Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: elT9uqgej7pW528CZZhAItcTToh19Uyg1wzu5GX8b90=
Subject key identifier: 8F:40:58:0C:6A:06:4E:83:4E:CE:45:7B:27:D6:E8:3D:37:84:26:D2
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 0196B9A43B61119E869CB1DFC0D3DEFBEDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0DCE
Signing time: Sat 10 May 2025 10:01:10 +0000
Manifest this update: Sat 10 May 2025 10:01:10 +0000
Manifest next update: Sun 11 May 2025 10:01:10 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: DOeRlwah+6F5G9BgOA1xExIhZKGgxZWG0tbsI8QUmOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:3b:61:11:9e:86:9c:b1:df:c0:d3:de:fb:ed:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: May 10 10:01:10 2025 GMT
Not After : May 11 10:01:10 2025 GMT
Subject: CN=8f40580c6a064e834ece457b27d6e83d378426d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5e:45:e0:33:0f:f6:dd:42:84:f1:92:dc:d1:
a4:de:35:a3:3c:f9:33:f3:dc:fb:f8:14:b9:d9:5d:
6b:0b:07:2a:e9:64:65:85:72:23:98:3a:19:ab:3b:
79:61:cf:b3:a1:72:9f:12:6c:42:a7:ed:31:e6:00:
92:f2:0b:fc:86:4f:d5:a5:89:3c:61:47:b0:65:7d:
43:ca:68:dc:63:03:2d:3b:75:27:23:cb:31:1c:13:
75:64:5f:8e:6b:06:e4:18:7e:f9:54:d9:ee:61:4a:
67:16:28:e5:65:3f:44:81:43:94:87:8e:20:d9:f9:
ac:48:75:ba:d4:b1:f5:0b:05:1d:cd:15:f5:6e:e2:
aa:29:8d:3a:b7:19:eb:6b:61:c2:1e:d8:7c:c9:c8:
8b:69:56:f2:f3:54:80:62:9e:9f:cc:8c:12:36:aa:
04:37:3b:c8:ff:e1:d6:e0:41:be:a3:a0:5f:7f:98:
94:fc:6e:01:ba:08:f6:9c:d6:9b:63:a8:32:d7:90:
d0:7d:3e:04:28:51:5b:61:53:33:d3:00:a8:e4:79:
58:6c:c4:e2:56:d7:56:df:22:a4:74:55:ce:7e:8a:
f2:8a:06:d8:5e:cc:9c:2e:06:b6:24:ab:aa:17:f5:
aa:a9:3c:c5:f6:b3:50:68:c0:e6:8e:47:4d:36:28:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:58:0C:6A:06:4E:83:4E:CE:45:7B:27:D6:E8:3D:37:84:26:D2
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:14:5d:94:c0:c6:84:62:c2:94:f3:37:9a:4f:8b:4f:69:64:
2c:a3:c1:4d:18:20:c3:b5:3f:99:6f:86:b5:41:fb:69:e0:9a:
0a:a8:df:b6:34:3a:15:c0:5c:4f:cf:12:eb:7b:1e:23:3e:03:
06:64:ef:a2:cd:d7:79:ed:b8:c4:2d:77:14:c2:bf:f7:fb:d3:
df:ad:67:cb:55:c1:2a:fe:b8:ef:6a:b1:95:bb:d8:89:66:58:
e5:10:6c:41:17:cd:1d:91:ca:71:64:81:bb:36:a7:9c:ae:ba:
50:b7:00:da:8c:9c:cb:3f:49:1e:df:77:a4:12:3f:4f:56:0b:
8f:f4:7b:f4:4d:b1:9b:8e:55:df:fe:a8:76:7a:7a:f6:cd:4e:
14:e1:12:8b:9c:bb:6e:be:4d:af:54:6a:70:b9:d3:34:2b:cd:
16:4f:ad:a0:12:15:61:0a:8e:95:89:5b:76:71:e7:0a:7b:9f:
30:4b:5c:e2:99:6a:29:36:e6:4f:78:57:24:86:24:a4:21:e6:
a2:ba:86:b6:09:cc:13:db:6c:31:d4:aa:13:72:82:4c:a4:18:
50:50:8b:d8:11:9b:78:59:d3:5a:90:ad:b4:3c:ef:43:fc:62:
cc:08:b3:67:9c:4d:1a:7a:6f:8a:33:33:c5:65:98:c4:7b:cf:
a7:ea:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:11:18 2025 by rpki-client