Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: KhY1UpCGhkX7MFD7FYCJWInYGtdt0suZhPi5fKDm1DE=
Subject key identifier: 9C:87:75:67:3C:A2:E3:79:67:70:0E:C1:EF:96:B6:59:60:7F:62:E3
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 0196C314A4CF85B1AE05FFE717BB11F7596F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 10A3
Signing time: Mon 12 May 2025 06:00:32 +0000
Manifest this update: Mon 12 May 2025 06:00:32 +0000
Manifest next update: Tue 13 May 2025 06:00:32 +0000
Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: R8RIa97JXAWeNCdWsv7dgcZZW3gwrmQCpIOEsQiJEK8=)
2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:a4:cf:85:b1:ae:05:ff:e7:17:bb:11:f7:59:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: May 12 06:00:32 2025 GMT
Not After : May 13 06:00:32 2025 GMT
Subject: CN=9c8775673ca2e37967700ec1ef96b659607f62e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:2e:b4:30:7f:d5:0b:9e:f4:84:19:9e:5d:
ac:79:f7:3d:ff:af:a3:f8:0b:2a:c8:7f:36:1a:76:
58:c7:f1:2a:b0:b4:1c:a2:ab:03:c1:a5:5f:43:08:
ce:52:90:0a:ff:0f:ae:ff:70:91:77:c0:7d:93:ba:
a7:a9:66:2c:69:09:08:be:b7:c4:8b:c4:96:8a:fa:
4a:98:98:24:d3:54:01:32:eb:66:34:05:03:f1:62:
da:66:03:c4:be:17:db:92:0c:22:5b:53:e5:82:e7:
96:29:49:c3:6e:70:5b:af:80:57:d0:77:f6:6d:ff:
12:55:2f:83:c9:af:d7:2b:92:5e:38:bb:5d:3b:7c:
e4:ca:c8:b5:ea:5c:f0:08:35:37:4a:29:a1:52:d9:
28:96:0a:e7:59:f9:c8:28:80:a7:77:9a:5c:07:a0:
18:da:b5:6f:e6:37:b2:7b:20:a5:95:5c:ac:71:97:
73:18:dd:75:c8:69:2f:86:3d:9f:70:af:5e:68:df:
65:51:b2:89:38:de:72:36:f2:6c:d2:3e:f9:23:02:
75:45:9c:89:69:cf:bf:24:c7:d5:39:a1:f4:b5:df:
a1:b5:1f:37:c7:ba:f5:33:ea:f8:d0:58:7c:3b:2c:
99:df:e4:11:4b:a4:9b:16:99:e1:30:4c:20:a1:2d:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:75:67:3C:A2:E3:79:67:70:0E:C1:EF:96:B6:59:60:7F:62:E3
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:13:23:18:ad:d6:fa:00:a9:69:5a:67:cb:8e:2b:b0:2c:2b:
63:7b:dd:86:e1:e8:43:cd:89:99:36:0b:1d:98:93:2d:82:27:
f1:db:41:2d:78:b5:4f:68:43:44:11:40:08:c5:55:b9:96:d0:
3d:77:70:b3:68:7f:6d:d0:26:3e:ae:fd:69:2d:27:e2:73:44:
67:23:05:22:4b:05:05:22:24:3b:36:96:aa:47:bc:60:ed:73:
59:ab:5c:46:00:8e:64:92:c4:a5:dc:29:68:7a:42:1b:30:33:
b4:34:f5:cf:70:9c:2c:ee:a3:da:6d:3e:21:3d:e8:bc:5e:60:
54:40:c6:81:ec:de:6b:52:7e:a9:47:1b:1b:17:d3:33:95:1b:
57:12:48:85:8a:ed:0f:94:40:45:b7:cd:a3:33:2e:2b:9c:dd:
4f:10:22:d5:4d:b6:de:30:7b:05:e8:6b:8b:89:2a:62:05:18:
5b:ea:7f:cb:e0:b5:b2:1d:55:0e:2e:25:20:0e:ac:8a:0d:75:
e6:09:79:0f:57:64:b1:7d:ac:98:af:f2:3d:2d:88:70:8d:45:
a3:03:e2:4d:c8:c9:e5:b1:54:b6:ab:78:44:d5:9e:91:09:45:
6d:4a:40:dd:11:a3:70:f3:73:8e:c1:f3:94:f5:8b:7c:80:9e:
af:5f:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:45:41 2025 by rpki-client