Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: 6kmTt1vXUEaE1HlE2UN2jKoHj/vmqo3/oCL8dQR1D5A=
Subject key identifier: C0:EF:66:CA:05:FF:C9:DC:CF:41:88:63:62:D9:69:81:FC:27:7B:67
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 01969F3F64FAEDC0C2C0CC4C1C852F52FC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 0F7E
Signing time: Mon 05 May 2025 07:00:53 +0000
Manifest this update: Mon 05 May 2025 07:00:53 +0000
Manifest next update: Tue 06 May 2025 07:00:53 +0000
Files and hashes: 1: Lirq-zsF2DJ9HSd8FBwZm-dq_PM.roa (hash: DEsCxQ0UWNIneJAQeHuxPuouMfS+o3gP/21W0HHwfiM=)
2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: DF4dChOFizbHV9wCvBIFVnHWmutN3ZTKAG1r4Ex+Ihk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:64:fa:ed:c0:c2:c0:cc:4c:1c:85:2f:52:fc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: May 5 07:00:53 2025 GMT
Not After : May 6 07:00:53 2025 GMT
Subject: CN=c0ef66ca05ffc9dccf41886362d96981fc277b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:18:45:18:9c:21:22:7c:6a:3e:87:4d:2a:
a7:e1:51:35:3d:46:5e:5a:7f:73:a3:6f:8e:a9:72:
a3:4f:ee:a0:cb:ae:c5:b2:4a:76:fd:47:04:29:cb:
86:f3:3f:1e:29:13:38:20:99:95:fc:f3:e0:8a:27:
97:82:27:6e:af:9b:e3:e1:ba:e8:91:6c:49:a1:f7:
51:f8:72:25:96:f0:65:78:63:f1:cd:00:07:ae:ea:
c0:64:b3:89:24:b4:cd:c3:3c:06:21:a7:55:7d:ff:
e1:8a:72:73:6b:9c:8f:23:fe:3f:dd:d3:85:d5:c0:
9b:70:28:38:ca:58:e5:f5:7f:d7:04:ae:f4:3b:68:
0a:81:e9:f3:a5:8d:52:00:9a:9f:9a:a3:bf:04:74:
35:56:44:fe:b0:e6:38:af:22:b3:ca:1c:39:f1:83:
69:94:26:97:9e:92:f6:ec:d2:24:f5:a3:dc:eb:ce:
62:ee:c8:fd:a2:d9:fc:fd:01:81:b3:90:51:80:c4:
73:76:4e:fc:36:13:69:90:27:e2:20:32:8b:bd:d7:
25:1c:c3:35:18:d7:22:d8:33:a3:e8:9f:74:f6:f3:
c8:32:4c:dc:59:3a:f0:00:5c:ad:54:dc:c2:03:9d:
b3:28:d5:8b:44:db:86:bc:5b:1e:da:c0:43:4b:89:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:66:CA:05:FF:C9:DC:CF:41:88:63:62:D9:69:81:FC:27:7B:67
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:16:9d:9d:be:9d:ce:7e:d3:8e:7b:9c:31:79:ad:48:ff:f0:
e8:53:4e:33:10:1e:9d:31:4d:8c:91:eb:ee:02:c4:b6:54:43:
15:5b:1d:b1:ae:6e:f3:6a:0b:19:ae:20:d5:b2:13:dd:f2:79:
da:ec:62:f3:b4:73:84:5c:d3:58:04:fd:9c:6e:a2:de:89:a5:
91:9d:c4:ef:bf:79:8f:3c:da:ee:de:59:56:ce:07:7d:9c:ba:
2a:f8:9f:ce:3c:6c:28:ff:75:81:31:75:e6:a7:4c:da:1c:db:
bb:34:3e:3b:b9:d3:9f:bd:eb:6e:6e:8b:d4:9d:c7:4f:af:2b:
75:9c:7d:47:d1:fe:3d:56:d8:0d:60:91:76:cc:ff:a6:42:b9:
4f:6e:1d:34:37:7b:22:b4:50:8e:7a:60:0b:92:15:bc:09:2a:
6b:f3:2b:9f:dd:0f:6b:2a:a1:3a:8b:97:3d:d0:9a:42:61:40:
1d:b8:ed:9d:04:bc:b3:e9:60:4d:ef:5b:fa:06:c2:40:d5:51:
9e:22:cd:a6:a4:f6:79:7d:05:4b:cd:9f:31:d6:0f:32:58:4c:
63:2f:f9:f8:3e:9c:b3:15:4e:84:ba:a9:a5:18:63:d0:0b:5d:
71:bb:06:ca:e8:8e:a0:85:73:fe:62:95:fe:00:f3:61:29:06:
1d:e3:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:40:59 2025 by rpki-client