Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: NWjgOkb/Bah5zhr+f4805+uYotfxFBS5J+iMXdeEPUo=
Subject key identifier: 2F:D0:90:8D:0A:CC:C7:7A:30:80:39:2F:E6:5F:5A:55:DA:D6:96:BB
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 0196BDEE4A8354484D5CDD411EE43C082A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 091F
Signing time: Sun 11 May 2025 06:00:32 +0000
Manifest this update: Sun 11 May 2025 06:00:32 +0000
Manifest next update: Mon 12 May 2025 06:00:32 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: XiJTC9uZE64JLQ-yExGhaUIj9ts.roa (hash: GHx3lHTTCp62cSR5kKkHCq7uXPra6/CRt/DIw9vc7JY=)
3: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: dmlD+75t49OPSoAHDmvFdMEB8yPYBVURT+dJ9eK+94w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:4a:83:54:48:4d:5c:dd:41:1e:e4:3c:08:2a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: May 11 06:00:32 2025 GMT
Not After : May 12 06:00:32 2025 GMT
Subject: CN=2fd0908d0accc77a3080392fe65f5a55dad696bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c6:8b:25:02:7b:0c:52:bb:63:1a:57:20:0a:
91:f0:b8:b0:a0:7a:1b:79:7e:88:28:ff:f5:6a:db:
83:d2:cb:2d:33:54:3f:be:6b:16:18:2d:f6:e3:a8:
f0:9d:86:82:65:6a:ad:d6:1a:a9:59:40:66:cc:b0:
a4:f2:88:a4:82:10:e7:98:53:86:ae:c2:b8:01:b2:
1f:cb:74:1e:e8:49:57:b4:5a:46:fb:a0:ef:b1:a7:
ac:f0:48:82:be:2c:4a:7f:34:9d:e7:84:2b:e3:a0:
70:25:fd:c6:1c:dc:48:a9:14:ac:0c:eb:7b:38:0b:
ba:a9:6a:c8:bf:56:73:4c:a0:87:7a:3d:bb:82:7a:
05:9e:af:96:61:06:11:2f:54:ee:c9:43:fc:2a:3c:
22:67:f3:1c:ed:24:04:d1:a0:85:f5:de:c3:53:13:
bc:e1:cf:c1:5e:e9:9d:5a:9b:50:0d:a6:3d:37:7c:
93:08:6e:4b:95:f5:87:90:3f:ff:f3:54:70:fb:cc:
c7:f7:76:f8:4b:ff:7b:0f:97:77:9c:3b:e3:9b:eb:
c7:47:a5:95:01:53:96:2d:95:7f:fc:f6:31:b4:51:
e6:95:a8:77:d4:70:12:b2:6c:6b:22:1e:41:01:81:
af:4c:63:53:d0:40:4a:e8:f6:ec:9c:b1:c4:b2:85:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D0:90:8D:0A:CC:C7:7A:30:80:39:2F:E6:5F:5A:55:DA:D6:96:BB
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:71:a7:e3:ab:e5:d5:c1:1b:b3:6e:0e:32:6f:6f:e0:82:1b:
cd:1f:b4:e0:b6:81:51:7e:ae:0d:a2:a7:cb:bc:79:49:bf:8e:
26:f6:7d:38:ca:57:53:22:23:61:a0:b8:e3:0a:71:34:db:87:
91:1e:4b:ad:42:7d:4f:75:98:69:59:08:36:72:63:46:86:9b:
1c:84:5e:3c:f0:1b:43:bf:db:71:40:6e:dd:a2:57:11:3f:5f:
de:41:18:98:2a:5f:66:b6:95:ba:e3:4b:35:86:0c:78:d8:54:
20:b1:e5:3c:1e:92:71:a3:7d:aa:5e:cd:85:5e:0b:77:6f:a5:
86:4e:f6:5f:fd:79:3f:0c:b3:09:93:27:e8:13:73:84:6f:7a:
84:71:50:5c:72:ed:27:f9:3d:a8:c9:44:bf:74:74:d7:df:69:
e2:08:6e:94:92:2a:5a:ab:0e:04:ab:18:83:58:8d:6d:ea:9f:
be:94:7f:4e:d0:0e:64:dd:2e:81:c4:0f:20:ec:26:ae:df:1c:
13:38:c6:55:43:10:4a:b6:6e:e8:96:4e:7c:d0:23:e4:2e:f6:
ce:9e:67:e1:86:19:bc:3f:ad:d6:e0:39:49:f2:a7:d0:8a:3e:
7d:5f:1a:70:5d:7c:11:da:9b:af:60:0f:89:21:f4:eb:f0:46:
a4:94:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:05:21 2025 by rpki-client