Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: DVJrzvGCe+vI5ozWOTrbEOQ4WU2UgfKmNCwDicRFJ60=
Subject key identifier: 46:B8:0F:CC:90:DC:64:0D:E7:16:08:32:9B:10:BF:68:D1:61:A6:7E
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 0196A0F6F773174428C27E99EDC21E4D6924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 15:01:01 +0000
Manifest this update: Mon 05 May 2025 15:01:01 +0000
Manifest next update: Tue 06 May 2025 15:01:01 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: 6dtgw/46Ej6kG2uruqnLrt5K10486Ocb3ZOAKy22nVE=)
2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:f7:73:17:44:28:c2:7e:99:ed:c2:1e:4d:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: May 5 15:01:01 2025 GMT
Not After : May 6 15:01:01 2025 GMT
Subject: CN=46b80fcc90dc640de71608329b10bf68d161a67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:7e:11:2d:8c:7b:b5:73:f4:31:7a:8b:fb:
41:5c:08:20:7f:74:40:4d:db:14:46:b1:a8:89:8d:
d6:de:aa:3a:57:77:a7:76:10:34:1f:64:77:de:c8:
fa:7b:99:29:5a:e0:e0:54:db:1b:69:f0:ac:fd:01:
62:ee:e7:0c:8e:d2:54:fb:04:48:6b:76:54:04:a6:
dd:20:ef:05:2c:a7:7d:09:a7:d8:8f:8c:84:6d:e2:
e2:e7:8a:6f:f7:83:57:47:95:a4:ea:21:62:5e:a3:
e4:c4:83:b0:a2:f4:7d:3d:2d:46:63:5b:7d:c7:6f:
bb:65:f7:a4:30:7b:f3:57:3e:a3:b9:c6:4c:90:ef:
19:84:e9:bd:b3:aa:5c:08:67:e6:d6:de:93:85:36:
27:47:d4:1b:e7:61:f7:4f:ef:be:18:04:03:37:f6:
9f:4e:10:cf:8b:65:aa:37:38:25:4c:d9:1f:79:8d:
4e:b5:25:47:34:a1:1d:c7:1d:68:7e:d0:cb:12:99:
a0:3c:54:6f:36:0d:71:d4:20:30:34:4b:2d:22:c7:
18:16:39:d3:fd:cf:19:56:92:40:d5:e4:f8:1c:75:
e2:f7:a2:30:61:fa:1e:f3:2d:3c:f5:25:ae:59:07:
de:67:45:e2:6b:a8:aa:8c:c5:bd:9c:f8:fa:aa:7d:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:0F:CC:90:DC:64:0D:E7:16:08:32:9B:10:BF:68:D1:61:A6:7E
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:df:82:d1:1a:6a:91:ba:f1:7f:9a:ed:d5:a8:6d:9a:a4:1f:
9e:94:85:04:ae:4a:82:8f:4b:b4:01:99:76:f5:e8:38:47:2f:
5c:04:a0:08:6f:a6:31:33:39:98:9e:ed:99:61:fe:d3:00:e2:
03:bf:50:61:9d:5b:6c:5a:20:b4:38:0a:15:48:72:43:b8:3c:
a4:6f:eb:b6:19:da:f3:ef:fd:e2:c6:e9:58:68:36:08:57:19:
6a:58:c2:c0:0c:03:6c:7a:27:b8:ce:22:e2:fb:69:14:9a:4e:
12:31:52:85:52:93:65:7a:2c:4b:97:2a:d4:c2:b2:1f:53:0f:
7f:cb:83:50:98:59:6d:45:c1:f5:ab:4e:0a:15:09:ec:8f:f8:
2a:02:53:88:9f:71:b8:b1:1d:70:73:31:ed:21:a4:8f:ac:5e:
6c:40:fc:4b:75:d3:77:21:39:a4:23:0d:64:92:f5:12:42:4a:
ae:27:1e:cb:fd:80:e7:c5:0e:66:01:67:87:01:1e:3c:44:40:
29:aa:4f:03:07:81:88:63:c2:63:68:00:89:ea:65:6b:ac:21:
86:97:46:30:15:9b:21:38:a0:49:62:09:cf:22:96:35:78:3e:
ea:7e:eb:8b:a2:3d:f4:d9:2e:dc:67:d3:ce:5e:7f:4a:8e:69:
dc:df:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:22 2025 by rpki-client