Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File: xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier: TBKgNh9dQJcHzmAlyCD2NO/KBvpjEx+vY6ho7anOINk=
Subject key identifier: 5D:00:0F:45:87:CC:62:A2:35:1B:DE:D4:AB:72:69:52:A7:74:8F:39
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 0196B7B5994675E79C0BE80CF9F58B08B79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number: 05B1
Signing time: Sat 10 May 2025 01:00:53 +0000
Manifest this update: Sat 10 May 2025 01:00:53 +0000
Manifest next update: Sun 11 May 2025 01:00:53 +0000
Files and hashes: 1: nvCV4orXBwkCxx9cHa5KANTyCwE.roa (hash: UYmf5tNY0RyuPAulCxJX/IA+maHZOZx5xFiCAM1bwuM=)
2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: guD4yLt0Ler1oUjtsVk1IIf0pdoJwhhoT3KrObes6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:99:46:75:e7:9c:0b:e8:0c:f9:f5:8b:08:b7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: May 10 01:00:53 2025 GMT
Not After : May 11 01:00:53 2025 GMT
Subject: CN=5d000f4587cc62a2351bded4ab726952a7748f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:1d:ce:88:e3:db:cc:c8:ea:1c:aa:9d:c2:d7:
0b:ed:0c:17:a3:32:c5:a2:33:09:d6:b0:4a:b3:09:
2d:7c:4b:87:6f:6f:bb:e5:70:7e:99:76:11:39:5d:
54:c3:a6:d6:07:d9:7a:6b:93:a3:87:0b:9b:4f:e8:
90:11:62:4a:a0:3f:70:68:c9:39:5f:a1:11:29:37:
19:67:50:5d:d8:bc:7e:29:4c:9c:f1:c2:02:40:9a:
63:d2:ed:cd:c9:5c:6f:59:e7:c9:e1:f6:ff:d5:da:
91:e1:d2:1e:47:b1:25:ed:84:3d:1c:dd:e0:b6:c0:
03:fd:49:30:38:15:d2:13:82:3c:0f:a1:35:e8:9c:
37:e7:0f:ee:73:0d:ca:3e:ac:74:f6:90:59:fb:4b:
19:6c:0c:87:04:f7:5b:81:b2:c9:c1:9a:20:74:e4:
b8:56:c5:0c:01:0e:ff:d6:6f:35:db:d9:8f:72:8b:
27:79:b1:7f:de:fc:58:68:b3:64:eb:a9:54:fc:13:
98:7a:ff:21:bc:58:4d:a1:24:81:57:cc:32:48:d7:
34:5d:7c:12:95:d7:02:2a:39:69:cc:fe:dc:96:a8:
f0:77:c7:37:b4:e9:97:f9:66:fa:dc:6c:b8:3d:7f:
d3:f1:24:64:08:d4:5a:07:4b:43:0c:4d:7a:d5:6a:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:00:0F:45:87:CC:62:A2:35:1B:DE:D4:AB:72:69:52:A7:74:8F:39
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:1f:b8:8d:e1:1b:ce:e7:0c:42:6b:a1:bb:a2:b7:07:df:
e1:e1:7d:54:61:c2:aa:48:3f:c4:c3:db:19:07:76:d6:95:7b:
fc:c7:17:c9:a9:6a:c4:79:4d:2d:35:61:d3:c5:ca:52:53:c3:
e8:62:b8:83:01:4c:60:7f:ad:be:13:bc:a9:56:c1:2a:99:52:
da:2d:b0:61:7f:99:be:08:d8:d1:fc:66:84:d6:34:6d:7b:24:
41:8c:79:48:30:a3:fd:a2:22:a5:da:29:bf:22:71:d6:fb:68:
a0:d3:f3:02:da:2e:f7:e3:2b:5b:d0:a8:c3:37:bb:d7:f0:e7:
e8:6a:1b:b2:9c:55:cf:ef:27:ea:f1:8f:77:07:82:f5:0d:89:
a5:f9:7b:23:ac:c5:ad:1e:d7:31:ed:4d:77:94:73:17:33:2b:
52:50:d6:52:0b:cb:60:b2:e4:1f:59:d5:88:b1:b7:ba:6e:64:
2f:29:73:42:dd:0c:fd:c8:6a:bb:01:3c:ca:c3:78:ff:8a:9f:
13:c6:74:c0:06:ad:9f:cd:59:1f:c7:a3:98:3a:d8:09:3e:80:
93:9e:d8:4d:55:10:5a:fb:78:0d:77:d6:da:9a:fe:a8:ff:a4:
ef:ec:70:7f:a6:43:bf:7e:5a:39:e6:60:18:52:6b:93:78:b4:
25:c8:6c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:16:56 2025 by rpki-client