Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: ce4USWjmfUwSzwP1SG/Fkic+jNq3CYsdaZwY85Qz1FE=
Subject key identifier: C7:F2:51:7E:3F:50:38:4C:85:98:47:30:09:1B:E3:0D:25:80:66:13
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0196C7967B647E032023F1F707280EF19B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 085B
Signing time: Tue 13 May 2025 03:00:49 +0000
Manifest this update: Tue 13 May 2025 03:00:49 +0000
Manifest next update: Wed 14 May 2025 03:00:49 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: kPGE7EBdhQH9Xr+n9amF6YY+NJ25yVGDnw45M7r3pGA=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:7b:64:7e:03:20:23:f1:f7:07:28:0e:f1:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: May 13 03:00:49 2025 GMT
Not After : May 14 03:00:49 2025 GMT
Subject: CN=c7f2517e3f50384c85984730091be30d25806613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:4e:89:59:7a:6a:ae:46:ad:69:59:ae:75:
5e:99:98:59:bf:18:c1:4e:d1:9d:d8:f6:02:1b:7c:
64:74:25:25:97:a5:95:17:94:d2:fd:28:4f:fd:61:
57:2d:13:8f:e8:e4:e6:53:69:b0:09:4e:24:64:91:
c6:e7:09:03:78:85:9e:cc:52:0f:21:8e:a1:a5:c4:
54:74:d5:a6:a9:08:05:26:84:2d:32:96:0a:7a:2e:
40:f5:ec:24:59:cb:e5:d7:8f:b9:c1:18:c2:d4:cd:
45:2f:7c:7a:16:f3:d4:ad:4c:27:13:a5:a5:46:5d:
d8:b9:aa:d8:9c:6e:b9:af:11:3f:2a:1a:b9:55:db:
50:5e:78:ba:20:48:92:f2:a0:9d:96:3a:be:18:56:
60:e8:2c:c3:08:74:78:db:e9:85:6f:4f:16:4c:8f:
4e:c7:b1:07:5b:57:43:19:1c:d3:e4:57:44:d6:dc:
6e:1f:ef:ae:f8:f4:8c:52:a3:64:3a:83:d5:4d:e3:
19:bd:4f:67:a3:aa:ab:01:bc:e9:b6:93:ae:4b:5f:
8b:de:02:0a:7e:ae:4e:f3:d1:0c:6d:05:e5:e0:91:
9d:e9:c3:b6:ae:b7:fa:f7:c7:ae:a6:41:e1:4b:cd:
27:58:cf:f1:f9:0f:ec:41:86:9a:0d:65:45:05:cd:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:51:7E:3F:50:38:4C:85:98:47:30:09:1B:E3:0D:25:80:66:13
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:e0:5e:78:f4:a6:6e:85:4d:b2:ff:05:17:ac:b9:b0:4d:
a4:2e:ee:87:8f:2e:47:8a:93:46:8d:5a:72:bb:52:4a:d5:18:
88:3c:ae:42:94:f6:2d:46:64:28:52:1f:4e:bc:c2:b2:35:cb:
7a:23:20:f1:23:ac:ea:cf:61:bc:20:99:b4:4a:8e:e0:c4:53:
72:6e:9f:52:db:5f:f9:e9:fb:05:d3:da:f9:41:79:9c:4b:5e:
3f:f3:07:31:ee:01:8b:66:58:c8:56:99:33:b0:b0:8c:06:17:
d8:8c:24:bf:d2:1c:a2:b3:cd:87:64:25:56:aa:8b:bc:6a:96:
b4:fe:bc:4f:3b:2c:e7:80:e0:6d:86:20:bc:d5:7e:51:29:ca:
0d:4a:b5:c2:c9:f5:a8:19:5d:60:98:6e:76:81:34:74:87:29:
23:5d:70:2b:30:b3:44:2a:7d:61:fa:2e:07:17:b9:bb:85:73:
d3:92:c6:31:63:27:ad:d1:99:3b:54:5f:c2:fd:95:a1:97:21:
67:cb:b5:f5:cb:b0:f3:d4:79:b5:05:1b:4f:78:5b:59:9a:fa:
74:30:60:38:26:21:b3:4e:35:ab:91:13:e3:8b:40:d5:d2:de:
4b:46:44:2f:a5:af:e9:e6:8f:c1:40:ed:eb:22:b6:2a:83:bb:
09:52:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:17:16 2025 by rpki-client