Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: j+fiAHFxT2hRlgqCfsUW3/j6Ag3uxv0w9v5xp8T9RUg=
Subject key identifier: 1D:58:62:6D:09:DE:A8:77:AD:50:3F:EE:18:EF:AB:CE:A0:7A:3B:97
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 0196C64C9E9BAAA30675918B03B8A9D5BCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 14A9
Signing time: Mon 12 May 2025 21:00:32 +0000
Manifest this update: Mon 12 May 2025 21:00:32 +0000
Manifest next update: Tue 13 May 2025 21:00:32 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: +i2XStB2P8e/ySUQIhL3YZ9lbcB5X6bGxCeyZbby+1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:9e:9b:aa:a3:06:75:91:8b:03:b8:a9:d5:bc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: May 12 21:00:32 2025 GMT
Not After : May 13 21:00:32 2025 GMT
Subject: CN=1d58626d09dea877ad503fee18efabcea07a3b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:ce:10:59:4d:b2:da:2f:c3:31:b0:87:47:
64:58:5b:df:40:e5:8c:23:05:e6:4e:ae:63:27:25:
e7:c0:79:83:fc:1f:63:c5:9e:01:8a:f9:0f:61:ec:
86:5c:4a:56:9c:08:6e:d4:22:25:9c:31:98:e8:c2:
db:ed:bb:5f:e3:57:cc:7e:5d:d7:82:19:f5:81:02:
04:eb:80:6b:78:94:92:e2:9d:8f:08:d0:6b:b5:ba:
40:d3:03:0f:a6:69:2f:f7:fa:7e:9d:43:74:4e:13:
57:c4:52:79:29:fc:6a:6a:49:0d:df:74:6b:35:38:
db:59:69:14:0e:21:c9:10:50:af:42:06:cc:10:1b:
d1:38:a6:79:a4:b0:69:89:0a:52:7b:b0:ff:0f:22:
2f:f0:4f:c1:d2:c0:bf:e3:15:32:18:ad:c9:cd:eb:
8a:1a:1b:c5:92:7b:b3:e3:c9:2c:26:f5:ae:d2:98:
16:d5:ca:4e:6e:e4:4d:8e:b6:be:a0:5d:23:2d:bf:
e5:74:a2:77:bf:fb:2c:98:40:56:25:20:29:f6:02:
a7:fa:02:3c:dc:40:20:88:d6:39:8b:b5:21:7e:dc:
95:fe:a5:e0:c9:db:e6:07:9d:03:f0:d8:bc:37:75:
5f:96:ff:bd:fc:7c:5b:97:b8:5e:dc:90:01:bd:e3:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:62:6D:09:DE:A8:77:AD:50:3F:EE:18:EF:AB:CE:A0:7A:3B:97
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6f:fa:06:aa:6f:cb:9f:a8:ab:27:16:8e:6e:15:9f:68:36:
29:bc:f1:c9:36:a2:c0:ff:cc:f1:ce:81:6f:1f:a1:40:97:0b:
52:41:a4:b5:0b:57:97:80:28:ed:1d:2d:38:d9:0c:83:79:98:
32:56:cf:72:db:62:b8:d1:a5:cd:19:2b:7d:91:32:1b:8d:51:
e0:d1:0e:0c:f1:41:86:8a:24:df:53:64:4b:d2:c5:cb:bf:22:
be:a6:e0:45:64:68:fd:bd:60:84:8b:44:aa:b9:5f:dc:a1:7b:
8f:f1:de:52:ff:91:0a:63:da:34:e3:ef:0a:4e:1f:0a:00:73:
39:5c:88:a6:66:6b:12:f1:a8:d4:14:62:68:bb:3f:37:62:bc:
6e:fe:5a:88:40:da:a5:61:75:bf:54:56:ec:e6:67:18:5a:71:
36:36:52:84:9b:e2:c9:b5:8b:6a:38:cc:c9:9a:04:86:5e:90:
01:ba:6b:51:91:6d:b5:9d:6d:0b:55:80:34:cd:9f:46:90:4c:
b2:ba:56:31:c5:b7:05:65:83:1e:cf:7e:78:5b:a2:24:00:56:
8d:43:38:64:6f:ae:bf:96:ca:1c:22:d0:11:50:c8:51:57:28:
ff:2e:d3:d6:77:3c:e4:55:f8:0e:6b:bf:3d:aa:e5:86:1a:60:
37:d0:04:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:17:04 2025 by rpki-client