Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: E0WYl6GH96V61chg6vQjBRqZGbsTPD1drqkYkC1ibQQ=
Subject key identifier: 1A:A6:58:A9:8E:2D:62:F2:F4:1C:1F:20:17:5E:5E:A2:D4:41:02:10
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 0196BF6F9DD6FD9F893229E595F42C679017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 0E53
Signing time: Sun 11 May 2025 13:01:25 +0000
Manifest this update: Sun 11 May 2025 13:01:25 +0000
Manifest next update: Mon 12 May 2025 13:01:25 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: +nI9uAyTKMoguSc2gmuHE9B21FmBuZQuRO7mXzALaxs=)
3: atQq239lyy1_USnx5HxIvR_xCQ0.roa (hash: 2VBlcsxe+dkdGVdmp9n4L26XGB1hz2kRzV8Tog1oGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:9d:d6:fd:9f:89:32:29:e5:95:f4:2c:67:90:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: May 11 13:01:25 2025 GMT
Not After : May 12 13:01:25 2025 GMT
Subject: CN=1aa658a98e2d62f2f41c1f20175e5ea2d4410210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c0:ca:72:1d:10:91:94:6c:4a:54:88:7b:fd:
fd:7a:96:7c:b1:47:b6:7e:90:5a:db:85:52:62:64:
db:7b:87:95:11:3f:81:57:b9:76:34:69:64:06:c7:
40:90:57:34:1b:76:ce:44:cd:02:b6:ee:5a:bc:53:
44:a9:ce:7e:ae:b4:2e:73:12:03:93:92:96:a2:c9:
dc:08:90:9c:b5:38:71:29:c9:eb:18:ce:02:dd:38:
93:fb:6d:5d:f0:0b:55:8a:3f:cc:d7:00:73:a6:3f:
40:52:db:d2:8a:6c:28:a5:9f:f9:32:4f:5d:21:42:
fb:ab:2b:48:d6:a3:a3:20:90:31:0b:eb:3b:fb:3d:
98:b1:9d:6a:90:06:25:66:4f:1f:a9:0e:00:ea:8f:
f0:7f:77:eb:1b:7d:a6:48:24:4a:79:0a:3b:ca:8d:
65:af:dd:55:3b:c2:6e:dc:57:15:df:1e:2a:51:87:
d5:38:5a:c8:8e:6b:af:93:69:33:20:1c:83:78:05:
c1:e8:16:02:b5:e8:3b:52:47:60:21:38:5b:dd:f2:
a0:33:ae:b3:e6:f4:3b:05:cc:2b:ac:40:65:bb:34:
bc:82:33:10:88:0f:c1:e7:2d:4f:c0:81:21:3c:1c:
87:de:46:89:97:00:f2:05:ba:15:de:05:6a:72:4b:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:58:A9:8E:2D:62:F2:F4:1C:1F:20:17:5E:5E:A2:D4:41:02:10
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:07:d3:ce:42:9e:02:d8:9c:9d:54:72:a1:84:e5:69:ce:
3e:c7:06:6f:ca:26:3a:04:90:28:de:44:20:24:12:bb:b0:69:
e8:ad:f5:25:52:3e:d6:e2:69:47:ed:dd:8d:6d:2a:0f:e2:f8:
bc:fb:95:9c:0c:9a:6d:57:95:ab:11:d6:19:0d:7e:34:0d:fb:
af:67:f8:e6:b0:9f:6f:c1:89:ea:6b:55:94:40:68:14:30:c5:
b6:f4:0e:28:82:ff:ab:8e:30:ca:7b:f8:dc:8e:14:48:1e:12:
0f:49:92:61:00:0a:ab:b7:63:da:19:86:4e:41:40:c6:a0:a9:
89:4f:90:53:ab:fa:ab:89:93:6b:36:7a:ae:0d:85:00:15:ac:
10:9a:4b:19:8e:50:71:99:0d:94:bb:d3:c1:96:98:91:d7:63:
a8:9e:3c:48:53:c1:31:45:87:de:e6:ba:38:c4:a5:c3:79:c5:
fe:a7:74:85:b0:09:66:dd:07:5b:37:2c:f1:1b:b7:3d:bf:8a:
cb:2b:58:3d:c2:35:a4:34:e2:f5:d8:16:f8:27:4b:48:08:5b:
dd:ed:1a:c0:e1:8e:5a:69:67:f5:ca:f8:e5:38:54:0c:5d:e9:
96:8a:83:64:78:0c:2d:b7:63:38:62:b6:b2:96:62:48:74:e6:
eb:11:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:56:01 2025 by rpki-client