Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json)
Hash identifier: niSbcO1FcVYvn21WkMqbzELo8RpZHJmSjVvTeo0BO8I=
Subject key identifier: 53:AA:8A:15:B7:B9:E9:5A:51:AE:DA:A0:CA:66:8E:A8:9D:82:8E:18
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 0196C5A7E4C2C1B1B358ADC1976E5B59344D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
Manifest number: 10E6
Signing time: Mon 12 May 2025 18:00:36 +0000
Manifest this update: Mon 12 May 2025 18:00:36 +0000
Manifest next update: Tue 13 May 2025 18:00:36 +0000
Files and hashes: 1: 1-H8zwtiCrpCtpPhtU8BmTU4NN8Y.roa (hash: HRd7vxIurfbLc/eN8InR+wycqakqAWrM7JwDvrxV96A=)
2: 56Vpsd34am-XgZxuiIBx5ciZnvo.roa (hash: LIsLriDuZ7qA8gRRNpqBGuQDOGGc08GwyrJJTUnjn+I=)
3: 5aDG7pCYyxrbZjMpOApNgbcaJRA.roa (hash: KH+Hd+jzAT9WyojO5NRfs95pebo6CEWEKzj7hDMANEM=)
4: 7ftLKyY8GdyqYg2SvE9C7LNTwYE.roa (hash: UspdVgWSjoUphhiKWwgCmpo3/T+PQruLgntr17tnZLI=)
5: 9HVDUJYL2A5ABfuJ1Hv-0cE1JdE.roa (hash: pi+ge/IvurZcgdtOnw6L7MyuhQVD1IzQ7GrQjJbNZf4=)
6: PoIdAsRHj_lyoBXzpjR49pFTfsI.roa (hash: tSDst5jBP0KkqvJ+KM2Moibp6droKIwwIwHkLMyazmM=)
7: RJmPIiHTRu2ZejdfSlAj6IdU6us.roa (hash: 7h/45UxkROh44H9OUOI/NiMHeRQHJxLpEBRuLX6IZ+w=)
8: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: iiq1J8aaZa/J8CanmCWC8NvppKo39FAypUna0Ct8D3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:e4:c2:c1:b1:b3:58:ad:c1:97:6e:5b:59:34:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: May 12 18:00:36 2025 GMT
Not After : May 13 18:00:36 2025 GMT
Subject: CN=53aa8a15b7b9e95a51aedaa0ca668ea89d828e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:e7:54:a5:b7:5e:bf:d3:51:64:c6:c1:d5:
da:b8:56:e4:14:f6:3c:78:b1:7a:94:52:76:85:c1:
f2:6f:ee:5c:2f:32:9b:0d:9c:14:cf:5d:36:af:f9:
38:51:57:5c:94:53:01:1b:28:9c:16:23:5d:41:7b:
da:36:b1:fe:ce:cd:d4:ba:70:e2:4e:62:99:a4:8f:
16:a1:d2:68:b4:8c:41:54:d7:ed:e0:01:a6:02:29:
42:ea:51:4e:54:88:2c:b7:c7:18:ab:2c:34:d3:58:
4d:84:41:a7:e8:08:46:32:63:3e:e6:ff:54:86:e4:
d7:91:2a:57:2d:6f:cc:28:09:f5:ab:c1:4b:7d:c7:
24:2b:77:86:f3:d2:02:57:99:92:85:47:b5:ea:00:
2e:8a:3d:b7:61:35:0d:50:1d:fa:2c:dc:4b:94:ab:
20:39:dc:53:7f:c2:f3:d4:ac:96:14:f8:6b:25:5a:
77:f0:a6:c2:12:5f:94:41:dd:09:91:1d:87:8f:4f:
97:a8:43:18:17:f3:ab:28:ac:93:1c:51:31:ea:7b:
45:0d:19:65:63:f5:44:84:a2:d5:c6:74:4e:e0:19:
b0:07:72:6f:2e:85:ad:19:5b:80:19:a7:0a:6f:cf:
b5:d5:3f:8b:0a:73:07:57:32:1c:ce:10:a1:85:d5:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:8A:15:B7:B9:E9:5A:51:AE:DA:A0:CA:66:8E:A8:9D:82:8E:18
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ae:00:c8:5e:b3:6b:64:2f:7b:c4:ec:d8:d0:94:be:dd:f2:
ec:af:2d:7c:ec:68:c8:7b:a0:43:7d:a6:6a:41:b7:59:e5:0e:
42:fc:eb:c7:81:41:6b:fe:20:ec:d9:48:1b:db:c1:52:61:10:
ec:dc:69:d2:f0:1b:b3:ec:0e:4b:9a:e5:ba:40:fb:41:98:f3:
1d:1e:37:34:ec:b8:d3:e1:24:d1:79:54:fd:ee:31:17:42:39:
56:75:13:ba:4a:eb:dd:ae:d7:9f:a7:0b:0c:47:f6:40:eb:f4:
52:01:ef:7e:1c:12:d5:81:3a:58:3a:44:09:41:a2:b1:ec:05:
11:63:44:41:36:22:6e:fa:20:6b:df:3b:2f:57:61:3c:42:4c:
67:76:22:49:c3:ca:b1:2e:33:88:ec:cd:7d:9f:9a:88:ae:bc:
83:2f:1f:17:36:1c:39:0c:f6:1d:98:f3:4b:8d:19:2b:c5:b7:
78:f0:a0:01:d5:0a:b2:6d:31:a3:8d:b4:e9:91:c8:8e:fd:e8:
da:4e:1b:fe:d4:b2:ef:81:fe:7d:41:56:0f:72:4c:72:b4:a1:
a7:6e:a1:e7:46:51:3c:2a:fe:c7:8a:5d:0b:d1:9e:8d:cc:4f:
6d:73:57:93:eb:5f:c8:4b:3f:bf:1e:8b:71:ce:dc:57:8d:88:
4b:c0:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:05:38 2025 by rpki-client