Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: OmV1llbrfT80mjk1uoHxqXAjmaYr/uu3Leb8QAQWM+M=
Subject key identifier: 31:96:D7:71:42:51:58:39:98:95:F1:68:BC:60:E8:A3:0E:00:08:DE
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 0196A7669F4FF563C76ECF227BB72E1B94A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 0407
Signing time: Tue 06 May 2025 21:00:42 +0000
Manifest this update: Tue 06 May 2025 21:00:42 +0000
Manifest next update: Wed 07 May 2025 21:00:42 +0000
Files and hashes: 1: 4aLpoXObM3ew7yN9vHEAPc0fnWk.roa (hash: ar8XjMMpMsT7IlojVLcbANVoZnXxQWrx82eUQGbYerI=)
2: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: 45SPs+Z9ofvluEcOqOifqmVD5kUNVjeraHuwyFuMe4s=)
3: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:9f:4f:f5:63:c7:6e:cf:22:7b:b7:2e:1b:94:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: May 6 21:00:42 2025 GMT
Not After : May 7 21:00:42 2025 GMT
Subject: CN=3196d771425158399895f168bc60e8a30e0008de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ba:a3:eb:4d:e4:cc:54:41:28:84:61:4b:2d:
a6:76:9a:ce:1a:7c:4f:a8:d5:f5:10:09:1a:d7:a9:
af:da:57:74:de:78:cb:a8:dc:14:e4:4a:45:bf:ec:
9b:06:0e:77:57:65:bd:cb:92:45:bf:6b:c1:cc:51:
d5:21:b6:63:e8:1e:7b:90:8c:6a:1a:3e:af:6c:f4:
fa:81:05:f3:49:c3:03:59:64:51:ed:41:cc:b3:76:
b1:e3:94:ab:08:4f:4b:77:a4:7e:f4:0f:f1:c4:8f:
a9:33:a3:46:e7:56:73:0a:c0:6f:68:3e:19:74:ba:
d2:99:0b:6e:c6:ff:3d:7f:5a:75:9b:58:cb:55:83:
b2:1e:58:e5:6a:28:19:d1:1b:51:f8:84:bb:ab:91:
e6:57:0e:e2:7a:7a:4a:3c:c3:5c:ac:96:51:c9:4b:
5e:8d:6a:c2:ce:4e:17:2c:30:5c:64:97:d8:c8:ec:
2c:f8:d0:cc:76:14:cf:9f:9f:5c:ab:5d:5d:fe:9d:
ff:12:6c:08:c1:d0:4d:ab:a9:65:bf:b6:e2:6f:94:
81:75:f9:ba:e1:66:2a:18:55:d4:b0:53:0b:c4:cc:
1f:f0:40:68:dc:06:82:09:0a:64:30:f8:cf:9c:f7:
f4:f1:f2:bd:9b:ee:b4:3b:7e:51:82:d5:be:a0:f0:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:D7:71:42:51:58:39:98:95:F1:68:BC:60:E8:A3:0E:00:08:DE
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:51:7e:40:cf:ff:e5:7a:80:21:a3:2e:e5:0f:6f:a5:73:
c6:9a:16:26:08:41:1d:9b:ab:65:5b:46:26:14:eb:c4:0a:d5:
c0:0c:12:74:9a:99:7b:8c:f5:95:27:e8:a4:10:62:ac:64:ea:
12:d4:f6:1c:7f:e0:93:06:5a:58:3a:61:65:6e:e2:2a:49:b1:
45:e5:f1:bf:aa:b1:67:13:26:44:b7:7f:f4:61:d5:59:e7:ac:
a6:09:94:cc:ad:1b:3c:3f:a9:a8:04:d3:85:5a:b2:54:fe:13:
84:93:85:63:81:07:90:7d:23:98:d2:0e:a4:75:75:11:1e:e7:
a1:ee:49:fc:5d:be:4c:88:fc:74:38:cc:80:c6:65:b6:91:0a:
28:b3:7f:57:80:17:fb:5b:65:0c:50:db:dd:db:28:1e:45:33:
9f:fd:4f:e0:85:1b:29:f5:72:73:cb:e6:32:37:e3:d2:26:b5:
b7:25:bc:67:07:09:0b:78:eb:e6:96:32:61:70:a1:61:05:c3:
d1:61:67:f6:ca:f7:35:54:30:26:ca:1f:2d:24:79:b9:f2:be:
bb:14:af:e6:60:7e:29:cb:15:81:89:27:06:46:ff:53:88:1f:
ad:35:f1:de:57:d1:fb:a9:14:c6:89:1d:38:1e:99:6a:03:e2:
ab:8f:96:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:13:51 2025 by rpki-client