Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: QHkW6iPxQFMJ0l0fSdp3bLM49uach5+QnXI4awqfSXY=
Subject key identifier: 9A:32:BF:5D:62:DE:26:EF:CF:C7:BF:25:51:35:AE:01:71:1E:54:5F
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 0196C04A78E883E1CAC1BFE27151F862F443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 17:00:28 +0000
Manifest this update: Sun 11 May 2025 17:00:28 +0000
Manifest next update: Mon 12 May 2025 17:00:28 +0000
Files and hashes: 1: BECHjRO1sNTrECspSOXRaHeMWRM.roa (hash: CUP2bSCGR2R7pQJIeBFSspVhJwtI4r06AoqaZ9LnrhQ=)
2: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: r+6DAibgY7jAuQmwciHOmttDhHrYOJ1W1YYTJXq0jsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:78:e8:83:e1:ca:c1:bf:e2:71:51:f8:62:f4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: May 11 17:00:28 2025 GMT
Not After : May 12 17:00:28 2025 GMT
Subject: CN=9a32bf5d62de26efcfc7bf255135ae01711e545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:60:cd:81:77:bf:b9:aa:47:7e:f9:13:a5:
56:86:d8:20:69:ec:df:d7:9a:59:93:4a:4c:39:11:
10:d4:60:e6:00:fe:62:46:1e:dc:18:3a:97:4c:1b:
f3:3b:fd:33:89:14:53:f4:17:a6:fc:1d:8a:a1:20:
8d:be:07:3a:14:09:60:63:d8:78:73:b2:80:dc:19:
e5:33:d5:44:77:4c:5b:14:e8:5b:37:32:b0:e4:fc:
a8:c2:d0:78:0e:62:26:28:a3:ab:00:7b:95:dd:77:
ff:e0:f0:1d:46:f0:b1:07:25:b8:cd:3d:1b:14:0b:
12:5b:3a:2e:cc:e7:a2:86:51:14:cf:59:68:72:6c:
2a:37:99:7b:78:13:95:72:bb:a3:ae:8f:fe:47:10:
a4:ac:2a:88:e8:35:5d:4f:5e:ba:80:75:6f:72:cb:
d3:2d:5d:7f:5d:eb:6c:b4:43:ed:3e:96:db:7d:03:
b7:23:19:88:c9:78:e8:53:18:7b:ea:dc:77:45:d4:
95:01:b6:5e:a7:4f:25:4e:03:f8:e6:ba:21:e1:16:
7b:0c:87:f0:4c:6c:23:2d:20:b7:84:c9:f8:1a:6e:
05:0b:91:fb:3c:90:02:6c:83:a7:30:71:4c:69:15:
49:50:55:66:66:72:16:98:18:41:23:13:f2:39:dc:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:BF:5D:62:DE:26:EF:CF:C7:BF:25:51:35:AE:01:71:1E:54:5F
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:32:67:e3:6d:70:c8:5c:5b:d7:d0:e2:b4:d2:51:69:a7:50:
42:c5:38:60:a6:10:83:77:28:1b:15:63:1a:81:20:bc:6d:94:
95:8c:4b:9b:14:85:69:5d:92:72:5e:77:fa:97:91:6d:7f:d8:
0f:f0:42:f9:09:44:f3:0d:3a:96:c7:9f:f4:2b:2f:46:39:ac:
5b:70:aa:ed:97:1c:d3:77:24:6d:83:c1:7d:6a:fb:00:13:91:
e2:6e:9d:e4:5b:f8:c3:58:2f:4f:c0:7c:fb:c6:88:79:55:b5:
af:d1:07:b8:17:83:d7:2c:e3:fc:7e:f9:d3:0c:f6:b6:d4:45:
27:2b:dd:25:2c:4b:66:cc:89:0a:6a:6a:c9:35:84:31:9b:b0:
36:f1:c3:f7:4e:46:b4:fa:29:e0:00:4c:b7:99:8d:2a:eb:4a:
84:91:11:00:f0:cc:ab:57:f9:32:fe:4e:be:6b:25:47:3e:ea:
96:af:d2:5d:2a:96:c1:21:df:f4:dd:22:7f:cc:f7:de:3b:b6:
a8:d1:bf:72:b4:1f:9c:92:d5:42:e0:c5:00:34:69:49:7e:57:
38:74:49:06:76:5f:b7:82:b6:a3:1a:dc:43:7c:3f:74:94:98:
a4:7a:0f:3a:7e:57:5b:2d:5e:b3:ea:52:d6:c1:a5:05:a9:cb:
69:a6:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:03:49 2025 by rpki-client