Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: iBkQpEz0F8zcd+aG2fcdsS1gLF2u84RN6mkGPYT2b4A=
Subject key identifier: 40:12:65:97:72:E9:2F:69:A0:C2:41:B0:49:82:86:EE:32:2F:75:1E
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 01969ED0FA49D5E57F8F101F5A2D4F8FC539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 0914
Signing time: Mon 05 May 2025 05:00:17 +0000
Manifest this update: Mon 05 May 2025 05:00:17 +0000
Manifest next update: Tue 06 May 2025 05:00:17 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: BTx34+prRXQp2KKD0gl7xiwpwb0VO9wFFaaxCuST138=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:fa:49:d5:e5:7f:8f:10:1f:5a:2d:4f:8f:c5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: May 5 05:00:17 2025 GMT
Not After : May 6 05:00:17 2025 GMT
Subject: CN=4012659772e92f69a0c241b0498286ee322f751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:f7:e6:1b:ae:c9:6f:07:17:45:f5:be:4c:
68:9e:ed:76:77:4b:f4:d9:c1:ff:4a:8a:49:21:64:
31:8b:63:19:ec:60:16:7f:d7:e2:46:9b:5a:09:33:
b8:d8:08:cb:a3:f5:dd:a9:21:be:f2:01:41:50:85:
f2:c7:d2:8b:d2:4c:13:46:02:e0:ce:52:6a:ad:27:
bb:05:ee:c0:7e:4d:72:b1:57:15:42:c5:aa:96:ad:
22:14:fc:07:18:ce:08:5d:d0:fc:41:49:fb:c6:f8:
a9:26:0b:70:49:f7:da:cd:5c:84:ec:9f:e4:8e:ee:
f4:6e:3e:0c:32:b9:cd:dd:91:98:4d:a5:bc:72:eb:
86:f3:36:33:f4:d5:0f:1c:7f:74:17:c2:67:3a:5f:
d7:6d:1e:7d:b8:40:cc:50:49:82:25:1c:92:20:b5:
92:eb:29:7f:ab:f9:e2:5d:ba:30:e1:bb:0f:ff:46:
0f:60:1a:5f:87:59:57:8c:2e:ee:6c:45:a4:44:f2:
96:55:68:02:8c:44:e3:8f:3e:20:57:60:eb:44:f1:
37:47:82:44:8a:99:c3:e0:6a:e4:b5:5b:42:40:23:
b9:20:9d:47:0c:de:a3:aa:4d:87:c4:37:e9:4b:91:
64:01:58:9a:58:6a:e4:de:79:dc:3e:77:64:9e:c4:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:65:97:72:E9:2F:69:A0:C2:41:B0:49:82:86:EE:32:2F:75:1E
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d8:60:f4:ec:67:b3:3e:98:0e:d6:90:c7:5f:bc:e1:a6:e7:
39:25:21:be:50:b3:15:b7:8b:72:b9:4b:fe:49:c2:b1:6a:5a:
86:e5:01:ee:82:6c:f1:83:9e:dc:e0:83:2e:40:f5:4c:93:e9:
7c:69:3c:ff:fa:a9:03:a6:f4:5d:89:5b:8e:05:9a:54:fd:53:
52:a5:d1:62:56:f2:b0:ed:1c:83:38:1b:fa:01:21:26:18:9e:
ee:3b:c8:fb:52:1b:36:0e:4a:b4:12:26:e4:dc:1a:df:ea:8d:
e9:20:c2:2b:9c:ad:a5:aa:5e:29:bd:15:17:9e:a4:8a:03:2b:
f3:0f:56:01:67:f6:9c:b2:b9:f8:48:72:69:6f:ad:56:7a:ef:
3d:e3:2a:0a:fb:a5:60:6f:7b:98:ec:49:c2:70:56:79:61:d1:
b9:8d:c9:5b:be:e1:fc:34:9e:f7:5f:27:40:5b:c3:27:14:46:
4a:e4:38:bb:31:ae:1a:af:07:16:aa:f0:22:15:f9:44:8b:4e:
f3:d6:36:62:10:4a:8b:90:4a:63:c8:d7:c3:58:fd:4e:23:75:
48:dd:7a:8f:ee:78:2b:aa:6e:e2:c2:31:a9:62:63:7b:b5:04:
65:ec:47:26:6c:44:64:d1:40:0b:6d:8d:24:0e:56:88:10:bb:
ea:dd:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:27 2025 by rpki-client