Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: uRl6afwlnjnSpElKVFXQZqVG2yVUp7xl8ArWbtzUdYY=
Subject key identifier: B9:FE:97:A3:49:AC:2D:1D:7E:2D:F3:6D:5C:74:ED:C9:18:34:DA:AC
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 0196C615F57C8C8942E36CACC5A129EEF3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 20:00:49 +0000
Manifest this update: Mon 12 May 2025 20:00:49 +0000
Manifest next update: Tue 13 May 2025 20:00:49 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: Ih4WpHWZcrZk8hK5ONuL4BguNy3oGE1bRSIXaJBQqwM=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:f5:7c:8c:89:42:e3:6c:ac:c5:a1:29:ee:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: May 12 20:00:49 2025 GMT
Not After : May 13 20:00:49 2025 GMT
Subject: CN=b9fe97a349ac2d1d7e2df36d5c74edc91834daac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:b2:cb:66:87:64:af:98:82:0e:7c:72:0c:
50:3a:f7:35:98:1f:82:81:dc:95:47:2f:f5:d1:70:
82:7d:da:d5:5d:8d:8a:55:78:df:c7:f8:bf:f7:9e:
81:bb:d0:92:88:66:96:47:dc:e6:74:a5:94:1c:e9:
23:09:70:26:60:ae:2a:f5:41:2a:0b:ca:0e:84:93:
a2:62:b3:b0:8b:1d:0a:b0:bb:cc:36:e0:ce:d9:6a:
bd:63:d5:a3:e5:26:9b:7e:8b:e6:22:f4:d6:79:70:
c6:f9:47:d1:ae:44:53:42:02:b7:1b:e9:25:00:3b:
ac:04:2b:e6:01:f5:d2:d7:62:d7:5a:f1:b9:12:ee:
ff:23:c2:50:fa:f1:74:44:be:03:36:8d:b4:ed:93:
05:06:23:08:6b:6c:13:94:36:81:de:da:0e:e1:17:
8f:09:8b:a2:aa:0a:03:cc:7e:77:41:1b:3d:81:99:
59:a0:b8:d7:c6:29:bd:67:a5:f8:13:f5:6c:fc:e4:
ab:a4:92:7f:5a:f2:13:f7:3e:3a:8f:a6:77:0d:5b:
6a:a9:8d:da:74:ad:b3:f7:f3:12:e4:76:f2:75:e8:
a9:e2:aa:06:12:47:3b:76:27:df:48:c9:5b:d6:02:
f7:15:fd:a4:e5:d5:15:4f:cc:08:3a:43:b1:7a:b3:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FE:97:A3:49:AC:2D:1D:7E:2D:F3:6D:5C:74:ED:C9:18:34:DA:AC
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:85:f1:76:34:d8:26:26:c6:8d:ea:2e:15:0f:cc:11:59:7b:
1b:0f:b8:d2:50:19:83:0c:c0:ca:28:63:f6:6d:73:be:b3:54:
23:24:fb:4b:7c:ce:fb:a7:e6:11:52:dc:44:8c:28:db:eb:e6:
99:9c:bb:d8:95:d9:22:45:37:16:31:b3:7f:e4:c2:4c:7e:c5:
d6:f0:dc:52:35:10:cd:b3:f3:0a:19:2c:cd:84:dd:c4:2e:18:
68:9b:4b:0b:cc:7e:57:16:90:35:d6:ac:3a:60:da:4b:74:69:
c5:6a:5c:af:9d:ec:86:86:ac:67:ba:a7:8b:8b:02:43:46:d2:
ba:61:1c:a5:49:13:6d:e5:ee:e4:48:03:18:b0:c4:72:d3:f3:
d9:14:76:b8:77:92:a6:17:ef:a5:e9:65:20:e8:ee:09:09:4e:
5c:fd:6c:23:d6:79:54:3d:07:c6:6b:fc:fd:2c:93:5d:5f:13:
9a:a4:b3:87:de:6e:73:eb:63:fa:55:7b:b5:66:52:b9:a7:bd:
cf:b6:44:3f:b3:2e:43:c7:bc:3e:36:7c:21:ac:10:3e:92:d0:
f9:31:d6:a1:6b:3d:e8:c5:4d:64:c8:8d:e6:86:6e:2b:3c:af:
f1:35:1d:0f:74:40:10:e9:f5:29:a1:22:64:8f:f2:01:fb:fb:
b5:69:ae:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:58:48 2025 by rpki-client