Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
File: XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft (raw, json)
Hash identifier: +F9pFwkQZBeW517QPjmfEvoFMdGStiDB+9WO1r7Vjlc=
Subject key identifier: 9E:BD:FB:2D:E9:D4:2D:29:8A:20:44:F4:44:3E:50:98:78:68:99:EB
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 0196AF56A7DC1CC1412725D97948BE8918A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
Manifest number: 126D
Signing time: Thu 08 May 2025 10:00:13 +0000
Manifest this update: Thu 08 May 2025 10:00:13 +0000
Manifest next update: Fri 09 May 2025 10:00:13 +0000
Files and hashes: 1: 0vSFPoYxfJgGVZze9FXoh2RkpVA.roa (hash: ZmZ0S6349yqHsdfm9IChX49SmL/P7lxaKuGOii7tvuA=)
2: 9JM6FQ3JNcJAsurX_9l52alhS78.roa (hash: a7KiUg0rkGYES5Jq40C4im6HS+LxQ3+rKB9CYqBxCgY=)
3: XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl (hash: l+ndqcaVhrbbWxg+rGf5krsvIhvCfyFW2yiihKvwFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:a7:dc:1c:c1:41:27:25:d9:79:48:be:89:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: May 8 10:00:13 2025 GMT
Not After : May 9 10:00:13 2025 GMT
Subject: CN=9ebdfb2de9d42d298a2044f4443e5098786899eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:86:7d:34:27:83:ef:54:8b:6c:84:ab:d2:
12:34:3f:c1:30:15:e3:01:e6:9d:19:ed:bf:54:00:
68:dc:63:8b:cb:84:13:1d:28:1b:39:87:52:ee:77:
e4:ca:a9:19:76:bc:9e:7b:56:bd:2a:6b:97:65:2c:
fb:8b:9b:e6:d0:82:7c:c7:a8:d5:46:40:1b:19:69:
9d:a3:a2:16:13:c9:2c:89:2a:f2:0f:20:c2:04:dd:
44:21:c5:29:5e:d4:c3:7c:98:56:c4:22:ed:53:13:
02:ab:61:a0:80:3b:aa:24:6c:ff:d2:33:93:ac:a7:
93:f6:a3:c3:54:f9:d2:90:98:48:ab:9a:cc:62:df:
05:59:74:bb:7e:cc:69:14:c3:f4:45:1b:57:d4:c2:
8b:4f:97:9f:d4:84:9d:e7:a9:b7:ce:3f:35:80:8b:
ee:36:d2:fe:8a:40:7a:27:af:b4:42:43:c3:4f:93:
93:bd:30:e1:74:63:89:e3:62:72:c3:9b:48:85:ba:
c7:43:d4:b5:bf:70:64:11:bf:ff:46:1f:3c:4c:7e:
7c:03:3e:c6:f6:b1:39:2a:15:35:9f:d9:33:a1:39:
0a:81:4a:45:37:4a:83:65:e9:22:be:94:e7:52:cc:
08:72:8b:e8:1d:30:06:c5:73:a1:13:97:c2:1a:23:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:FB:2D:E9:D4:2D:29:8A:20:44:F4:44:3E:50:98:78:68:99:EB
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:08:dd:9e:5b:8a:50:d6:98:78:45:f5:dc:0b:59:ab:10:
2d:82:9c:04:69:26:bd:5b:3f:14:68:20:e0:1a:73:6f:10:fc:
4e:8b:8e:07:71:e0:61:fd:3f:64:fe:12:5d:db:c1:78:b5:1f:
ee:ef:f0:a3:1e:66:9b:0d:79:7e:ea:6f:2d:3d:87:2f:28:d9:
96:8f:b8:f1:6c:ec:8d:e0:83:c8:e3:ac:4b:70:6c:64:b6:dc:
15:e1:6f:f4:5b:fb:42:95:1f:62:59:d7:95:9c:85:d1:f5:f0:
36:30:8e:3e:7e:58:be:76:bc:30:11:28:4d:83:db:0e:4f:b1:
9c:2c:a9:f0:b0:b6:8e:96:fd:9f:21:10:bb:d2:5f:65:e3:f2:
42:a3:2e:19:b9:29:dd:3c:6f:20:0c:39:b0:e6:ff:18:99:ca:
7a:80:11:70:a0:41:13:ab:54:54:17:78:86:af:ea:ce:2d:ef:
20:81:51:a0:da:b1:7d:b3:9a:44:cb:d9:a0:f5:86:c0:07:43:
ca:96:92:db:64:b5:d2:a1:41:a1:ff:50:ea:bb:a0:98:c2:e6:
b2:b1:4a:08:54:ee:c6:19:55:e1:fd:ce:21:f3:b1:2e:60:66:
22:70:2a:f6:e1:63:46:44:53:96:d6:7f:6f:f3:c8:56:d2:5f:
c5:a7:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:00:50 2025 by rpki-client