Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: 7haXZUkd2XSyHvut3KDOtYN6TRDWqzqo+NFwVHWkuhs=
Subject key identifier: DC:5D:A2:98:29:76:8A:35:2B:10:DC:16:B1:E9:C2:48:1F:83:30:86
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 01969E9A079BBA485D7D63D61B16269DF792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 04:00:16 +0000
Manifest this update: Mon 05 May 2025 04:00:16 +0000
Manifest next update: Tue 06 May 2025 04:00:16 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: wb7wlOgITeVyaMDkhwMlap16EVQjUJrJ4TX+AMVZ+4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:07:9b:ba:48:5d:7d:63:d6:1b:16:26:9d:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: May 5 04:00:16 2025 GMT
Not After : May 6 04:00:16 2025 GMT
Subject: CN=dc5da29829768a352b10dc16b1e9c2481f833086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:c1:ae:6a:ae:a6:0b:85:c6:5b:55:44:0d:
29:b1:03:e2:51:d9:91:7f:fe:a0:6d:f7:cd:16:8c:
52:28:03:55:68:11:67:74:ea:27:4f:cb:02:b2:45:
eb:9b:e9:1d:ff:3a:19:42:94:57:f8:01:a8:e2:03:
44:78:c8:20:69:b5:1e:5f:c3:6c:e4:15:1f:e7:e5:
16:59:3d:45:3f:0d:40:5e:42:10:86:ee:a8:2f:7d:
a1:66:1f:8c:8f:51:cd:e5:0b:6c:b4:b3:9c:ef:ee:
d0:52:ed:8f:5d:be:a2:4d:01:ed:d9:d3:3b:a4:7c:
f8:8a:5c:90:74:42:65:33:00:95:e0:3a:fe:47:a6:
78:22:e8:20:f0:b1:06:d7:86:83:03:fe:0f:01:e2:
2a:7a:94:c5:2e:18:3f:66:e4:87:81:08:79:17:50:
78:fb:f6:85:7d:61:2a:ae:d2:6c:ab:4c:03:c1:26:
93:5b:54:e4:ac:58:16:55:67:6f:2b:eb:53:ec:3c:
5d:42:f3:31:ee:46:ef:7e:cb:5c:ef:e7:f4:d4:00:
d3:77:c9:a3:d3:31:7f:4b:64:8d:88:fc:5a:1b:17:
9b:07:e7:82:8c:ac:ad:c3:58:37:83:dd:c6:3d:9d:
1a:c9:9d:36:37:4f:1c:41:43:ae:7b:6a:4b:b2:2a:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:A2:98:29:76:8A:35:2B:10:DC:16:B1:E9:C2:48:1F:83:30:86
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:77:34:e5:41:6c:63:a0:e6:b7:67:30:12:db:84:48:46:c5:
0a:d1:f0:94:f0:14:a5:5c:b1:be:cc:be:86:61:76:f3:22:d4:
17:7e:38:82:2a:17:4f:44:37:6f:b9:d7:77:43:cd:8c:85:3d:
80:e5:4d:f1:75:a2:bb:14:af:43:6a:9d:de:40:95:72:b7:38:
cb:59:44:4f:30:84:12:45:ab:e9:4a:40:88:fe:49:98:40:7f:
40:75:bb:5b:48:38:99:47:99:21:a5:51:d3:7d:a0:be:75:7f:
a0:01:d9:91:dd:1e:e7:38:3e:ad:58:8b:7f:39:d0:22:85:88:
17:1e:a2:65:da:19:10:b8:57:c9:96:17:37:e9:74:dc:a2:f0:
ce:36:ed:03:68:17:0c:0c:5e:9a:5e:66:eb:52:61:25:c9:de:
bd:c2:c9:97:21:2e:ff:df:d6:b6:90:e8:13:f2:73:06:3f:d0:
6b:c1:cb:56:41:e2:b1:5e:df:ba:61:17:ee:89:5a:b6:5b:e0:
24:61:91:13:09:f0:78:97:68:d9:a9:5f:1d:f6:16:29:9f:aa:
c0:d4:a9:fd:48:b1:f7:f2:96:c8:08:d1:be:fc:6f:5d:60:4f:
67:53:c9:94:31:23:e7:f9:20:57:7f:a3:65:18:38:e7:ab:ae:
7d:0d:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:21:17 2025 by rpki-client