Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: YpiteqcVOcuCwTZmOgPR9QJErW9ukaOGxbG7XohM2+0=
Subject key identifier: 7D:17:73:55:06:91:92:02:6D:E1:2E:59:58:58:21:6B:E9:02:B0:A8
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 0196C1CAFA6AADC4C86CBA6B5E0919237522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 00:00:27 +0000
Manifest this update: Mon 12 May 2025 00:00:27 +0000
Manifest next update: Tue 13 May 2025 00:00:27 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: ijblOlvtjojwH1fzMtaBRwWlJaV/wV2qxOV4END495s=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:fa:6a:ad:c4:c8:6c:ba:6b:5e:09:19:23:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: May 12 00:00:27 2025 GMT
Not After : May 13 00:00:27 2025 GMT
Subject: CN=7d177355069192026de12e595858216be902b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:29:57:fa:b3:98:06:21:ca:c4:70:14:0b:
4d:c0:ee:88:10:89:7a:00:e0:70:d7:21:fd:2d:f9:
7a:9a:03:f3:e8:33:0a:7e:1e:bf:22:28:f2:a7:21:
40:f5:9c:20:fd:ab:a2:ce:09:8f:25:c5:1a:a5:1b:
d7:38:74:69:a6:2f:37:13:d4:2f:6c:02:ed:03:f1:
e6:e2:ef:fe:f7:30:72:6d:50:8a:c3:34:aa:63:f0:
80:5d:fe:37:46:90:ba:e4:b5:99:10:c5:60:d2:78:
85:d1:ab:4e:5d:6f:e1:12:48:7d:bb:03:4e:59:6c:
02:bf:04:99:cb:ce:fe:f5:b4:4f:c5:67:5b:f4:66:
53:b5:71:7b:30:a6:5c:1c:0c:10:dc:6c:90:b2:f1:
3d:4c:44:5e:d9:22:b4:58:94:80:d0:d2:3b:e1:de:
a5:26:6a:9c:cc:40:61:98:e7:7e:84:35:78:52:9f:
3a:59:29:e7:f6:d5:56:91:44:c7:32:f4:fa:ee:81:
29:de:7f:aa:47:78:65:56:95:dd:aa:5e:0e:de:c2:
e7:c8:26:ed:38:b3:19:fd:5a:c0:0b:be:ab:32:5a:
7a:15:d1:c0:e5:c5:29:13:39:97:ff:2f:ec:cc:60:
90:3b:54:88:47:ed:f0:06:f1:9e:99:be:c5:b3:db:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:17:73:55:06:91:92:02:6D:E1:2E:59:58:58:21:6B:E9:02:B0:A8
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f9:7f:05:f2:31:62:02:8c:53:96:7c:ce:b1:95:f6:41:76:
aa:ba:8e:1c:78:e8:af:e1:06:4a:ce:ee:81:33:f6:4a:f1:fa:
99:d3:34:0b:f6:5a:1a:29:ec:a3:67:26:b5:86:16:30:9c:f8:
f5:5d:e1:ff:47:d0:fd:c5:d8:fd:90:27:a0:22:96:97:e4:27:
1a:a0:29:96:24:e7:86:29:cc:0d:6c:af:a6:4f:65:20:cf:d3:
8b:5c:58:83:04:af:9b:86:63:8e:ba:7f:17:26:a6:19:45:72:
24:fd:c2:0c:00:84:dc:52:42:a3:87:1e:20:40:ad:60:e8:df:
5f:00:5f:fa:5f:01:59:d5:9a:63:d0:67:da:47:f1:9d:36:70:
1d:11:31:15:c4:bd:ab:6c:89:a9:aa:e3:f3:73:df:5a:7e:05:
57:af:25:8b:88:8e:23:6f:7d:ce:9c:53:b9:f3:9a:14:a3:b5:
64:b8:be:cf:a0:45:7d:04:c1:de:8e:2d:2c:8e:3c:8f:46:18:
74:9d:28:f9:0d:83:01:98:d6:07:ef:80:e2:24:d5:c7:c7:ca:
33:d7:67:97:10:22:68:2d:45:50:21:be:ff:da:94:ee:86:e3:
17:84:41:31:57:ec:ed:b7:53:35:84:60:26:2e:8b:f9:7a:ff:
89:47:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:43:08 2025 by rpki-client