Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: 6btlJchFeI+WX3NWGucWH6j2Z8Rl3jD8d4IOhKATqWk=
Subject key identifier: 4D:92:D4:39:67:E6:01:46:F4:DA:CE:2D:C5:80:AE:F6:DE:0C:C5:87
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0196BEC9E4C21301201EFF24A5B6459B5F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 10:00:24 +0000
Manifest this update: Sun 11 May 2025 10:00:24 +0000
Manifest next update: Mon 12 May 2025 10:00:24 +0000
Files and hashes: 1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: H89Ik37A5177+R39z8LfDXniWpfv04crvMncWB1cYnc=)
3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:c9:e4:c2:13:01:20:1e:ff:24:a5:b6:45:9b:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: May 11 10:00:24 2025 GMT
Not After : May 12 10:00:24 2025 GMT
Subject: CN=4d92d43967e60146f4dace2dc580aef6de0cc587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:0f:b3:ec:6e:b7:91:14:67:2b:34:5d:ed:
a0:94:2c:26:a6:29:f6:49:53:53:9b:72:28:b0:4a:
61:bd:88:78:8d:82:25:e6:d2:63:3c:62:94:22:ee:
5e:09:c6:f7:cb:9e:d7:f0:a9:fc:1e:b2:a3:0f:bb:
b9:46:a8:18:fa:ef:09:7e:82:ea:f0:0f:b4:66:21:
90:6e:91:35:77:1a:d9:a8:2e:c0:96:59:ef:75:a5:
3b:5a:67:36:16:6c:63:24:ad:a7:a4:31:29:e2:dc:
fc:9c:d4:37:9f:a9:70:d0:f7:88:34:fa:c4:27:fc:
25:b8:b3:48:e5:e0:81:b6:22:3d:9b:eb:33:5f:1e:
53:16:04:ce:75:6e:53:f0:44:c7:6e:ee:b8:23:dd:
f0:ce:9c:56:cc:60:80:f3:a7:30:81:30:8b:e6:ba:
91:c0:47:50:18:41:19:5e:6f:4c:9b:02:cf:24:ae:
d9:97:1b:fc:29:6d:56:f9:95:40:17:1e:7c:34:87:
e6:98:e9:5f:82:30:bf:de:83:44:bb:3b:e0:80:31:
fa:6a:00:df:3e:9b:68:41:d5:c2:c4:7f:d9:a7:ae:
22:0e:4b:16:e5:91:3b:c0:6e:ca:41:6c:08:62:87:
6f:db:8e:19:09:54:43:a4:f6:a4:08:82:5e:ed:66:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:D4:39:67:E6:01:46:F4:DA:CE:2D:C5:80:AE:F6:DE:0C:C5:87
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1b:8d:03:3f:95:22:39:8d:46:5b:56:23:ec:04:44:56:7f:
cc:aa:e9:4c:6a:2e:30:9e:db:ad:f7:a9:3b:81:c0:a0:c5:80:
30:95:34:48:2f:a1:8a:f6:f0:ec:b5:bc:db:96:5e:9c:88:5c:
49:00:1c:a9:d6:97:df:94:6a:a5:51:bc:cd:19:e7:0b:06:6c:
df:0f:7b:ee:29:95:6a:70:64:ac:05:e0:b7:cd:83:b8:fc:b6:
8e:4e:18:cc:02:ce:56:43:3e:c8:f8:bd:06:7d:99:21:8c:48:
ed:c8:a9:89:3e:b7:af:4d:ca:cb:da:0c:1d:48:ce:97:4f:a3:
80:7e:ef:7c:5c:db:f5:8d:df:2e:35:94:88:62:7c:8c:86:d3:
11:b6:38:fc:fa:ef:91:cc:f2:3b:67:4a:1e:a0:4f:74:49:22:
08:d4:d5:12:e9:41:17:68:93:20:ef:a8:ec:1d:46:d4:d9:d8:
ae:45:d3:f1:02:f9:77:9f:97:71:fd:d5:ef:99:ed:76:5b:f1:
4d:69:2d:ab:17:dc:08:b4:bb:de:d0:a5:31:6e:3d:10:dc:f0:
51:d6:ee:3b:0d:51:ec:bf:15:3c:b1:8b:cc:f6:28:eb:75:77:
ae:ab:9a:2c:2b:b2:a7:92:96:c6:37:f9:38:07:bc:28:48:00:
6f:7e:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:23:21 2025 by rpki-client