Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: 9T7QJRv83NBvBm+ECDGSYtK5u8uJbwpTFTsM8IspATU=
Subject key identifier: 2A:1F:0A:20:F5:EC:CD:87:13:FF:2E:20:05:9D:F6:02:6A:D8:D4:33
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 0196D74071DCEA516063684E6B5A993CA3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 070E
Signing time: Fri 16 May 2025 04:00:46 +0000
Manifest this update: Fri 16 May 2025 04:00:46 +0000
Manifest next update: Sat 17 May 2025 04:00:46 +0000
Files and hashes: 1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: REo7urjUveunBQboLADrzGoRRjjAQXu+smBAHGdWUmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:71:dc:ea:51:60:63:68:4e:6b:5a:99:3c:a3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: May 16 04:00:46 2025 GMT
Not After : May 17 04:00:46 2025 GMT
Subject: CN=2a1f0a20f5eccd8713ff2e20059df6026ad8d433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:db:51:c9:f2:30:72:99:66:db:10:66:82:
db:8c:1c:e7:5d:fb:b2:99:84:56:a9:fd:86:5b:02:
f9:c7:26:4d:ec:49:5f:5f:4f:ee:e2:29:0e:82:30:
d9:67:76:46:61:69:c9:81:e1:8a:23:63:ac:c2:8c:
e8:b7:a2:47:59:32:79:f1:fc:42:2e:34:af:bd:4f:
29:45:6e:1b:70:ac:fb:f6:92:d4:dd:bd:1f:81:2e:
f7:e8:74:8f:56:f3:26:2a:40:5b:31:94:f1:23:6c:
84:0c:e0:67:b8:6a:39:52:d9:84:e3:1b:4e:2a:ea:
7c:0f:69:2c:9f:8d:43:7a:84:d3:0f:ee:24:92:6d:
bd:d9:8a:1d:23:29:b0:3f:2f:c4:f3:77:88:aa:0d:
97:7a:87:66:fb:c4:bb:65:e5:f1:fb:ee:c5:e2:f8:
70:5e:10:c8:cf:af:63:8e:8c:ea:cb:ac:58:4a:1e:
b6:20:4a:ac:11:26:c8:8a:cf:17:9e:cf:1b:6e:65:
be:e4:b6:71:b5:09:30:0b:15:1f:7c:98:97:00:3d:
cb:c7:7d:e3:8e:7d:4c:89:eb:fb:33:f5:98:ce:a6:
86:80:50:37:d7:f7:49:a1:3d:0d:74:b2:fd:19:40:
88:9c:8e:92:a9:63:3e:28:47:d9:01:8e:61:47:58:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:0A:20:F5:EC:CD:87:13:FF:2E:20:05:9D:F6:02:6A:D8:D4:33
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:89:15:a0:39:53:75:5a:f9:87:04:9e:17:fb:d9:0b:80:
1f:54:69:80:2c:00:42:4a:26:7d:79:fb:43:30:d2:a7:2f:93:
80:99:f4:c2:62:23:6a:36:9d:2c:2a:47:5d:6b:09:1a:d6:5c:
71:1b:cd:2d:a4:bc:8a:32:e6:1d:0a:ba:f1:9e:0c:a6:b4:d0:
11:15:fe:c8:7e:ea:01:65:64:eb:b9:82:49:a4:ca:35:3b:a5:
30:3c:bc:87:d5:a0:72:63:1a:14:30:7a:20:69:68:bb:93:d6:
d4:0f:38:43:41:a3:1e:b6:d8:22:6f:14:9a:e1:46:d1:da:01:
46:f7:49:b2:b7:61:17:0b:d4:31:8a:ef:df:05:bc:e8:d3:c7:
21:ae:33:e3:77:2d:6a:47:1f:83:0a:ff:76:6d:7b:e0:53:00:
25:21:46:e9:9e:59:3f:84:58:fe:a4:82:40:4f:88:cc:9b:d2:
2f:de:ee:d2:1b:e0:4c:e9:09:00:19:ff:a7:47:f7:0c:79:2a:
61:7d:5c:ef:ea:79:ee:be:8e:a9:f1:cd:4b:fa:48:e8:ab:7d:
f8:b2:d0:44:fa:e5:8c:97:64:af:54:e8:4b:07:2e:f3:58:e7:
9b:82:72:3c:8e:d8:40:37:0c:a0:b1:32:76:1a:f1:96:c6:c5:
2d:10:ef:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 13:25:54 2025 by rpki-client