Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: 3L0Nn717GlhVUk4lCQpDHNvEDAXD33Hi0QABgH+IsmE=
Subject key identifier: 54:FF:5A:8A:F3:B2:80:F6:C9:5F:1A:B5:03:1F:A7:83:68:3E:BB:44
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 0196CB05EAA6AC6AFA9D19FEE848A2E3F49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 14CE
Signing time: Tue 13 May 2025 19:01:24 +0000
Manifest this update: Tue 13 May 2025 19:01:24 +0000
Manifest next update: Wed 14 May 2025 19:01:24 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: yNqt8YoJjsdDkoMr3cISbIrIen0N7Kw+mK1CnaAeN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:ea:a6:ac:6a:fa:9d:19:fe:e8:48:a2:e3:f4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: May 13 19:01:24 2025 GMT
Not After : May 14 19:01:24 2025 GMT
Subject: CN=54ff5a8af3b280f6c95f1ab5031fa783683ebb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:f7:e3:85:c3:40:a7:85:a3:55:b3:e4:de:
25:ea:45:6a:61:61:2e:8d:56:28:5f:4d:ee:e2:51:
9a:b1:e3:be:e7:e7:ed:d8:fc:36:f9:2f:49:31:38:
0b:27:21:f4:54:92:b8:b7:ba:b3:55:47:8c:9f:61:
8d:e5:37:da:dd:60:eb:0a:a2:54:a0:59:75:c4:56:
2f:63:1d:59:df:dc:0d:cc:7e:0b:b4:78:a1:92:5a:
d0:35:07:35:04:b9:8b:c9:00:ec:af:21:f9:8e:8c:
c1:bd:b2:0f:27:64:9d:ec:10:dc:39:81:b0:1a:f7:
79:93:f4:5d:67:69:2b:32:db:03:eb:c4:e2:10:59:
0d:40:67:fe:ef:2b:32:b9:97:32:eb:7d:60:ff:3d:
2e:d0:7c:41:73:0a:4b:83:e9:a6:a0:6f:f3:12:b7:
66:40:0f:57:c3:9b:bf:39:72:f2:c6:b9:66:c0:97:
c2:23:f4:8a:67:39:c9:06:08:56:21:26:0f:4e:b9:
51:10:6d:61:e1:15:99:49:4d:b9:13:5f:df:a4:e2:
10:c5:1e:25:4b:88:d9:d6:e3:54:cf:fe:9d:00:91:
bd:e2:75:34:a9:4f:65:48:c2:5a:01:89:8a:10:fe:
95:a9:c0:a8:3a:95:48:4e:dd:8c:64:0f:23:ec:2d:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FF:5A:8A:F3:B2:80:F6:C9:5F:1A:B5:03:1F:A7:83:68:3E:BB:44
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:59:a5:d2:ba:e7:e9:7c:ea:86:30:90:ca:0d:0a:5d:2e:
5c:6d:f9:d2:f7:98:c2:bd:9f:71:65:62:ba:67:0e:eb:41:e3:
34:eb:95:0f:b3:ea:a3:3c:9b:7c:7c:65:d8:1d:90:8d:40:ba:
42:42:02:4a:89:93:0b:23:17:77:26:b0:63:7e:52:33:35:f2:
15:86:43:96:b5:37:cc:87:b4:d4:03:17:5a:2f:ca:bc:2d:d6:
63:d8:53:27:dd:b8:29:d1:dd:0e:02:41:b2:99:02:6a:f0:00:
d0:bc:04:23:8b:df:1e:03:45:19:67:45:47:86:a1:c3:f8:23:
50:83:75:eb:7e:92:27:fc:6b:ad:74:f5:f0:47:40:34:72:91:
d6:63:76:83:24:10:79:c2:f3:1d:75:66:8a:6f:19:1a:a1:f4:
47:4b:41:b8:63:cf:9a:8a:df:44:95:8f:6b:c2:b1:9d:2f:9d:
b0:34:d0:d9:e5:09:04:2e:f4:50:6c:03:c3:43:2a:9f:bf:2d:
00:4e:c5:63:e0:c9:b6:af:16:c6:43:15:f7:d4:be:2b:2a:20:
e4:39:f4:56:87:a4:07:f5:c3:b3:6d:3a:ac:e7:e7:4c:87:01:
f2:19:d2:8e:90:62:22:dc:f7:ad:8d:e9:d0:58:0b:61:29:cd:
34:f9:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:16:18 2025 by rpki-client