Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: LHHlB2h5mcoFvRl6xFl+a936+hXJfsKF1DapQzSZU40=
Subject key identifier: 1A:AD:60:9D:8E:64:A9:86:FE:81:17:DF:33:55:D0:BD:87:90:D1:A7
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0196A98BC754AF0A0EFBD51B614BF25657D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0D03
Signing time: Wed 07 May 2025 07:00:32 +0000
Manifest this update: Wed 07 May 2025 07:00:32 +0000
Manifest next update: Thu 08 May 2025 07:00:32 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: TVX3m2nnhAx1dylXF9oNp4Z8SEq46MyUn5lREVtumgg=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:c7:54:af:0a:0e:fb:d5:1b:61:4b:f2:56:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: May 7 07:00:32 2025 GMT
Not After : May 8 07:00:32 2025 GMT
Subject: CN=1aad609d8e64a986fe8117df3355d0bd8790d1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:b5:04:25:b2:d8:f6:8d:a2:10:e6:b0:ea:
85:ca:e6:e5:98:d0:83:c9:13:3d:cd:f8:df:b3:c6:
84:7b:06:46:c2:75:0b:22:c4:79:d6:14:6c:45:8b:
4a:dc:fc:57:6b:ab:08:ce:b4:d7:c3:d8:8b:6f:40:
10:0f:d3:d3:70:2e:95:13:4c:be:9c:5d:65:1b:e8:
d4:c6:d1:36:89:cc:83:76:4f:53:05:c1:61:3c:c2:
c3:51:70:59:6e:39:bf:36:52:ad:12:a0:52:5b:af:
b6:23:1e:9a:d8:6d:85:c7:49:48:b4:a2:cc:f7:d5:
4d:c7:73:d0:01:75:d2:32:78:4d:a4:ad:55:c6:35:
1e:4e:4c:3d:39:9a:0d:04:32:4f:42:4a:87:10:df:
dd:35:87:9e:76:3e:1d:19:40:9d:97:27:bb:2c:2a:
2e:42:80:c3:b7:b3:80:d1:d9:08:3f:cd:bf:ab:7c:
66:5e:a6:00:44:47:50:72:5a:b9:c5:3a:ef:e5:a9:
b2:4b:d9:99:f8:94:02:28:45:50:ac:4a:bf:7c:d5:
33:49:8c:0e:fb:0a:a6:b2:a9:ae:b1:ef:2b:a1:d8:
a8:4a:1b:7d:5a:aa:bb:18:b2:c1:96:cb:64:04:4f:
e1:be:86:e1:f1:4c:46:3b:51:57:e4:e3:bf:df:16:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:60:9D:8E:64:A9:86:FE:81:17:DF:33:55:D0:BD:87:90:D1:A7
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:1c:87:e0:2b:d5:b9:67:93:93:67:63:09:ad:c9:2f:ba:
ef:87:9a:58:cb:dc:8e:0e:f2:dd:44:7f:c1:77:65:d6:7e:2b:
7a:41:08:55:5d:19:12:ea:b3:4b:ff:08:0a:0d:6f:8f:10:ad:
65:ca:f5:57:be:2d:8e:e0:d6:44:98:99:e2:61:df:b9:05:13:
28:1c:c0:dd:4a:cf:a6:c0:ec:cc:3d:0e:5b:4d:78:ee:66:bf:
c4:ff:67:1a:1a:ef:f3:a6:ac:b6:c2:d3:88:f5:1e:5a:35:79:
e1:29:35:6f:15:a1:9a:cf:3b:56:ef:b3:37:fd:4f:2a:0b:7b:
43:a2:fe:bb:44:59:5d:88:e5:42:7a:c9:c8:90:6e:29:ee:ba:
e2:34:b5:81:d9:32:80:1f:7a:b9:cd:1f:fe:bd:79:29:c8:25:
85:29:08:3a:54:3a:ed:cf:f1:36:f9:16:b3:58:60:06:49:d2:
ed:75:c1:14:97:47:d5:8f:09:c1:b0:d2:07:b2:a1:32:f3:7f:
03:55:1d:7a:5b:fe:a1:ae:7b:e2:4f:6d:70:a0:e6:79:d0:7b:
0a:a1:b5:21:1d:0d:d5:cd:04:cd:9a:1f:da:6f:d2:b6:6e:7a:
b5:c5:70:43:54:ed:83:e0:81:58:2c:31:09:7b:e5:ba:c4:df:
19:f2:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:18:37 2025 by rpki-client