Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: D34z4954LFC/zaOe9wgZwW9Yz+0Naq1TJXCDUoRNA9g=
Subject key identifier: 29:B5:D4:9C:35:70:67:B2:32:DF:6B:71:C9:15:7D:E3:3B:5D:B9:D2
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0196B3D90AFC04A9B8BF168B770D9D0A14A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 10ED
Signing time: Fri 09 May 2025 07:01:07 +0000
Manifest this update: Fri 09 May 2025 07:01:07 +0000
Manifest next update: Sat 10 May 2025 07:01:07 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: Oz87qdWctEkdzZTT+xnZ2Lz8oPLCjNGGrwpKTt6itrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:0a:fc:04:a9:b8:bf:16:8b:77:0d:9d:0a:14:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: May 9 07:01:07 2025 GMT
Not After : May 10 07:01:07 2025 GMT
Subject: CN=29b5d49c357067b232df6b71c9157de33b5db9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:13:08:8e:8b:4c:45:0f:09:b3:e6:e3:95:
94:b1:91:78:e7:76:69:de:7b:08:a7:b8:a7:6f:77:
8c:3e:cd:7c:bc:8c:d8:ba:0e:17:91:c4:78:dc:ca:
4d:20:5f:92:a4:bc:47:d3:e4:d3:41:af:69:78:48:
88:ee:2d:e5:9d:ef:a6:38:43:9b:23:4e:ef:30:95:
4b:02:9e:38:ba:9f:6c:f1:2c:e1:28:c3:93:00:87:
45:be:be:b6:e7:41:64:17:78:8b:56:2d:9a:29:aa:
79:56:13:d6:43:b8:4f:64:c5:d9:e4:83:61:22:16:
cc:34:e1:ca:ed:5e:5f:d9:2f:7a:e3:98:5a:ee:ef:
e9:89:ac:8a:ae:f9:c6:ae:5e:ab:1a:a3:b0:c0:27:
fc:89:fc:0d:af:71:a7:87:ce:5b:6b:20:37:b5:d3:
32:3f:1c:04:22:3d:ad:97:95:b0:e0:de:38:17:79:
ba:bf:80:bb:a3:a8:5a:8c:c6:ef:72:75:ec:62:e2:
fd:f4:79:54:78:48:74:c4:a5:99:d4:72:4a:e1:47:
65:30:42:68:85:ed:78:a8:d7:7a:34:57:cb:0f:83:
1e:4c:48:f3:cf:15:4d:7f:6e:f1:7f:82:fa:8e:a1:
e4:22:5e:64:12:86:7e:4c:55:62:23:02:e2:d5:06:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:D4:9C:35:70:67:B2:32:DF:6B:71:C9:15:7D:E3:3B:5D:B9:D2
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:b8:69:eb:ce:5a:10:8b:7a:4b:fd:7d:cf:b1:48:e0:ce:
e2:10:f7:b3:23:59:16:db:0a:0a:f6:a4:4c:a4:1f:dc:d3:42:
20:95:45:82:f4:cb:a0:e9:1f:58:c7:bc:72:6a:a9:e2:76:e3:
df:2d:3a:3d:16:40:a2:ac:b9:fe:ec:87:53:4a:ac:97:fb:79:
76:c3:d1:2c:93:34:5c:1b:40:e5:ee:04:48:2d:74:c3:17:f2:
d9:49:0f:2f:0c:83:f2:41:f2:76:e6:e4:2a:b2:25:e9:89:ba:
19:a5:33:59:23:12:3d:ea:9f:6e:9b:a4:5c:88:1b:1c:52:b6:
f0:7d:7b:5b:f7:c1:c2:15:a6:df:fd:ee:65:9c:a4:7a:66:6c:
47:1d:1e:3d:7b:8c:fd:59:1a:06:60:93:71:06:a4:9c:c4:39:
f3:d3:8f:e7:9a:0b:4f:37:44:bc:de:9c:6b:21:f9:03:19:16:
7b:15:e9:5b:d3:56:7e:ce:ee:cd:c5:b5:d6:86:8d:69:cb:8b:
12:23:f3:47:18:62:32:9a:a8:44:f4:25:38:2b:52:86:f4:b1:
7e:55:45:63:10:6d:2a:6a:94:a9:65:eb:be:56:8e:e2:4b:1f:
ea:d0:f3:1f:43:31:75:0e:9f:fd:4d:f5:98:ac:e2:ea:89:ad:
c3:f6:42:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:04:23 2025 by rpki-client