57:70:af:65:d8:fb:37:1f:b2:b0:22:
1e:31:40:b9:a6:8e:ca:49:cc:06:ce:3b:b2:60:a3:e1:d1:0a:
5b:48:72:e0:46:a0:20:2b:4b:8c:de:d1:9c:b4:e7:77:29:eb:
b9:7d:c2:c1:0c:0f:89:13:11:b8:d3:e9:e4:b5:dd:d5:b9:09:
18:bf:a3:a5:84:2f:06:06:5a:4d:2d:d9:5f:ad:36:f5:7d:97:
1b:02:b2:b9:46:b4:3f:04:7c:db:3a:37:bf:91:a6:c7:07:9b:
5d:1d:d7:4b:05:34:33:f2:8f:b4:68:9e:45:e6:5c:93:e7:52:
d4:6c:2d:94:f7:35:e6:08:27:01:71:8b:3c:77:f7:d6:75:f9:
24:6c:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:08:42 2025 by rpki-client