Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: Y5Q93R01tcpBFO3SxrJeEjYwtR7Yvr/jf/aRBzqo+Bw=
Subject key identifier: 21:02:A4:40:5B:B3:C0:B8:8A:6A:A1:D2:B4:8E:50:80:62:C4:00:C2
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01969E6345DDE1CC11DD2CBDD43FCD8D1712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 03:00:28 +0000
Manifest this update: Mon 05 May 2025 03:00:28 +0000
Manifest next update: Tue 06 May 2025 03:00:28 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: RTzCeqp4zakWiExZy10LfhTnJ6k6ZAKec7UCrhEBN88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:45:dd:e1:cc:11:dd:2c:bd:d4:3f:cd:8d:17:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: May 5 03:00:28 2025 GMT
Not After : May 6 03:00:28 2025 GMT
Subject: CN=2102a4405bb3c0b88a6aa1d2b48e508062c400c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:03:22:d9:fb:fa:6e:d0:e6:ca:1a:31:9d:
3e:49:83:9f:bc:e6:00:df:46:fd:81:d8:7a:f7:aa:
7b:7b:12:c6:2f:2b:03:fb:40:be:e4:bf:c2:ff:0f:
84:19:d6:cb:07:ae:9e:a2:1d:b2:d1:1a:f2:0e:01:
d2:b7:88:ea:a7:11:72:14:85:2f:28:95:27:7c:23:
9e:6d:06:c4:78:cb:bf:b7:22:bb:21:dd:16:a4:1e:
b0:eb:7f:cd:b5:a7:92:f1:68:0c:07:4d:55:6f:4d:
99:77:6e:e6:50:e7:3c:92:a0:89:cb:89:95:23:72:
22:70:a5:8d:37:bc:e5:a9:f3:18:16:d2:25:d9:1a:
91:9a:45:62:ed:79:43:c3:eb:4d:65:8b:59:ed:5a:
e9:0a:f7:9d:54:ec:93:fa:70:79:ea:89:12:05:cb:
a1:3f:9b:9d:53:18:56:d4:0e:99:84:f8:2a:d8:ed:
55:f2:7f:86:ca:be:e1:f3:b3:7a:f3:c8:04:33:3a:
6a:57:28:be:af:d8:f6:ae:f1:28:2d:40:05:92:5b:
ca:6c:65:b5:b7:59:12:d0:4d:fd:0e:b0:07:7c:dc:
98:5b:26:6f:01:9b:ac:e0:cc:29:5f:7c:88:60:13:
1f:dc:72:4e:0e:c0:63:1a:0a:40:96:2a:66:2f:75:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:A4:40:5B:B3:C0:B8:8A:6A:A1:D2:B4:8E:50:80:62:C4:00:C2
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:36:cf:2c:bb:80:f0:cc:e8:84:3a:6b:e6:6e:88:0b:f3:d8:
7d:cd:46:bc:e8:d1:30:b4:2b:36:82:7b:b5:a5:a2:d4:29:28:
f1:0b:be:47:72:2d:01:64:33:7b:d7:78:12:10:a7:aa:63:ee:
a3:a7:1b:be:fe:11:c2:99:46:12:7b:12:ba:d7:3f:6d:62:8d:
f0:c5:02:84:85:7d:69:c2:37:08:d6:07:c1:19:e4:d7:5c:79:
d5:80:85:37:df:97:f8:65:5a:df:a4:89:32:6e:ab:ec:b6:05:
b9:0b:2b:57:a1:76:b1:be:55:00:d6:5d:d4:63:bb:4c:1f:a5:
e8:8a:9a:d6:44:4d:73:fa:c4:a5:47:0c:2c:e1:e5:b7:48:38:
29:45:66:05:9a:13:2a:44:ff:60:46:04:33:39:72:86:91:e0:
77:f0:d9:4d:6b:c2:a3:19:80:a4:2d:56:aa:03:5b:7c:20:57:
45:75:3c:78:ff:43:7c:1f:48:27:c3:bf:fb:8e:8d:46:d6:3c:
05:a4:57:e5:55:bb:16:ea:8a:a5:51:93:8c:91:bc:56:92:73:
c4:2c:e8:ed:53:5b:de:f5:ac:f0:8b:bb:ed:de:88:1c:6a:74:
21:63:89:5b:18:96:63:39:6e:5e:44:ae:d7:d7:28:e9:8b:ef:
18:4a:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:25 2025 by rpki-client