Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: 2+5jkxtMQX1Q4JhB3YbZdb7LRhPBPU0pL4d+jCqRltI=
Subject key identifier: 94:15:81:6C:7A:A8:39:10:4B:D2:B1:D3:3C:3F:DB:62:4C:0F:04:76
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 0196C94D7F284FC0ABCFB47BFCBB23AD3B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0CF0
Signing time: Tue 13 May 2025 11:00:21 +0000
Manifest this update: Tue 13 May 2025 11:00:21 +0000
Manifest next update: Wed 14 May 2025 11:00:21 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: WDL/MBhbZyIXd5A4s2Oi9OVBv7RPG2JUNPgW6ghMtjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:7f:28:4f:c0:ab:cf:b4:7b:fc:bb:23:ad:3b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: May 13 11:00:21 2025 GMT
Not After : May 14 11:00:21 2025 GMT
Subject: CN=9415816c7aa839104bd2b1d33c3fdb624c0f0476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:4f:1c:e7:32:d7:d7:2d:30:10:09:15:78:
e6:95:77:00:ac:6e:62:30:20:4c:da:ce:95:41:14:
64:8b:e8:88:09:4f:6e:14:a3:44:33:48:7d:df:31:
37:95:c9:ed:ab:bb:1d:81:04:63:f3:44:87:94:88:
80:13:c5:1d:56:ae:ae:91:b6:3f:eb:b9:5b:fe:42:
62:f5:a5:f5:12:54:0a:e3:cc:6f:3d:e1:3c:30:85:
6a:88:7e:90:c6:04:b9:ce:89:87:79:8b:82:e3:92:
c3:4b:a2:39:db:26:37:73:99:0b:fd:41:f9:3b:49:
70:ef:23:4f:e4:89:1a:5d:52:25:c9:d5:9d:a0:b3:
5b:e5:b8:c1:a1:2c:b0:39:27:84:68:e6:ee:be:bd:
7d:13:ee:53:a6:94:88:e2:b8:b3:de:80:46:3b:35:
3d:95:32:69:4d:5e:92:41:49:ee:bf:e4:b5:0b:80:
b3:28:73:c7:d8:77:4e:43:11:f2:1b:26:d7:64:eb:
25:f8:a5:cd:bd:c6:45:60:01:f4:a5:09:6c:1f:10:
d9:5f:b2:d7:f2:44:c4:9f:62:89:03:d5:57:99:cb:
38:21:60:f8:99:f1:91:05:31:64:e1:8b:47:80:0b:
bd:bc:4a:18:d1:c1:e0:29:3c:3e:a9:96:8a:47:65:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:81:6C:7A:A8:39:10:4B:D2:B1:D3:3C:3F:DB:62:4C:0F:04:76
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:68:bf:9e:9c:2d:79:56:aa:00:39:bb:89:a5:66:8f:81:d3:
4a:92:5d:7c:93:1b:57:ab:04:63:04:de:16:7d:d0:36:37:32:
af:2a:35:8e:02:4e:02:e5:88:96:6a:e3:cc:25:bc:67:22:8c:
56:61:ab:2f:d9:5a:f4:cf:a1:b5:3e:86:85:eb:39:97:10:ad:
32:f2:8b:61:f2:d1:b3:fe:81:21:4b:72:c8:87:01:ca:43:3e:
16:eb:5b:2b:63:47:fd:d5:4f:c1:4b:80:69:df:78:0b:78:d4:
10:9b:22:b6:7a:70:d4:fd:1c:fd:4a:ae:a6:65:00:57:e3:65:
b7:54:46:af:2b:d2:f7:43:e2:4c:36:4b:fa:79:b3:e7:54:2a:
44:89:bf:bf:be:bf:dc:b2:cd:09:c3:d7:1f:cf:12:4d:e0:cc:
52:51:db:04:0b:b4:7f:8b:b4:df:56:54:b4:d0:bd:93:be:7d:
fe:0d:36:93:e8:38:ee:58:2a:f2:d3:9b:98:da:ff:86:c2:a9:
a5:d8:89:d0:5e:10:20:96:63:da:8c:56:20:ff:bc:2a:52:b7:
9e:56:31:7b:5c:a7:b8:13:d6:6b:cf:7b:da:98:0e:b8:9d:6a:
06:4a:27:b1:91:b7:55:12:fb:f8:2e:16:8e:fe:8c:c2:a9:00:
17:43:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:47:12 2025 by rpki-client