Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: W1v6/EGc/gW+iANnFWmQr/XywBIXUlh8QkxTzEnNIFs=
Subject key identifier: 4E:35:66:35:B1:D6:A3:76:12:99:82:51:6C:4E:39:AF:DD:4D:F1:B7
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0196BA7F92CFFFDB9A34EC8868143D2EDC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 14B5
Signing time: Sat 10 May 2025 14:00:44 +0000
Manifest this update: Sat 10 May 2025 14:00:44 +0000
Manifest next update: Sun 11 May 2025 14:00:44 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: MLjTYhEkKh5nnC42EBye5L0Wo2ajSoe3ipB3KQwXsAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:92:cf:ff:db:9a:34:ec:88:68:14:3d:2e:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: May 10 14:00:44 2025 GMT
Not After : May 11 14:00:44 2025 GMT
Subject: CN=4e356635b1d6a376129982516c4e39afdd4df1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:4e:e6:a2:5c:9c:84:63:2e:f7:bd:81:02:
fb:2b:b2:d6:9e:30:46:bb:2b:6d:37:33:f8:d6:f5:
65:4f:a8:11:fd:18:8c:fb:8f:cb:0f:b6:2f:0f:64:
48:4a:3f:72:f6:b1:23:48:f7:5e:73:56:42:3a:d7:
eb:06:ec:46:74:a4:6a:1b:94:06:5f:be:32:11:a3:
d2:9d:c4:30:c3:47:d0:b0:5f:67:b1:2b:28:31:4f:
a6:5c:ed:4d:23:43:4e:ff:c9:41:eb:34:24:75:88:
c7:09:74:fa:77:c5:4c:86:e5:4d:28:4b:55:df:ef:
ea:d3:a0:c4:5e:f2:60:4b:d4:9d:6b:35:a7:db:f3:
ba:d6:d8:ed:a6:99:db:93:09:e8:13:d7:72:a4:b3:
2b:15:36:6a:1c:a5:f9:fd:3e:13:51:a5:75:e6:67:
22:25:ef:9a:81:d7:81:b5:32:5f:3f:f6:b5:23:1b:
9b:9d:8b:47:45:1c:7b:97:18:40:2c:90:10:11:23:
96:bd:45:d6:10:d7:97:6d:c0:0e:f5:fa:3c:d6:aa:
a7:7e:48:04:3a:dc:ca:cb:b0:34:5a:b0:96:5f:65:
02:65:fd:b7:8b:02:82:9d:87:b8:57:a6:36:b8:0e:
68:2b:4a:ef:99:a7:40:9f:6a:ae:dd:eb:81:92:a4:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:66:35:B1:D6:A3:76:12:99:82:51:6C:4E:39:AF:DD:4D:F1:B7
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:cf:57:42:d6:aa:59:d5:07:c5:75:9c:96:53:98:42:e5:
4b:e9:f5:73:46:c7:a3:38:24:61:cc:c7:0d:f2:70:7a:3e:55:
2c:ec:65:71:80:d1:34:f7:11:34:b5:e3:60:0f:43:3a:48:6e:
1e:ee:27:8a:8c:7d:4e:d7:46:df:e4:f0:be:cd:69:96:1a:81:
4b:39:41:46:24:3b:5a:86:00:f4:8c:46:7e:e9:0e:c7:36:b5:
07:28:a5:33:fa:16:e6:a7:59:04:3c:71:51:51:5f:f3:34:03:
4f:10:10:95:35:70:26:3a:14:cc:d0:15:53:cb:d5:c3:7f:11:
da:b8:95:71:c9:74:a3:18:96:b0:df:25:37:e4:94:37:36:3b:
e9:a3:46:c2:1a:b1:ec:6d:85:c6:84:0c:47:84:f1:45:3f:0f:
bc:6f:46:72:51:e0:2b:c4:9a:65:96:b8:45:92:9d:79:07:ff:
fc:d8:c2:1f:ac:05:74:aa:90:58:8b:9d:f8:b3:1e:48:36:33:
a2:a5:2d:a6:bc:30:fc:c8:0f:d4:b5:46:3b:01:a5:38:88:5d:
8d:79:6b:34:d5:79:fe:a7:0d:35:bd:db:d3:c7:d6:d0:d0:41:
a9:bc:96:f8:83:c8:97:c5:a5:f3:a9:8b:4c:f8:a5:21:43:9c:
c6:69:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:20:59 2025 by rpki-client