Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: 67HFT4MC80Jn7LLNrk4kXxcBmc9xqpX0OzpkOMUfMVM=
Subject key identifier: E2:82:B3:27:68:92:FE:AA:97:EB:BA:4A:3A:A6:C4:4F:64:A5:4B:05
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 0196B1B31C8C8FF40EB8EF36A0C64BD6C17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 21:00:27 +0000
Manifest this update: Thu 08 May 2025 21:00:27 +0000
Manifest next update: Fri 09 May 2025 21:00:27 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: bN2BJbvHv/jzrkjo67XxNix0TMHSEH5P5fyXxOdwNn8=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:b3:1c:8c:8f:f4:0e:b8:ef:36:a0:c6:4b:d6:c1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: May 8 21:00:27 2025 GMT
Not After : May 9 21:00:27 2025 GMT
Subject: CN=e282b3276892feaa97ebba4a3aa6c44f64a54b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:fc:24:fa:0e:c0:4a:3c:cf:51:2e:d3:e8:
24:d9:59:2f:1b:77:be:c8:cd:d3:0f:6d:3e:fb:6f:
56:85:85:a2:bd:4d:ca:e8:ca:07:d4:27:1e:22:41:
0b:3a:a6:0e:98:2f:36:0e:11:4c:06:1f:7e:21:50:
74:31:82:6e:50:4d:a1:b2:62:99:04:bd:fd:c5:79:
3b:d5:44:ea:69:68:30:47:6d:cc:9e:8a:4b:ba:04:
8c:0f:0a:d8:f2:39:7e:fc:d7:21:2e:b0:d7:38:ca:
ce:cc:81:6d:5b:77:0a:79:1d:6f:63:d8:a6:4c:30:
9d:b4:07:f2:4b:ff:43:07:ad:c3:f3:38:1d:b7:27:
44:1d:0b:55:0b:a7:ec:49:47:5b:6d:58:fd:8f:c9:
12:b3:e9:05:20:18:90:54:5b:10:3f:f6:20:5e:21:
d3:c3:3e:7c:f6:1a:cb:d1:50:85:f4:52:67:b0:ea:
d6:b1:6a:ef:21:34:e4:e7:b0:86:00:28:d0:3a:7a:
63:d0:e4:37:bb:37:83:54:f8:70:36:8b:4b:f0:31:
a7:3a:72:88:06:f8:4f:7c:19:26:15:aa:cf:32:b7:
4e:dd:e9:7e:68:b9:90:22:50:1a:8e:92:73:70:26:
74:d4:05:91:63:35:c3:0b:88:29:c5:2b:51:ac:22:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:82:B3:27:68:92:FE:AA:97:EB:BA:4A:3A:A6:C4:4F:64:A5:4B:05
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:73:1d:09:4a:93:07:5d:55:e0:36:75:0e:67:ff:52:04:3a:
e2:8f:6c:da:bb:d8:a7:86:4e:25:15:94:f6:0a:3a:62:be:66:
80:e3:7a:d4:45:dc:9c:26:a3:05:9e:2d:51:ea:b6:01:99:f6:
7d:4c:37:33:59:27:04:48:1e:7e:63:2f:7c:47:d9:9e:19:63:
59:86:b0:fc:af:9e:5d:c1:36:7d:c1:9f:ca:9e:3c:28:87:f1:
eb:c9:45:1a:3e:ea:c3:a7:5e:5f:93:ac:08:fe:91:ca:cc:1d:
0c:e9:b5:5a:e2:55:c0:1b:2d:a9:d5:c7:e2:44:04:c2:31:a3:
17:a3:83:c6:78:cd:cb:64:ee:f2:c3:5b:50:fb:c5:89:ae:95:
ef:b3:fa:fc:28:2f:ce:2c:53:5b:dc:13:23:dd:a2:19:5e:e1:
a1:8e:41:24:fa:d3:fb:54:b8:81:cc:31:3a:a6:4e:42:02:3e:
78:ce:13:cd:66:fb:82:81:b2:16:9f:23:5a:0a:d9:c1:6d:77:
0d:ad:b8:3f:15:77:5c:7a:22:42:27:91:2b:c1:6e:a5:1d:b1:
97:15:8d:91:e0:ec:ad:c4:fe:cb:19:d2:ad:a6:a9:d7:c4:43:
48:b5:db:03:85:08:2b:ab:9d:a8:b1:66:9a:04:b1:4f:b3:a2:
4c:5e:12:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:06:40 2025 by rpki-client