Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: R5Bat4Ps8j9dY/PT/X7W5d7x7Z6qdjZiuFKCkgg05l8=
Subject key identifier: 9A:1D:CC:17:77:BF:1E:F2:24:40:05:FE:12:AF:F3:99:99:15:FA:BA
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 0196A3F7C9B87BA158FEA0626F655834EEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 10C6
Signing time: Tue 06 May 2025 05:00:47 +0000
Manifest this update: Tue 06 May 2025 05:00:47 +0000
Manifest next update: Wed 07 May 2025 05:00:47 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: bujVqROKPl5/4+58yXhixPDhZe4czx1EoLxJhbU6mIg=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:c9:b8:7b:a1:58:fe:a0:62:6f:65:58:34:ee:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: May 6 05:00:47 2025 GMT
Not After : May 7 05:00:47 2025 GMT
Subject: CN=9a1dcc1777bf1ef2244005fe12aff3999915faba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4c:12:36:57:3c:53:73:ea:fc:87:a1:87:ed:
1f:a2:9d:6f:9d:21:bf:27:d7:93:e3:07:a8:32:87:
76:fc:6d:80:85:cb:8e:20:ca:8e:5b:c6:f1:03:23:
f2:a5:3f:2c:96:73:07:be:0f:c3:79:44:55:30:5d:
77:47:df:a9:32:e0:91:65:41:95:3a:5d:23:eb:5b:
cd:3a:87:c0:35:a2:67:48:72:f8:72:2c:69:c0:fe:
61:75:c2:7c:b2:c1:0d:10:b4:3a:8f:a5:fa:58:84:
4d:a9:ca:74:00:a2:e5:0e:25:8b:cf:c8:42:91:1b:
51:08:25:68:f5:9e:3e:1b:31:db:a9:f9:a4:c9:f5:
93:1a:40:66:5e:f2:11:d9:3f:3f:c7:1a:fd:d0:5f:
a6:0f:b4:ed:77:ca:3c:73:c5:e1:7c:cd:49:43:10:
45:49:f9:1a:4b:64:4e:15:50:42:76:4d:01:02:73:
07:5c:84:f4:d0:c5:4d:8b:1f:e7:c6:cd:c7:23:71:
1d:7c:56:09:23:f0:26:88:63:e6:e9:07:b8:94:da:
ac:f5:36:cf:2a:f7:79:8c:38:11:8f:2d:52:34:62:
8a:60:94:78:f5:6a:68:c2:96:da:8b:24:78:e7:7e:
01:ec:ed:50:40:bb:ca:8c:6c:4d:35:13:09:8f:20:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:CC:17:77:BF:1E:F2:24:40:05:FE:12:AF:F3:99:99:15:FA:BA
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:c2:18:8e:f9:b5:a2:1c:00:8f:51:b6:d6:e6:a9:1b:2e:
3e:04:04:ca:c0:10:ac:15:a4:89:2a:f0:7b:ce:25:6c:b8:8d:
cc:a2:e8:39:bd:11:60:4e:b0:b8:bf:f7:12:bd:00:36:6a:bd:
fa:bd:fc:ae:77:13:28:c5:0b:a8:51:35:ad:01:6b:ee:7c:6a:
a3:13:c0:82:f0:66:b2:eb:63:ba:df:2c:d1:f7:d4:31:6d:87:
5c:58:fc:01:4b:d7:68:f2:e3:75:94:b5:68:0d:e3:44:6c:90:
d9:3f:f9:29:92:69:dc:0b:33:ac:45:c0:36:4e:d0:3c:11:f5:
5b:ef:ef:8d:0b:e2:4c:ea:c9:d8:93:12:f8:1f:bd:33:75:e9:
1e:e9:38:b0:02:0f:b3:2c:be:1a:97:b2:5e:82:52:fa:61:c4:
d1:96:d1:6f:89:cb:a5:fb:46:d2:dc:d3:12:07:9e:15:91:b8:
37:24:3e:e0:44:bd:e3:0e:0a:2c:a2:60:6d:5b:d3:c1:97:ef:
ec:a0:91:e1:a7:4a:c3:cc:11:1a:cc:c3:af:1f:c0:d6:b8:8d:
48:a6:a0:bb:9b:5b:dd:ac:1e:90:7a:f8:e3:34:f9:88:1a:ef:
f3:00:1c:65:1f:b4:b1:29:5c:01:1d:76:db:f6:a1:36:cc:59:
e2:f5:9d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:32:49 2025 by rpki-client