Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier: KbCMt7EaV/WN0iZDTDVjzUm60PVedcB9wG0yma5lEA0=
Subject key identifier: 25:C1:B5:7E:85:DF:39:66:4F:10:14:AD:AF:C7:AA:BE:6F:A0:E2:7E
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 0196A54103312CB02DB58828F0F7861A9F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 11:00:23 +0000
Manifest this update: Tue 06 May 2025 11:00:23 +0000
Manifest next update: Wed 07 May 2025 11:00:23 +0000
Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: 40EaeVw+jSuSwgq9C/nDEUx9mk3YmEqB1xOpYI6V6Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:03:31:2c:b0:2d:b5:88:28:f0:f7:86:1a:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: May 6 11:00:23 2025 GMT
Not After : May 7 11:00:23 2025 GMT
Subject: CN=25c1b57e85df39664f1014adafc7aabe6fa0e27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:4d:c7:6f:5c:cf:3c:7d:a7:ab:1b:02:90:
75:31:c6:c4:8b:e7:c2:02:a5:b6:7d:c0:b5:a1:d5:
9a:8f:87:94:95:23:58:2d:6d:ab:51:bf:1b:cd:12:
d4:4e:a9:95:d6:7e:68:7f:b4:e8:42:84:b2:75:d7:
a2:85:78:5e:02:8b:9e:11:2a:5a:6b:c4:03:e1:30:
40:64:41:6d:b8:f2:cc:cf:fa:ff:a7:aa:09:7d:28:
ff:6b:32:5c:80:1f:8b:e7:86:1d:df:88:81:62:1a:
c3:69:57:a6:4c:f5:b3:02:e4:3b:eb:c8:e0:55:4f:
0d:24:1f:76:73:7c:4c:27:c0:86:1c:af:9c:b1:c6:
bd:75:dd:d7:3c:8b:87:7f:22:f4:9c:56:20:d6:41:
66:3c:44:8c:07:0e:ac:76:0e:9f:2d:59:46:85:da:
11:9c:39:a6:00:4a:37:c8:0a:9e:11:9f:fd:d5:80:
4f:5a:a6:71:1b:9d:ac:11:df:f9:04:99:05:cd:6a:
cf:1f:09:f5:f4:00:37:4d:44:c7:23:1a:4a:11:c5:
8b:00:b1:f7:be:d2:30:71:c0:d1:07:a7:6b:1d:b6:
b9:a4:4d:1f:dd:d3:45:f1:81:f5:c6:a6:d0:92:cd:
0f:ed:b4:96:96:92:86:c8:13:3e:a3:c7:1a:6e:82:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C1:B5:7E:85:DF:39:66:4F:10:14:AD:AF:C7:AA:BE:6F:A0:E2:7E
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:85:57:f3:ac:14:1c:6d:fd:ac:b0:ee:b8:49:b1:11:44:04:
52:05:ec:e6:e4:01:a0:72:19:22:fa:01:b5:8c:3a:d1:84:ce:
91:24:60:18:89:24:f5:0a:cc:ef:8e:e8:b7:38:ee:0f:0d:c0:
1a:2f:73:c3:0f:af:09:fd:a4:3c:f3:84:15:2e:d6:a7:ea:0c:
71:23:6d:3a:ff:46:64:bb:57:e4:18:d6:32:f4:fc:5e:29:53:
eb:ce:60:be:53:3a:9c:fa:0a:43:7e:98:f8:64:a4:6b:7e:8f:
1b:6a:be:f8:43:65:ac:2a:7d:b1:fb:e0:bf:5d:25:bc:62:74:
45:0f:3c:57:24:3c:d6:f2:5f:85:20:22:bf:32:c5:f1:3e:a7:
79:a5:21:db:25:30:4c:c9:7f:6b:42:50:31:c9:9c:54:8a:d0:
4a:ee:60:93:52:ec:cb:f1:3c:46:fe:0a:46:02:2d:c4:46:6a:
78:48:5e:0f:9f:aa:5a:ec:aa:8a:07:cd:3c:f6:dd:b9:1c:1d:
7d:8f:2b:57:c3:c3:0a:3c:a0:7c:3a:97:4b:65:d3:82:bf:d5:
52:9f:9d:94:2a:ea:6a:d4:fa:68:c7:74:5c:31:48:b2:d6:ee:
47:c7:43:58:78:3c:e3:06:36:a1:8a:ad:e0:57:95:b4:23:c9:
37:7b:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:19:48 2025 by rpki-client