Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: 1A5tOHduDCFV5ourKTxtQZttuPzWh1buM69iocGWr6I=
Subject key identifier: 5A:00:98:00:43:98:D3:9E:9C:10:88:DD:7A:FE:60:54:84:64:04:83
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 0196B44725A8CD7050C723C6322C0C06592D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 0DB3
Signing time: Fri 09 May 2025 09:01:23 +0000
Manifest this update: Fri 09 May 2025 09:01:23 +0000
Manifest next update: Sat 10 May 2025 09:01:23 +0000
Files and hashes: 1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=)
2: 7dlaDlkKgi4dAirWDUWBZGBGqcU.roa (hash: p1fbv33BP/4U3m5pS2Ws4rI2vfUa3r6QuSWQWQR+Iw4=)
3: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: CPXDWM3DbvFT6yqulxgXM7HkJf6mUmuk5LDCePxyujo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:47:25:a8:cd:70:50:c7:23:c6:32:2c:0c:06:59:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: May 9 09:01:23 2025 GMT
Not After : May 10 09:01:23 2025 GMT
Subject: CN=5a0098004398d39e9c1088dd7afe605484640483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:95:03:ff:39:fe:da:ee:46:0d:4c:41:2b:
b8:b8:d5:83:48:1e:78:c3:02:44:c8:48:c5:5e:5b:
15:cd:15:5b:46:e9:99:1e:4f:8e:87:31:b8:80:99:
d5:e3:5a:38:4a:b4:4c:4c:aa:89:cd:b5:5e:e0:44:
5a:1b:24:9a:5e:cd:39:47:8c:98:a4:1c:4c:7f:a5:
ea:36:be:46:64:91:a1:08:ed:61:9e:7a:94:85:89:
fc:01:af:03:bf:55:e0:38:f8:c3:4f:75:43:17:73:
f5:4a:06:36:64:fc:37:5c:da:f4:3a:45:6d:8d:4f:
73:3b:99:5b:e7:c0:38:51:48:ec:cf:ea:58:eb:72:
b0:3e:2f:d8:7e:29:b6:74:fc:35:4f:cc:f6:a4:c7:
b1:7b:21:18:b0:9d:3d:90:49:f5:b4:61:05:68:80:
5f:75:4d:2b:86:07:13:65:35:85:6e:1f:7c:9a:2b:
31:b0:2d:a4:70:29:5f:93:6d:a8:aa:31:a8:16:dc:
69:73:78:1b:f3:4c:fd:d0:71:0b:b7:0e:cb:f5:98:
1e:ea:58:cf:f6:31:2a:b0:37:df:c8:a3:c8:23:13:
0e:94:a3:e2:bc:1f:29:77:58:44:a7:53:8c:4a:f9:
84:f9:b1:66:34:8f:37:14:4f:f5:b3:80:3e:be:97:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:98:00:43:98:D3:9E:9C:10:88:DD:7A:FE:60:54:84:64:04:83
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9b:24:eb:ce:fa:29:12:7b:26:c7:43:62:b4:5d:9c:32:32:
93:0e:4c:e9:22:d7:c0:dc:b1:d9:60:a9:91:2d:5b:aa:74:51:
6f:ec:87:ea:5b:b7:3a:8a:d3:ec:0a:5a:68:75:28:d8:07:74:
9b:1b:23:8a:03:02:0b:ae:81:eb:7b:49:fc:dd:bd:22:53:d2:
6e:79:67:06:07:40:ac:46:a7:b7:fe:8b:59:f7:d0:47:92:f4:
fc:26:9c:f5:53:17:b7:da:96:67:e7:b4:e0:24:6d:21:cc:45:
08:a0:e0:53:20:8a:d6:99:40:e4:96:1b:c6:5e:42:38:01:ac:
0b:58:76:52:f9:2f:01:91:84:79:79:42:b7:0b:64:ea:9b:b9:
8e:32:1e:bc:90:29:79:60:48:9d:0a:3c:cd:73:2a:f5:76:ed:
3b:a4:ae:12:42:0a:8f:5d:88:c1:63:8e:d6:c9:7b:b4:2b:a4:
aa:cc:7b:c5:c2:4d:a5:25:ff:f6:1b:ac:e7:6b:6b:9e:5e:bf:
fd:4d:27:65:18:1d:cc:b9:ab:7b:99:6d:2c:0d:4e:61:6f:1f:
67:15:36:92:53:73:17:64:46:67:fe:9d:34:88:dd:61:26:1d:
85:2a:3c:67:f6:39:02:7d:69:b5:84:d8:5c:bb:68:da:ac:25:
33:70:f4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:20:21 2025 by rpki-client