Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: uaGin9Ki5YCsLZ+eWfqFlRO9B8axe+4AWbmdebuoN4w=
Subject key identifier: BC:3A:64:06:B5:48:BD:2A:4C:47:56:21:E5:A5:DF:EE:29:A8:25:D4
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0196A4D32684FC9C8B76B58BE16B01506A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 09:00:23 +0000
Manifest this update: Tue 06 May 2025 09:00:23 +0000
Manifest next update: Wed 07 May 2025 09:00:23 +0000
Files and hashes: 1: F62WfIiTSrMtpYaKvt60lcQtkXw.roa (hash: YJlkN/VgWCfVi9nZv63jvrsBfGYFWAiYVqihH5uZ7es=)
2: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
3: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: YIU+xO3EA3QFK746bDu6jGxiuNKfRqcd6mZC+0MwI+Q=)
4: g69Pz3CuRumdk71XePj8dM2ccdQ.roa (hash: nnZldHhJmKFU3ji36X9uDUakGmtJCxtFpshmsg3zpfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:26:84:fc:9c:8b:76:b5:8b:e1:6b:01:50:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: May 6 09:00:23 2025 GMT
Not After : May 7 09:00:23 2025 GMT
Subject: CN=bc3a6406b548bd2a4c475621e5a5dfee29a825d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:3a:58:26:08:d0:84:73:df:cf:af:6f:b7:
e4:be:18:0b:31:e7:e2:23:75:2e:0c:ef:96:72:14:
6b:44:62:af:c3:64:73:08:7b:79:51:54:6d:33:f9:
49:ec:93:ab:ee:34:c7:a3:b9:63:52:4d:82:bb:64:
2e:c3:91:c1:72:8a:bb:d3:a9:f0:4e:ed:ad:9d:7a:
18:6c:09:ba:d1:4c:15:2d:db:90:54:5e:f5:ff:d7:
71:98:dc:c2:52:aa:26:35:12:23:22:cf:b7:56:1f:
6d:a7:81:93:29:ac:de:96:0a:66:55:91:ec:3e:c8:
aa:a6:cc:f8:4b:7a:e6:75:18:c6:b8:93:0e:e1:b9:
32:8f:0f:74:27:4c:d2:4d:67:3a:d6:12:b8:2d:af:
e3:38:84:04:97:03:ac:dc:f6:be:a4:51:35:6a:9a:
97:af:47:7a:d7:98:a3:74:07:41:5d:07:69:f1:54:
37:ba:62:1a:6c:a1:1a:d2:dd:c6:8a:ce:dd:b5:08:
e5:d9:ea:e2:91:8f:58:b4:1b:04:96:31:cf:57:6f:
44:51:68:96:e9:ee:ce:85:b7:41:e0:12:47:44:c8:
e7:71:89:63:51:9b:cd:58:15:64:44:7d:6c:be:c3:
b8:af:10:46:e4:fe:96:53:49:4a:d5:61:73:16:59:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3A:64:06:B5:48:BD:2A:4C:47:56:21:E5:A5:DF:EE:29:A8:25:D4
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c0:b4:0b:6e:70:1e:8d:80:2b:ba:a5:b5:42:73:d4:ca:35:
49:d0:71:76:24:44:40:dd:15:a9:51:73:01:4b:67:fa:ac:cf:
89:dc:59:b8:6f:7a:06:63:8c:68:85:0c:9f:30:00:b5:fc:ba:
b2:be:a8:2d:bf:0b:79:db:c6:ef:fb:76:8b:8f:25:a2:af:7c:
6b:f2:4a:f2:96:2a:ec:a6:b2:4d:50:96:ab:05:3e:ac:7c:2e:
39:b1:2e:4f:8f:6f:43:39:43:2d:77:bd:55:2f:f7:2b:db:52:
9d:05:8c:45:76:f2:0d:ff:3d:3f:6a:18:0b:07:5a:64:7e:5b:
78:87:dc:c0:61:c9:62:06:20:b5:64:72:a3:a8:b2:f6:41:7a:
af:03:56:7b:87:f9:15:a5:52:24:f2:f4:30:47:2e:99:ff:2d:
90:4c:d6:57:9a:76:4a:93:c5:c4:d0:97:b8:39:12:b5:49:fb:
79:ea:ac:bc:01:58:83:42:f1:5a:6f:db:45:f6:41:ca:02:c2:
4e:7d:bb:06:77:76:7f:72:30:c2:ac:3d:30:be:22:38:9f:c2:
39:a1:69:d0:02:4e:a9:25:08:b0:b5:05:60:a7:d6:61:7d:6b:
6b:6e:b3:04:38:69:cd:74:03:7b:2f:0c:aa:e8:fc:4e:3a:ff:
a1:68:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:35:56 2025 by rpki-client