Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: 23q6RRBLPNfNGemOFHTA5ncMa/QmfgmYTF3iBNBOuy8=
Subject key identifier: CC:B3:1C:09:A7:E0:20:E8:22:CD:F2:34:EA:FF:89:02:13:17:BB:24
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 0196C53A9123592836E14A981FAAC1DA9BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 0F55
Signing time: Mon 12 May 2025 16:01:11 +0000
Manifest this update: Mon 12 May 2025 16:01:11 +0000
Manifest next update: Tue 13 May 2025 16:01:11 +0000
Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: lYTxXu2mL4xcdjG3DN4k73rB+i/oDjAz22jKlas8PdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:91:23:59:28:36:e1:4a:98:1f:aa:c1:da:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: May 12 16:01:11 2025 GMT
Not After : May 13 16:01:11 2025 GMT
Subject: CN=ccb31c09a7e020e822cdf234eaff89021317bb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:5b:3e:ad:82:eb:7f:c6:20:0a:51:cc:b7:
f4:8b:22:5b:ed:f0:19:5d:f8:9e:b8:ef:e1:1c:a7:
73:10:c3:a4:83:1f:80:4f:b1:b8:e1:3c:49:a0:0f:
c3:ef:ae:b7:1e:f7:01:28:e1:15:93:e1:dd:77:c2:
bf:dc:a0:5c:0e:a7:2b:5a:64:75:4e:80:c3:11:60:
38:66:0b:4a:9c:90:8c:f1:f2:d3:39:dd:55:c5:d7:
e3:c5:eb:21:80:b9:bd:35:89:7b:10:5b:26:5b:97:
81:c6:14:00:c5:13:93:8e:4f:c8:cf:a6:6c:c4:56:
fe:4f:94:17:32:c2:83:f7:cd:a6:2a:9d:ee:d4:8e:
f9:6b:6b:ba:0a:6a:e3:67:5f:24:41:0c:66:d4:e3:
f7:d1:4e:cc:d1:85:15:0a:4b:d8:82:06:50:c6:a5:
ff:a7:5a:0d:b5:65:c7:07:2b:8f:2f:47:3f:61:2a:
a8:96:8c:ac:11:c2:33:c3:0c:0a:5e:2f:ce:77:4f:
92:4e:b9:41:72:b8:1f:36:01:b1:ae:af:7d:e5:38:
a5:4f:6b:6e:dc:c3:6c:c1:ad:25:f7:84:39:e0:76:
f8:fe:8c:84:06:0f:c3:f7:2a:4b:38:af:98:55:cb:
c1:74:0a:71:d3:65:44:ee:3b:92:84:1c:28:9a:d9:
9c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:1C:09:A7:E0:20:E8:22:CD:F2:34:EA:FF:89:02:13:17:BB:24
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:70:61:9a:29:a8:34:a8:84:89:e3:af:0b:a4:38:69:cd:
10:6d:86:44:df:85:2e:c4:65:ea:5f:32:40:50:25:04:df:39:
fc:10:93:d2:4c:ba:37:ef:84:ed:46:e9:fe:e7:1f:10:df:56:
f6:d6:f1:45:86:df:cb:3b:9d:b5:7c:bf:19:ad:51:cc:05:e9:
85:83:64:5e:0e:79:d9:6c:6c:73:21:5b:af:7a:4a:85:5c:91:
b4:12:4c:b7:a0:f1:bf:ec:30:67:1b:4f:93:90:d4:4f:a0:2d:
29:c0:4e:3f:d4:49:60:e5:67:2e:3c:c0:9c:08:b1:0a:ae:30:
c3:fd:ad:a7:a7:a7:7a:b3:40:e1:7a:41:27:c3:99:29:e1:ba:
13:81:6d:39:8d:4e:62:35:fe:a3:a7:24:5a:1f:a7:9a:27:b2:
c5:cc:5d:b2:77:80:5f:8e:b7:9f:34:29:19:28:3a:77:8a:12:
5f:f8:52:d0:0f:bf:54:1a:ef:2d:bd:4f:8f:31:fe:6d:b5:36:
ab:56:83:48:1d:93:b2:11:cc:03:df:6b:74:c8:9f:83:cc:62:
54:12:a0:f6:24:2a:48:62:c9:e7:72:fe:48:35:2d:21:60:ee:
e3:2a:09:07:06:24:f7:02:d3:d0:f8:b0:20:87:80:93:2b:93:
a0:d9:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:13:02 2025 by rpki-client