Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: oC0iUYKb7qwBO8XsyI/Fcmh+5Xpp/ICsqhqwgjffY+M=
Subject key identifier: 96:56:EC:EA:07:28:66:F4:C1:FB:97:D4:C6:A3:12:C1:3E:57:F8:06
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01969D1A2B252BC125C281092F168E8EA51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 21:00:59 +0000
Manifest this update: Sun 04 May 2025 21:00:59 +0000
Manifest next update: Mon 05 May 2025 21:00:59 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: Kj/0iiHpeYtxA3RSJYt+L00RuxrNN4IJtB7+G/iHqhI=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:2b:25:2b:c1:25:c2:81:09:2f:16:8e:8e:a5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: May 4 21:00:59 2025 GMT
Not After : May 5 21:00:59 2025 GMT
Subject: CN=9656ecea072866f4c1fb97d4c6a312c13e57f806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:0c:06:ab:a3:b7:24:71:d1:c9:9b:7c:bb:
8f:3a:de:dd:6e:c5:2e:66:34:99:7c:18:22:19:1d:
7a:2b:ca:2c:aa:e5:3c:1e:0b:99:de:ee:2e:e3:64:
12:a9:70:fe:57:2f:64:63:a8:2f:ed:cb:cf:52:b4:
fb:08:10:8e:4e:f0:75:cb:40:7e:4b:08:1b:dd:7a:
d9:ac:9e:b7:7e:5d:d1:75:d0:b2:1d:bb:24:c7:1e:
55:6a:59:51:0f:9c:52:9a:66:92:60:31:f2:c7:80:
fa:b7:57:40:b9:d1:78:b7:0f:f3:ff:19:80:32:8e:
43:08:77:74:07:68:f7:8b:72:0f:5e:44:e2:95:71:
bb:a2:8e:f1:c3:1b:77:9f:13:90:21:bb:ba:11:28:
d3:11:cd:06:c9:7c:81:c8:af:bf:d8:eb:9d:f4:16:
63:13:24:a2:e5:a2:fc:fd:f4:ad:cf:09:19:8a:06:
c1:e5:56:a1:15:0c:65:48:38:3e:8c:c3:2c:38:ca:
c4:f2:c8:df:39:f2:ee:5f:1d:80:64:1b:8e:dd:10:
fb:7a:2b:78:4c:47:c8:79:c1:c7:63:6d:a3:6a:d4:
8d:d6:3c:28:b1:0f:44:b9:dd:fe:b0:57:7b:2e:01:
2a:b3:0c:ff:f0:b7:88:b4:f6:48:83:7c:0b:3e:8d:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:EC:EA:07:28:66:F4:C1:FB:97:D4:C6:A3:12:C1:3E:57:F8:06
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8e:53:56:d1:06:c7:99:4c:63:5e:b3:e7:e8:26:c2:90:4a:
4b:b3:71:2d:51:00:45:29:0b:46:cc:63:3f:3b:58:ac:67:3f:
d2:56:8f:d0:81:90:b0:d7:cc:aa:91:07:a5:7a:1a:c7:d2:12:
b2:56:c1:e7:83:2d:a8:6b:c2:95:51:56:59:05:3d:20:98:20:
6c:59:e6:98:61:24:1f:7d:6c:4f:88:66:02:f5:3c:03:c9:b2:
20:58:d0:33:52:7a:dd:0b:bd:4d:45:c1:45:57:b9:62:9c:0e:
5b:27:bd:7c:08:c0:96:af:82:9b:16:39:f5:e7:fc:c2:b0:a0:
23:6b:99:ec:0b:2d:5c:c4:b1:fd:a0:34:83:ca:29:c7:c7:ee:
1a:6a:1e:1d:df:89:9b:19:7d:e1:26:0d:25:7d:98:89:95:90:
14:e5:a5:38:93:d3:ff:3f:5c:c3:92:17:68:44:03:4f:67:91:
f2:c3:08:8b:60:7b:70:ec:da:0d:5b:70:78:1d:a6:d2:bc:00:
85:10:cb:a8:31:82:b5:df:42:45:05:16:35:1c:16:16:a9:81:
0a:b6:84:ce:b0:ee:fc:c2:24:a6:79:7e:73:89:18:b5:a5:c6:
cf:91:76:04:1d:3d:5c:fd:fe:fe:48:04:a0:a7:1c:e0:c5:81:
35:30:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:39:59 2025 by rpki-client