Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: TowMhQZPniBwCeJf7WAXRm7rN9mR2D7M5XfiDzmVcyY=
Subject key identifier: 53:F5:AD:32:D7:67:6C:6B:A7:BC:1E:09:0D:9C:9B:62:58:AA:7C:89
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0196C6BA6D076C31BF72751815E7D426CE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 23:00:28 +0000
Manifest this update: Mon 12 May 2025 23:00:28 +0000
Manifest next update: Tue 13 May 2025 23:00:28 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: DzIloUVk3Z+l7RWZxDsljWYXrlWfalb/IWvkZFsKCKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:6d:07:6c:31:bf:72:75:18:15:e7:d4:26:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: May 12 23:00:28 2025 GMT
Not After : May 13 23:00:28 2025 GMT
Subject: CN=53f5ad32d7676c6ba7bc1e090d9c9b6258aa7c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:f2:86:a1:6f:92:e3:44:ad:f1:5a:c1:02:
ba:2f:21:7b:26:9c:ee:ac:da:0a:90:7d:d8:6b:c6:
ae:3b:c7:8b:a9:66:5f:53:bd:8c:c6:a6:fc:f2:86:
da:53:4e:fe:3a:31:13:c6:c4:1c:ea:a2:fb:1e:e5:
b0:b1:7c:94:1a:92:d0:b6:8f:5d:60:61:b2:86:45:
55:56:ce:3c:4e:2d:3e:13:15:1d:12:24:b7:60:22:
82:23:03:cd:23:65:b6:db:b1:05:0e:d8:1b:25:07:
1d:9e:b2:e0:49:c1:b4:5c:b1:7d:2c:bd:fe:23:79:
9a:74:d8:cf:37:eb:00:c5:7d:a5:1f:66:3e:e3:ee:
b8:5f:25:db:b6:ea:a4:bd:b2:53:04:62:4d:53:a6:
50:67:34:4c:81:17:9d:bb:e7:56:25:4d:c1:ae:9c:
6f:ff:04:af:03:9f:5f:ff:a7:9a:1c:1f:0c:12:c6:
8b:97:72:aa:06:ec:04:f4:06:44:8b:13:f3:05:17:
39:ba:54:9a:00:48:43:9c:76:d7:62:bc:9b:f3:db:
1e:95:ca:7b:6a:cb:12:e4:08:43:3c:e3:2b:80:b0:
57:dd:d5:5d:04:b0:15:f7:53:a1:10:62:25:4d:ef:
3d:83:e6:a1:81:40:0d:63:57:ad:e1:d2:e4:97:cf:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:AD:32:D7:67:6C:6B:A7:BC:1E:09:0D:9C:9B:62:58:AA:7C:89
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:75:09:d5:53:36:a9:c3:ec:57:b3:b9:fb:d7:39:d8:38:
cb:3f:27:f1:e9:db:c8:8c:32:c2:01:f5:da:58:7c:79:25:59:
8b:52:44:6a:bb:d6:85:de:ff:16:54:d5:4d:79:b1:25:ec:c0:
17:19:ca:7b:ce:f3:d3:fc:30:d0:a7:ad:ad:78:bc:e0:51:14:
61:ce:76:00:c6:2f:05:65:40:58:a5:e9:9e:ec:34:7e:b3:96:
b5:24:74:76:b0:c4:28:2e:88:96:1f:c5:ec:2a:04:dd:0f:a1:
3d:08:69:88:48:f9:20:ae:bb:d3:eb:8e:09:4b:ce:17:7d:0c:
07:dd:79:9f:f6:c9:ac:c7:42:ab:05:e3:ca:8d:99:5e:14:2d:
a1:ea:67:d7:7a:38:2d:b1:86:76:17:80:06:3a:67:7a:2d:fe:
41:c3:c7:5e:0d:7c:af:ce:7f:a1:59:71:4c:13:b0:4a:2d:9c:
24:30:37:9a:2f:ac:1b:bc:cd:9c:23:c9:20:7e:1f:59:1c:9c:
94:f1:ec:40:dc:0a:97:72:99:9e:57:9e:91:04:b7:a6:dd:a3:
4d:0b:2f:e2:9d:45:2b:89:ec:f5:33:7a:b6:47:f4:17:bd:cb:
ec:6f:a5:85:a1:57:f7:1d:ae:87:c4:ce:1b:7d:62:e6:6c:1a:
be:9a:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:44:24 2025 by rpki-client