Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: md8ka9ybjpwyacJZOaJE/9bX+SeJLetM1eOqT3UYqOE=
Subject key identifier: 42:4B:92:85:FC:C9:9E:F4:0A:90:06:CE:AE:49:4A:20:BE:01:9A:7B
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 0196BA48F6AF329820D7426D7B8BDF45100E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0A1B
Signing time: Sat 10 May 2025 13:01:06 +0000
Manifest this update: Sat 10 May 2025 13:01:06 +0000
Manifest next update: Sun 11 May 2025 13:01:06 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: mNxncU/Y3zsngjJS2MHyh6/2SiZQqQARmfZkFUN7CY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:f6:af:32:98:20:d7:42:6d:7b:8b:df:45:10:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: May 10 13:01:06 2025 GMT
Not After : May 11 13:01:06 2025 GMT
Subject: CN=424b9285fcc99ef40a9006ceae494a20be019a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:8e:02:4d:de:c6:5b:a6:6f:40:c7:78:30:
15:e4:cd:dc:21:56:18:da:06:c3:36:e0:c6:93:b7:
ec:58:64:83:ef:ad:c5:50:4f:4e:da:1d:47:f5:57:
7a:10:ed:ea:ed:29:0f:a5:c8:f8:6f:d9:d8:8c:0f:
ad:22:fb:b8:f5:87:d9:0e:e2:e0:b3:96:79:a3:ae:
c8:6c:4e:8d:d7:86:54:38:72:23:f2:79:d5:c8:7c:
b5:d3:17:69:ec:37:63:f7:c3:62:de:ab:38:49:9d:
b1:33:e4:05:83:f2:52:4d:a2:e5:70:cc:fd:b7:d6:
9f:53:3a:82:26:20:12:d9:7c:3b:f0:dd:b1:fb:28:
32:e8:bb:1a:51:ca:7e:78:0f:63:4d:11:dc:56:cc:
c3:c6:c7:df:ba:89:15:c0:25:87:04:53:38:2b:77:
86:b0:30:4f:33:6f:07:67:ee:e7:38:2d:c7:d6:5b:
00:6b:1a:ca:10:11:ba:a2:84:b0:6a:e4:be:34:f5:
5d:35:2d:89:4d:eb:bd:8c:e3:77:90:bb:31:6f:47:
bb:4f:53:66:f6:fc:1e:a3:28:f5:0f:4d:0f:83:f8:
78:6c:c5:f8:b6:ba:e7:07:22:dc:98:9e:16:97:14:
7d:1d:0d:9d:3a:bc:83:38:24:05:9e:16:20:80:fa:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:92:85:FC:C9:9E:F4:0A:90:06:CE:AE:49:4A:20:BE:01:9A:7B
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:17:0f:5a:2e:b3:11:d6:c4:37:68:b5:5b:31:3c:32:60:fa:
9c:3d:4f:5f:6d:76:69:0a:b8:dd:2a:f0:3d:28:dc:a4:b0:7e:
41:b6:78:9a:7d:68:7f:e2:97:ac:33:17:4f:f0:c6:c1:32:09:
69:33:74:14:70:f7:69:3d:4f:56:1a:0e:ca:8d:5b:44:51:4f:
be:93:dc:85:ed:96:d3:45:69:77:0e:01:da:3b:4d:d8:f0:13:
62:52:18:37:f7:86:ee:78:2e:20:24:3e:4b:6e:5a:49:e1:23:
ac:55:2d:0e:35:ac:45:aa:4a:1b:db:f1:41:fb:71:bc:f6:d0:
82:8e:a8:1e:01:eb:7a:c9:56:4d:ba:e7:bb:12:21:cd:6d:ff:
a1:01:f9:bc:d4:7d:70:31:2f:2e:6a:ec:3d:5d:8b:e1:37:20:
c7:b2:90:6f:b0:1d:88:be:c0:20:67:5a:9b:92:7d:26:ab:f5:
22:93:43:ac:1a:5e:fb:12:aa:e4:ac:d9:e5:f0:95:ec:3a:0f:
56:cf:41:a8:93:89:5b:15:da:92:87:92:53:d4:a5:34:2c:a5:
25:c9:cd:17:23:ca:8b:f6:d8:be:15:93:75:22:60:fb:2f:75:
0a:44:d8:e6:00:4b:c3:41:e4:ce:bb:fa:6e:ed:68:0e:41:7f:
07:73:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:31:50 2025 by rpki-client