Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: kNtr95IfxQszQVi/P7AZhyv2BtJGHiTqSYqUct6WF+o=
Subject key identifier: 55:B9:14:2B:49:7F:09:5C:B3:40:8A:F7:6B:02:08:19:4F:E3:13:AF
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0196A65484E26FDCB033DF859D30E6716FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 0ADD
Signing time: Tue 06 May 2025 16:01:18 +0000
Manifest this update: Tue 06 May 2025 16:01:18 +0000
Manifest next update: Wed 07 May 2025 16:01:18 +0000
Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: 3JUunO72dlSKb8XfExumWT+DNeMdsf+Q/pAg43LWynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:84:e2:6f:dc:b0:33:df:85:9d:30:e6:71:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: May 6 16:01:18 2025 GMT
Not After : May 7 16:01:18 2025 GMT
Subject: CN=55b9142b497f095cb3408af76b0208194fe313af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:55:a8:e9:5e:4c:d9:53:5c:cd:90:3b:e9:
ee:65:31:1b:ff:7d:f5:ea:31:96:ab:2c:31:21:0d:
fd:1b:07:df:4a:76:41:f7:5b:33:96:b2:01:f9:16:
ef:03:75:28:19:57:eb:e1:61:b9:3d:2a:2f:cb:36:
97:f1:48:9a:9c:8e:3a:04:dc:74:9d:95:a5:ae:71:
65:fa:6d:46:a1:ad:06:b5:c6:1d:2f:92:15:34:32:
50:a9:82:76:bf:75:0f:66:05:62:53:5c:7c:a9:83:
20:09:57:f3:4f:b0:4d:6b:2f:62:a9:88:46:60:c2:
47:37:e3:c4:26:27:a2:6e:79:e1:de:29:d8:6d:26:
bc:a3:27:79:f0:41:d4:90:a0:f6:27:3b:5b:b9:ce:
4b:05:c0:e1:41:6e:5c:5f:a2:cd:d8:c8:5f:2b:88:
83:74:1a:2f:89:95:b8:86:46:aa:ef:2d:98:86:32:
c3:95:97:03:61:dc:ef:08:a8:2b:e3:a7:6d:f3:70:
2a:9e:8c:04:83:1d:05:8f:81:03:63:be:b8:2e:32:
15:ab:cb:cd:c9:ff:88:d2:fd:26:28:58:ed:4e:fb:
d6:0e:47:02:c5:52:79:9e:40:b0:a6:5c:ca:48:c5:
2a:0b:a7:fc:89:3c:06:71:ff:81:6f:22:4d:fd:01:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:14:2B:49:7F:09:5C:B3:40:8A:F7:6B:02:08:19:4F:E3:13:AF
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8f:05:76:78:87:36:a8:e3:82:6d:d9:67:d1:01:7a:1d:d7:
95:8d:2e:0d:4e:8d:ce:c7:51:c8:4a:69:1b:18:6d:87:13:9d:
cc:d5:93:0d:21:5e:98:e6:ee:21:09:67:55:89:c2:70:f8:db:
ea:50:f1:50:50:df:a5:c6:0a:8b:8d:a0:b8:33:ee:39:b0:c9:
18:83:91:08:d1:4a:9d:01:f0:45:5c:6e:b5:11:62:b8:3f:01:
50:21:af:c7:e5:dd:92:67:bb:5f:b8:a7:6d:3c:51:b7:a2:fe:
83:c2:96:f4:bb:28:70:99:7c:f0:43:6e:bb:e1:0d:bc:63:9f:
7e:8b:b6:f8:a8:b3:94:c5:35:d7:72:25:e3:99:26:3f:f5:a9:
a7:cf:98:50:3a:2f:a1:57:f8:f5:02:5e:12:41:ef:d3:c9:bc:
75:4b:50:3f:fd:45:be:9f:7d:a8:2b:30:f4:47:39:01:45:c0:
7b:e8:b2:e1:ef:c4:29:b6:f0:e1:51:68:9c:df:60:0c:ad:b1:
72:64:6c:e5:c6:e8:7f:92:7f:99:c8:c3:aa:59:c3:38:d7:82:
b1:3e:fe:87:d4:4e:01:d4:08:5d:90:1c:bd:d8:fd:c3:91:06:
b9:bd:31:32:62:f3:85:82:56:45:93:e7:8c:cf:df:b9:fa:c9:
66:97:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:34:31 2025 by rpki-client