Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: DfgnGRVmqZMXUXmBKU1uT4WHkMM2C3h3yR3SaMxFkks=
Subject key identifier: CF:1C:3E:EE:C4:F7:65:2E:DC:B2:7E:D0:B7:95:15:22:CE:55:92:3E
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 0196BC6DCAB8F40D985297B9C67B1C0346C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 0FE0
Signing time: Sat 10 May 2025 23:00:33 +0000
Manifest this update: Sat 10 May 2025 23:00:33 +0000
Manifest next update: Sun 11 May 2025 23:00:33 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: IWKfLWcQszc5JVzGiEIrIgOMZG1W7sm+3NYKS5B57fA=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ca:b8:f4:0d:98:52:97:b9:c6:7b:1c:03:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: May 10 23:00:33 2025 GMT
Not After : May 11 23:00:33 2025 GMT
Subject: CN=cf1c3eeec4f7652edcb27ed0b7951522ce55923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:0a:14:41:90:2b:0e:3f:e8:74:8e:67:0c:
58:c1:1c:77:18:5b:d1:2b:70:cf:89:26:1d:ff:94:
75:7d:98:04:bf:55:d7:8d:d9:56:1f:dd:b1:bc:19:
3e:fd:65:7b:cb:b9:19:e4:73:1e:b0:af:b8:fa:b2:
62:3c:d7:2b:6f:aa:e0:df:60:fb:91:5a:09:44:19:
21:45:fa:b3:c0:e6:5b:37:84:aa:26:39:21:21:80:
85:72:70:64:42:26:ef:29:6b:7e:db:cd:33:ae:c2:
c5:59:a5:26:3f:f7:87:b2:5d:4c:0b:06:d7:cc:4f:
34:02:e8:2f:52:54:38:07:0a:5d:0f:92:5d:e2:d9:
ac:eb:eb:9d:97:75:87:db:00:08:9d:20:36:d7:fb:
5f:05:dd:95:07:b8:fa:35:bc:30:58:aa:1a:32:de:
ec:10:f1:d4:40:f6:73:ae:60:f2:03:93:de:0c:1a:
21:6a:a9:04:a7:ad:b0:70:e3:26:1f:94:47:ea:4d:
06:3f:ac:c4:dc:e4:73:82:9b:2c:c7:fd:bd:c3:27:
57:67:82:e3:20:07:7f:d9:7a:5a:be:6d:81:3f:65:
c7:87:cb:93:ed:8e:c5:28:eb:f1:8f:d1:f7:2e:e4:
25:d4:2d:d6:dc:ff:18:0b:d6:3d:f6:30:cf:fb:5a:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1C:3E:EE:C4:F7:65:2E:DC:B2:7E:D0:B7:95:15:22:CE:55:92:3E
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:87:ca:0c:fc:6d:67:6a:f2:ed:00:1e:e9:2b:b0:9d:b3:
0c:a6:b9:31:54:60:79:69:a0:3b:a9:7d:3d:e3:2c:f7:22:98:
0d:a8:3d:7d:7c:7f:5b:ba:28:9e:a5:8d:b1:57:99:65:f4:0d:
e7:4e:14:b6:e1:95:63:d5:6e:ca:89:6f:33:f0:b1:df:04:03:
27:6d:c9:2e:02:60:91:87:46:b1:a7:04:6c:91:8a:28:1b:c9:
33:6b:69:5b:05:32:69:58:41:7b:00:4b:0e:05:2a:1f:25:0b:
e5:fd:1a:31:15:d3:37:6a:4f:e9:a8:86:c7:3f:23:4a:46:87:
5d:38:71:1a:c3:ed:14:0c:bb:4c:2c:01:37:34:d6:0c:f7:28:
49:f2:8f:7f:1a:e1:99:5d:43:0b:f1:d2:b9:77:2f:c9:e2:24:
46:0f:30:5b:70:39:1d:de:7f:e8:d9:a2:1f:b6:f1:c0:2f:0e:
2d:9f:a5:57:18:8f:0c:ca:c3:eb:20:29:74:eb:1c:78:57:47:
a6:0d:4d:12:ef:3c:b4:17:b1:e2:19:ed:47:b7:f4:95:63:da:
58:4b:41:7a:57:62:1d:8b:3c:51:79:d3:cd:9f:a3:24:93:a0:
81:2c:e8:ee:ca:40:0f:61:39:85:c2:96:ea:26:5d:4f:5b:92:
18:89:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:30:25 2025 by rpki-client