Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: OjZMCfmS/AY0kHDum1VcMWmWLtZP5MP43G/E+0CpcaQ=
Subject key identifier: 9F:4B:70:5A:3B:C1:3F:22:AE:15:95:C7:A7:05:71:01:BB:6D:E8:E7
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 0196B521C1D9AB24040F00D5DD93185AEB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 13:00:10 +0000
Manifest this update: Fri 09 May 2025 13:00:10 +0000
Manifest next update: Sat 10 May 2025 13:00:10 +0000
Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: zubg5RjeFzBalXz61dm6SRkTv94s8bdlhTuiV4oxSPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:21:c1:d9:ab:24:04:0f:00:d5:dd:93:18:5a:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: May 9 13:00:10 2025 GMT
Not After : May 10 13:00:10 2025 GMT
Subject: CN=9f4b705a3bc13f22ae1595c7a7057101bb6de8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:75:32:cc:b4:9e:fb:1d:db:19:f9:a0:43:
1b:86:77:c2:5d:ea:b9:fe:6e:cc:1d:87:73:3b:96:
98:04:94:32:ab:a9:cb:19:37:71:8a:93:9b:7c:5d:
4b:7e:5d:95:3b:5b:48:65:82:d0:5d:81:18:ed:2c:
56:a3:1a:a6:3e:d9:bb:39:41:a2:c0:13:13:63:58:
8a:78:72:1e:66:41:49:69:27:e9:b7:ff:5b:6d:bc:
8d:4f:d7:86:21:6e:89:81:d0:8a:b8:20:07:43:6f:
ce:b3:23:5f:49:a0:3e:fb:9a:80:27:58:cb:d8:1e:
e8:c2:2e:18:1b:b0:68:82:e9:db:11:f7:ab:52:1c:
76:a9:23:04:c5:f0:8d:be:d6:85:8d:2a:69:83:a8:
ff:7d:92:05:90:ab:7c:89:a7:13:5e:05:69:03:22:
cd:f5:fc:4e:09:e3:38:66:a7:9e:1f:0c:0c:d2:71:
54:19:9f:03:5d:62:65:18:83:57:79:b3:cc:bc:e4:
0c:11:28:26:f3:1e:74:bc:e4:e5:ee:d9:e2:51:10:
13:00:fe:23:8b:8d:90:97:63:a1:f1:1d:3c:76:5f:
d5:a7:13:86:fd:82:1c:50:84:41:cc:64:d2:d4:85:
50:f9:ea:9d:c7:99:17:11:3b:dc:b7:79:13:bf:b5:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:70:5A:3B:C1:3F:22:AE:15:95:C7:A7:05:71:01:BB:6D:E8:E7
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:ea:f3:80:41:7d:7d:54:9c:a7:9c:74:cb:e3:d2:3e:a9:
44:f7:53:bd:18:9b:9f:7f:50:e4:5f:b8:13:29:76:4c:0b:b7:
59:f9:6f:42:b6:78:ed:d3:21:31:8e:2b:cd:cf:d1:b6:0b:a2:
e1:05:e6:15:6c:3d:54:28:7a:94:85:6e:c9:89:42:9a:1a:1f:
97:d5:5f:af:39:05:17:3e:6c:42:b2:cb:e2:3b:75:49:04:c3:
60:5e:64:98:e5:67:db:0b:fb:f2:3f:e8:c6:1a:3a:d5:06:8c:
75:d6:65:e7:0c:69:7f:a2:20:55:67:02:db:11:3c:eb:91:d0:
69:7b:27:ec:7a:4c:e5:4f:bf:dc:f7:41:d2:4e:21:f2:7b:49:
83:dd:33:d1:ec:c8:3a:6a:31:c6:ce:d0:ec:2c:fc:45:75:a1:
2e:4d:70:b9:d3:9d:bf:89:cc:1d:c3:49:53:af:40:85:1e:c9:
c0:a8:8d:57:bf:fe:1c:ca:ed:e7:fb:b0:d0:4b:f9:ef:5b:66:
cd:90:72:6f:69:d7:e6:84:d5:5b:39:ea:0b:81:2a:3d:d4:ae:
18:16:3d:a9:80:11:27:c3:88:3b:6b:57:f0:04:58:d8:ef:b6:
59:b1:f2:63:ff:86:96:d3:19:09:96:c9:23:38:cf:01:39:29:
b0:0c:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:06:30 2025 by rpki-client