Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: elV1VJiEJ7hA7jBn9O+SHHmEGOXpkerwvfQPH7NrjaM=
Subject key identifier: FC:E0:36:5A:98:4A:EA:5C:D0:03:55:BC:C2:F8:39:6D:20:22:FF:BD
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 0196D51AD629B2033C3BE1360EA73609728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: B0
Signing time: Thu 15 May 2025 18:00:27 +0000
Manifest this update: Thu 15 May 2025 18:00:27 +0000
Manifest next update: Fri 16 May 2025 18:00:27 +0000
Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: iZpiL7Tm0iZVSmtHy336e+qnui4VOi2YHWdldk1LrnE=)
2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1a:d6:29:b2:03:3c:3b:e1:36:0e:a7:36:09:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: May 15 18:00:27 2025 GMT
Not After : May 16 18:00:27 2025 GMT
Subject: CN=fce0365a984aea5cd00355bcc2f8396d2022ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:c7:fe:6c:2b:b6:aa:ed:a5:1c:db:ad:e7:
e4:91:3d:46:4f:68:19:68:06:6b:59:00:87:57:7f:
fb:6b:2d:e7:35:64:8e:7f:f5:81:f2:7e:f1:a4:5d:
8b:b2:67:d1:89:5c:b8:e0:49:61:d9:66:0b:44:64:
bf:61:60:28:ae:b4:89:ac:83:b9:9b:a1:b0:83:ef:
20:09:c1:ae:86:8f:6c:aa:e0:25:e3:69:82:83:ca:
ab:cd:38:00:c2:dd:7c:fc:17:5e:fe:48:bd:a9:1d:
51:72:3d:1f:37:0b:50:31:8a:1a:d8:dc:3d:bd:be:
ca:55:5f:93:c7:37:f6:1a:f4:e3:42:38:72:ab:60:
54:2e:3d:81:6f:9b:55:f9:55:90:83:cb:2f:3b:7b:
83:e2:c3:fc:3e:29:2a:96:c8:37:e3:3b:31:fb:c7:
db:91:e1:a8:f2:dc:ab:9c:66:ee:73:d6:62:b5:39:
4b:f8:76:70:9e:ab:5c:a3:88:d9:a9:a5:d9:b0:94:
5f:68:4e:4e:6a:d3:ef:2c:94:8b:a4:02:e0:90:7f:
3d:44:dc:14:d0:a1:7c:b7:03:30:3d:a6:d2:5f:68:
d8:65:ab:db:b2:ea:1d:68:9f:e3:23:1e:e6:ee:fd:
13:5b:78:32:1e:e1:83:8c:ea:31:67:c6:c6:37:a2:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:36:5A:98:4A:EA:5C:D0:03:55:BC:C2:F8:39:6D:20:22:FF:BD
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:b9:49:93:ac:12:96:f5:d5:b3:53:3a:e8:ea:22:03:d5:
5d:35:48:23:ee:11:6e:42:48:58:56:b0:df:6d:72:07:37:cd:
ae:31:52:be:d6:ca:fa:4e:0b:d1:e7:e9:52:12:e1:f2:7e:16:
dc:f7:18:b7:51:a3:04:8a:8f:14:c0:39:f1:7c:cc:6e:a8:d7:
4e:bd:83:0e:77:9f:fc:1e:bb:72:0d:92:c8:ec:3b:c3:07:25:
f1:ab:91:30:6b:7a:25:eb:ad:13:1d:f6:ad:e2:ec:43:27:f5:
ed:ad:fd:2d:b1:47:59:9b:57:c0:bf:59:ef:4d:19:61:09:21:
02:ff:7a:79:71:f2:24:d9:37:80:24:c3:8a:6f:18:f7:be:45:
a0:c9:00:50:fa:4e:35:60:0a:90:36:69:a6:e0:a8:99:b9:83:
1a:60:fa:e3:79:e9:3a:bd:89:b6:73:75:74:4e:a5:a2:85:d5:
a1:c5:7b:ef:b5:b7:17:4b:a7:10:26:8e:5c:3d:78:a1:64:29:
0f:2a:bd:f4:f8:ad:c6:09:60:23:b8:69:c7:9a:10:8f:d4:61:
6f:e8:b0:46:73:2e:3e:e2:36:44:7b:e3:1d:ce:a8:1f:77:e7:
2e:e2:86:f8:8f:cf:b6:8a:62:6d:f4:45:74:77:bd:78:98:6d:
9e:ec:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:15:07 2025 by rpki-client