Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: GJTLIF7IZ4kAxaOB3uPBpL7VcZXQ1bqIl3iURy753NA=
Subject key identifier: 6A:31:43:88:10:90:5A:D5:6C:92:8A:D0:01:04:AA:11:9F:A2:5C:B8
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 01969DBE6DCAD76FD2EEAC0A7852AEDB4102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 00:00:24 +0000
Manifest this update: Mon 05 May 2025 00:00:24 +0000
Manifest next update: Tue 06 May 2025 00:00:24 +0000
Files and hashes: 1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: HUuSkmErykTRNL9zgT7GxgzKxGDFVcUhfQ3bY2WrXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:6d:ca:d7:6f:d2:ee:ac:0a:78:52:ae:db:41:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: May 5 00:00:24 2025 GMT
Not After : May 6 00:00:24 2025 GMT
Subject: CN=6a31438810905ad56c928ad00104aa119fa25cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:f2:c9:16:f5:13:b0:93:7b:22:3e:d2:f3:
91:d4:6b:45:9d:76:e3:99:6f:1a:cd:5d:74:d5:74:
58:31:5a:70:50:b7:9d:16:bf:0a:90:58:b8:35:d3:
00:08:54:e2:a4:d4:89:29:c5:11:2b:35:7b:5b:5b:
cd:6f:eb:dd:32:0c:a8:c1:e8:f7:17:02:85:7b:04:
53:0f:cf:59:20:a2:7d:de:a6:8a:02:c5:5f:1f:cb:
5f:85:4e:66:1d:9b:c1:24:dc:e1:45:de:66:06:eb:
5b:f1:81:01:56:93:e9:5c:5b:21:bc:57:c4:7d:d3:
80:0f:8f:11:2e:7a:be:aa:0b:8e:42:ba:6e:39:17:
00:2f:f0:ec:d4:df:58:91:a1:21:d7:61:fc:33:b0:
1d:ff:6d:d9:ed:80:67:ea:8a:b8:dd:67:be:bc:02:
7f:12:d3:b6:5b:57:2d:77:5d:5b:13:57:69:21:1b:
4c:ab:0a:ae:94:3d:c4:7c:71:24:c5:37:2f:04:ca:
7a:da:c5:67:1f:ad:a8:da:b1:2f:10:b3:9d:1b:5a:
f0:85:46:2c:86:3c:4d:44:a6:c3:9e:09:13:5f:ab:
41:08:11:99:35:c8:25:13:37:b8:96:dc:11:5f:2f:
e8:13:47:66:44:03:fe:20:ad:90:11:5f:08:f4:d9:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:43:88:10:90:5A:D5:6C:92:8A:D0:01:04:AA:11:9F:A2:5C:B8
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1c:7e:79:dd:cb:44:7d:b0:53:17:fc:49:0e:4b:c3:bf:4b:
a6:ae:77:73:cc:76:9c:60:7a:19:24:a7:84:c2:2b:3e:a0:44:
ea:c2:2c:0d:81:0c:20:ac:1d:cc:04:0d:0d:21:c4:4f:a7:88:
01:bf:b5:eb:1a:83:de:a6:a5:6c:fa:33:86:56:50:ce:18:15:
7b:2d:fe:44:ac:01:dd:31:91:21:93:84:ff:66:ae:0f:80:25:
fb:be:4f:52:e8:b1:66:13:01:70:de:8d:6e:27:d7:77:e2:b6:
d5:5e:a6:48:8c:6d:62:1c:69:ff:c7:58:e0:b8:73:e2:80:89:
89:65:5e:19:30:51:9e:90:ee:c2:ab:7b:43:46:b4:d2:49:45:
ca:58:88:79:ff:50:49:1f:35:d3:83:db:7e:b8:cf:44:32:87:
0d:bd:6b:6f:25:18:a1:39:96:e8:a8:53:c6:c4:ac:57:7a:f4:
86:86:ce:ca:58:19:82:ba:3a:2e:b5:2a:03:c2:4c:9f:73:65:
69:05:b0:5f:b3:0e:b1:2c:b9:22:9e:19:8e:9a:c2:8e:c1:06:
e0:d3:c2:cd:6b:fa:09:e2:b1:b1:97:12:dc:d3:87:d7:77:5b:
71:99:8d:14:5b:0b:a7:f8:8a:65:c0:d6:a4:de:70:95:b9:db:
b1:f6:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:52 2025 by rpki-client