Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft (raw, json)
Hash identifier: FPHQEfbiWqNFN9mSvGTaR2P83K2hnruyMts+pqbX9Bo=
Subject key identifier: 51:48:1B:C1:01:E6:25:18:F9:D7:55:EF:A0:92:16:F5:5C:42:DC:47
Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Certificate serial: 0196C3F0953163D69155CE9EF4F5A9076CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
Manifest number: 1346
Signing time: Mon 12 May 2025 10:00:46 +0000
Manifest this update: Mon 12 May 2025 10:00:46 +0000
Manifest next update: Tue 13 May 2025 10:00:46 +0000
Files and hashes: 1: Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl (hash: UAvbFz8rocr4X+7HWJWsVTB4lCgDAz4AsMAWjnpCdYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:95:31:63:d6:91:55:ce:9e:f4:f5:a9:07:6c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d
Validity
Not Before: May 12 10:00:46 2025 GMT
Not After : May 13 10:00:46 2025 GMT
Subject: CN=51481bc101e62518f9d755efa09216f55c42dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:1c:fa:7a:9b:79:67:5a:3d:fe:d2:d2:07:
c4:4e:a6:30:8e:cd:d8:17:42:4c:70:88:2a:2c:82:
b6:87:44:89:d1:fa:78:7f:e1:81:13:a4:aa:8e:29:
00:6d:13:f8:5a:cf:07:01:c2:df:6c:e1:ff:c1:a9:
0c:e3:7d:c4:1a:62:59:08:2a:01:3d:9e:a8:7d:ca:
53:37:c7:11:53:a3:8b:3c:70:17:56:f6:70:7f:2e:
a9:38:4b:83:b3:83:b7:9a:42:e2:a7:2b:45:49:a5:
34:7c:ff:b1:73:73:03:ae:f7:3c:05:e6:6b:d2:f8:
a4:94:81:74:53:69:f7:09:03:ba:4c:ab:ae:ae:5a:
af:05:ce:4d:96:25:75:9e:4f:00:c6:0b:a1:9a:82:
85:9e:82:30:13:55:fd:fc:48:64:b3:4f:73:db:3e:
af:33:c2:56:1d:f1:31:1e:65:9e:a2:4b:69:14:08:
35:86:a2:d8:f7:e0:ac:98:b4:23:30:da:fd:10:9a:
c5:37:11:63:4e:93:91:72:f9:09:1c:99:32:c8:18:
32:8e:7e:42:ce:ec:ac:f0:b5:6e:67:8a:b1:d4:a9:
50:f3:fe:8b:5c:57:fc:c6:6f:78:33:6b:10:b6:a6:
a0:70:0c:7c:98:5d:69:66:87:33:a2:cc:4b:e0:22:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:1B:C1:01:E6:25:18:F9:D7:55:EF:A0:92:16:F5:5C:42:DC:47
X509v3 Authority Key Identifier:
keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:79:61:ee:85:12:f1:9c:d1:0c:8d:21:ae:d3:9b:ee:1c:16:
99:d5:24:ec:45:e1:a5:7d:5e:40:3f:52:a6:ad:07:13:7a:bb:
cb:ab:74:ef:e4:32:16:a2:3c:ac:c5:0f:f1:65:cb:6b:07:00:
27:9e:53:72:61:c3:56:8f:7f:aa:2b:2f:2a:fe:44:1d:b3:2f:
74:78:f3:53:0f:88:79:24:4d:ec:b2:f0:11:b1:79:ca:2b:0d:
aa:b9:03:b5:09:8d:33:d2:be:3c:bd:8b:27:88:d2:0a:1b:c0:
01:2f:be:10:13:d6:45:2b:cf:f0:bb:b6:a0:e9:af:67:77:be:
36:33:2c:d4:c3:c4:d0:c2:19:23:d8:80:b2:37:07:99:e9:a9:
9e:c3:0f:67:03:bb:ac:cd:0b:7c:8e:28:e5:58:3a:58:bb:a5:
b0:6a:64:ad:6b:4f:a4:a3:50:1a:ac:15:4b:73:77:80:97:43:
30:b1:40:5b:2b:dc:e2:ef:6c:88:f2:fd:3e:f8:d7:c8:fc:92:
b0:ea:5d:0f:14:25:26:28:95:67:fc:c7:9d:60:63:01:87:ad:
40:51:62:7e:4d:98:22:88:ce:bf:9e:cf:13:7a:83:5f:6e:b7:
26:77:a6:88:60:53:9c:b7:15:bb:b9:57:e1:c8:3b:d6:37:db:
62:3d:dd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:53:50 2025 by rpki-client