Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: LBVx19ROQs/D+H+fCIvEwNP31wq8QK8cBN3JOYhcWjQ=
Subject key identifier: 8D:6E:89:4A:E5:F1:D0:CD:39:CF:C8:D3:FD:BB:77:71:9A:77:FC:D0
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0196A5E5B25A230FBBE8D499ECA2C46623F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 142D
Signing time: Tue 06 May 2025 14:00:16 +0000
Manifest this update: Tue 06 May 2025 14:00:16 +0000
Manifest next update: Wed 07 May 2025 14:00:16 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: 9EIE8UMeuI7yxuwVuS1wkU8WcxNhYP4wnAG5t7zGIRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e5:b2:5a:23:0f:bb:e8:d4:99:ec:a2:c4:66:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: May 6 14:00:16 2025 GMT
Not After : May 7 14:00:16 2025 GMT
Subject: CN=8d6e894ae5f1d0cd39cfc8d3fdbb77719a77fcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:1c:c3:eb:cb:54:04:ab:79:03:c5:29:09:
fd:83:e4:47:64:2d:cf:66:f4:6a:e5:75:a5:f5:c4:
c7:e5:0f:8e:88:0b:54:54:ed:bb:23:9f:6f:57:d3:
7e:dd:20:05:8a:eb:ff:bf:68:60:9d:fc:2f:c6:04:
1f:d0:a1:f3:74:69:2e:f1:02:f7:44:87:70:d4:e7:
2d:6e:af:22:3d:47:5f:71:9f:2b:f5:d2:6b:90:a7:
34:d5:3d:ad:4f:46:76:25:4c:4b:3d:a4:a5:ca:b8:
ac:12:fc:72:d8:25:3a:f5:16:99:be:98:f4:43:b4:
d2:fe:07:b2:4d:a0:7a:57:d8:74:95:24:e2:0a:f3:
88:e1:72:8d:ae:04:41:8d:0b:e2:fd:e6:e5:3e:3c:
a2:5e:33:85:8f:41:3f:19:68:a1:e5:da:93:87:ee:
52:8f:4e:7a:a3:2c:e6:91:e0:f3:27:69:34:26:40:
7b:38:70:4a:4b:a0:05:20:cd:a7:60:18:a8:ed:24:
50:f6:3c:c9:d2:20:08:ff:a6:8a:a5:7c:3c:6f:54:
e2:03:06:58:fa:2f:b1:e2:a9:b7:32:ff:b2:5f:8a:
72:68:77:22:54:f4:77:94:3b:3e:fd:61:61:43:24:
73:7d:ac:df:00:25:37:1a:69:bc:70:6e:73:c8:78:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6E:89:4A:E5:F1:D0:CD:39:CF:C8:D3:FD:BB:77:71:9A:77:FC:D0
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:ac:fb:2e:6b:47:27:34:2d:29:8e:f2:6c:88:08:18:7c:
30:7c:1c:af:bf:16:b3:7d:10:9e:70:cc:3e:4e:24:3c:7c:65:
c5:95:07:3e:b5:4a:1d:4c:5e:41:98:33:1b:13:2a:04:da:af:
ba:b1:4c:30:07:e7:d6:d2:09:60:8a:5c:c1:e9:a5:a5:e6:48:
11:e0:77:12:27:8d:10:77:f0:55:cc:e3:b3:01:5f:d0:e5:1c:
59:28:db:34:c8:af:46:d0:a1:21:70:be:7a:9c:59:b6:7a:b8:
bb:00:ff:bb:94:11:0b:89:10:d4:3c:ad:b7:53:f4:af:c8:c5:
d2:11:06:ff:eb:4a:e6:23:18:c3:50:53:4d:5b:ad:4c:ad:9a:
53:fb:98:f8:94:53:75:17:e0:f4:5d:74:1f:5d:95:ab:6a:79:
c5:12:86:a8:a7:b7:6d:f4:43:7b:c1:a8:dd:5f:2e:af:72:4c:
a9:5a:3a:64:ef:ed:75:ab:f6:a1:84:99:0e:de:cb:04:73:b1:
12:64:aa:90:bf:9f:1f:02:ea:95:e5:02:e1:93:14:42:96:21:
bc:ca:b0:89:5a:e4:a3:18:b4:62:03:9f:8b:41:1b:99:f0:5c:
cc:c6:fc:78:be:4c:76:8a:61:4e:26:ca:56:8c:60:6d:ef:b3:
58:7a:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:02:49 2025 by rpki-client