Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
File: XU_MyZTpQTHcEb_JXGRYWzReAfU.mft (raw, json)
Hash identifier: 52T38s0hdDRxrvR2pGeuNJKKQ6e6S9qlF6quGj0VeGk=
Subject key identifier: 84:3B:AA:AC:1F:07:0F:A3:EF:74:8A:7A:14:D7:41:4A:A4:2B:2D:14
Authority key identifier: 5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
Certificate issuer: /CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Certificate serial: 0196A0F64349B1829DEDA4C4E5C35C063DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 15:00:15 +0000
Manifest this update: Mon 05 May 2025 15:00:15 +0000
Manifest next update: Tue 06 May 2025 15:00:15 +0000
Files and hashes: 1: 1-QQKoKkBsfVHiC7zwZN32LAwqdI.roa (hash: su6NuoB2BV5792mo+Gkr7XFZc0UAJCglrf+FguhXwQA=)
2: 2N-7q5TUgtNJjxm0U-P63yRLHRY.roa (hash: G9pkPwLHZYXpkwsIscu0rjXE3l/R0/mrWBJWr5iNXtU=)
3: XU_MyZTpQTHcEb_JXGRYWzReAfU.crl (hash: nNsH8Jykjm8DAJjhklCWXOtB8CE2SO5ZnkaICVrxhrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:43:49:b1:82:9d:ed:a4:c4:e5:c3:5c:06:3d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Validity
Not Before: May 5 15:00:15 2025 GMT
Not After : May 6 15:00:15 2025 GMT
Subject: CN=843baaac1f070fa3ef748a7a14d7414aa42b2d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:0b:8d:34:e5:e1:f0:2d:cc:48:4a:b7:b8:
99:d2:d3:17:1a:e2:a6:93:80:4f:d5:14:41:3d:c7:
58:43:14:32:a8:ab:f0:bd:5c:a5:77:b6:90:89:5e:
4b:61:b6:99:53:fb:e4:01:be:d6:dd:dc:23:c8:0a:
d5:94:57:92:66:28:22:ce:d2:f6:95:ed:45:6c:a1:
23:a9:eb:9c:b0:23:41:31:a5:fd:d4:ab:07:30:a9:
b5:88:86:6b:dd:77:fc:41:ec:ca:d4:3e:2b:41:b1:
7a:18:e1:f2:c3:61:9d:3b:63:b1:e7:c4:69:d1:a8:
7b:d2:ba:bb:81:d1:ff:c0:d8:c7:da:ca:81:39:01:
fa:88:07:ec:8d:94:97:d1:35:6a:e2:93:8c:65:30:
ff:02:65:82:40:3f:45:42:c9:b9:52:bb:cf:4c:e2:
76:f4:71:62:df:70:a9:7f:42:5f:f9:91:81:5b:d2:
b5:11:86:53:4c:e1:83:76:f9:e1:fb:e1:6f:43:4d:
27:68:06:a7:b8:25:a2:d4:a4:ae:a6:ff:34:0c:c3:
04:a2:1e:0f:1f:44:ac:36:c2:29:35:da:ed:af:5f:
8d:52:c4:d8:57:0b:35:66:aa:25:73:fb:19:1e:3b:
2e:63:b1:b4:85:2e:12:35:fb:c1:b6:87:22:22:96:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:AA:AC:1F:07:0F:A3:EF:74:8A:7A:14:D7:41:4A:A4:2B:2D:14
X509v3 Authority Key Identifier:
keyid:5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:13:b2:26:d2:b7:87:52:18:20:51:51:d7:06:23:00:cb:69:
0d:3a:cc:d6:66:ee:5b:1f:6f:f5:f7:a5:21:75:82:39:63:d4:
6a:a6:b8:7d:39:f4:05:84:6b:dc:90:66:ce:7f:5f:68:5c:9a:
cc:a4:cc:04:21:45:2d:7b:0b:20:53:32:65:27:63:2c:12:cf:
cb:70:41:1b:ac:ba:78:92:76:7c:c0:be:17:00:6e:99:97:31:
d3:99:1a:0d:2e:11:80:a6:ea:8d:25:62:eb:e7:46:94:2d:ef:
f3:08:38:34:e5:ed:26:0f:a8:09:25:7a:3d:46:2c:e7:bc:a0:
04:6d:33:47:a7:2f:3a:a1:04:37:d7:2c:54:0b:99:b5:d5:fb:
b7:e0:f6:60:6e:a5:0e:dd:62:fc:f6:29:5f:41:94:97:a8:87:
f7:a3:46:5c:70:98:bd:30:c2:3d:88:3d:8d:f2:7a:71:95:7f:
f3:06:bf:e3:49:e0:3e:d8:ed:de:50:46:45:ba:65:28:70:f8:
65:0b:eb:a0:a9:6e:af:e8:04:69:ae:95:23:01:44:4f:00:4a:
6f:7e:4d:80:75:48:d0:e4:f8:0c:08:0e:c6:96:ba:6e:b9:e5:
15:0c:bd:2a:1e:24:da:7f:42:6f:55:16:3b:ce:47:20:35:02:
4b:32:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:18:43 2025 by rpki-client