Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: j+IqmgMmwv2+atuMixFwTpLyVO0aKFGEMbA7vQytM0w=
Subject key identifier: 81:BA:C6:89:A4:01:BD:BD:2A:35:E2:ED:C6:7D:7C:EA:2A:C9:75:01
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 0196B9A41464AC026965A6B923A9F234895A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 0139
Signing time: Sat 10 May 2025 10:01:00 +0000
Manifest this update: Sat 10 May 2025 10:01:00 +0000
Manifest next update: Sun 11 May 2025 10:01:00 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: DAlTAd0R1vK/LHrjp0jR9XDbgdlEgVC2Ivd9YCaQQeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:14:64:ac:02:69:65:a6:b9:23:a9:f2:34:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: May 10 10:01:00 2025 GMT
Not After : May 11 10:01:00 2025 GMT
Subject: CN=81bac689a401bdbd2a35e2edc67d7cea2ac97501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:a6:fb:1b:b2:e1:49:40:d2:05:d4:b8:6c:
bd:e2:4b:27:90:2d:ac:5b:e6:97:f0:35:f9:4f:6f:
16:dd:46:01:b9:61:ff:71:8a:36:a2:8b:dc:dd:6e:
f0:b7:d8:ee:62:f6:c0:e1:82:1d:74:7a:15:87:83:
8b:3b:14:59:83:9e:84:f5:6f:e7:d4:be:ef:99:55:
05:17:e1:a6:11:71:5b:37:1e:f3:64:d3:78:85:95:
35:80:77:68:36:4f:53:71:01:34:70:4c:4a:9a:1b:
c2:aa:91:ee:6f:da:6e:77:86:11:44:91:30:d2:ad:
57:e7:9b:6e:1c:64:b2:34:7f:fa:0f:67:b5:3a:5a:
30:08:a4:81:af:9e:e8:f0:48:1f:70:cd:ee:04:a0:
91:51:9e:00:84:18:cd:f3:43:c1:d9:10:71:6e:27:
54:bb:d2:82:50:fa:53:c6:2d:39:76:34:9a:18:2b:
9f:ba:56:c3:84:67:17:be:25:b7:25:98:55:e1:db:
16:db:ab:38:77:3f:42:f7:0f:65:50:f5:5d:70:9c:
4e:1c:c2:9d:7b:50:0c:26:6b:08:d7:f0:64:5f:23:
01:be:33:22:26:e9:b9:7a:83:91:96:ce:84:33:c4:
14:70:a4:31:58:62:cf:c0:7a:e2:1a:7c:0c:75:52:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BA:C6:89:A4:01:BD:BD:2A:35:E2:ED:C6:7D:7C:EA:2A:C9:75:01
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:79:64:2a:4e:5a:82:89:40:fc:f0:33:5b:58:f2:c5:26:
8e:d4:bd:de:b7:6f:1d:13:66:b6:bf:d5:58:cb:08:f5:49:0f:
99:03:21:f9:0d:8d:dc:55:f2:28:01:a8:fc:86:4f:a2:4f:49:
38:a0:14:92:ee:b1:b9:52:84:1a:dd:dc:24:84:ea:45:7e:f2:
dc:31:8c:6d:bf:0b:0a:dd:4a:99:9f:1e:21:23:0d:4a:2e:72:
2b:0e:ea:83:5f:c2:3e:6f:b3:38:ce:f3:b1:40:a5:ef:aa:1e:
b9:3e:f3:1a:10:7e:c6:f0:92:c3:e3:57:8d:d7:83:31:8f:d1:
9f:26:a6:d4:ec:90:7a:8d:78:93:18:ab:75:4f:dc:66:98:c7:
8d:09:55:da:74:20:db:0f:a9:b6:8d:3c:10:12:0c:82:90:31:
6f:09:10:fd:ff:3a:30:47:d0:32:62:09:09:6b:2b:6c:c6:ae:
1e:af:52:40:d4:cf:d8:70:c3:4e:1a:60:e2:ee:a2:9b:e6:27:
e8:03:54:dd:4e:21:7b:b4:32:d0:fd:3c:fb:33:d6:b9:5e:ad:
5b:61:2b:5c:18:6c:2f:04:99:02:7b:25:ba:9b:3b:d2:1f:25:
62:1e:dd:04:3f:fd:71:e8:58:60:27:40:49:cc:e5:f8:6c:a8:
e8:5d:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:01:11 2025 by rpki-client