Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: yWj4mO8tikfSXPdLndEpwy+5kl02I4bPHpj7EcmUrc8=
Subject key identifier: 23:E5:33:DB:E8:81:3F:D2:C7:C6:D8:34:11:A8:92:B1:7E:E1:81:FE
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 0196B7B5CA9CC4CA3C71D32DDB7EAD90FECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 124A
Signing time: Sat 10 May 2025 01:01:06 +0000
Manifest this update: Sat 10 May 2025 01:01:06 +0000
Manifest next update: Sun 11 May 2025 01:01:06 +0000
Files and hashes: 1: 39NfMlHhrMH0zRyfZciiqR6mIWs.roa (hash: y/nnfdi8YIAf5ZNy+0/8yGvD2yVcPkZoC4V02tMUx4U=)
2: Kj_GYCscFmlVFFmndDSFfAkuFwY.roa (hash: 6AgFYxmuaSYjaFZUd8eJPcRWj8cD+HYqY6zQ9lI9XGM=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: /jWQXjo81xvBtigFCoC8MPPj30LkA3F3qYqVHtbrxBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:ca:9c:c4:ca:3c:71:d3:2d:db:7e:ad:90:fe:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: May 10 01:01:06 2025 GMT
Not After : May 11 01:01:06 2025 GMT
Subject: CN=23e533dbe8813fd2c7c6d83411a892b17ee181fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:2a:a2:c0:da:3d:23:29:45:75:32:5e:4c:
de:50:7f:23:da:eb:af:2f:47:ea:4c:8c:c8:67:f9:
7a:dd:65:84:ca:c0:b3:8c:5f:c1:9e:6d:e1:f9:cd:
45:e7:a6:ad:35:db:0f:5b:4f:58:3c:1f:2c:99:eb:
14:de:46:61:16:b6:1b:8d:5d:20:aa:ee:23:a5:6e:
34:6a:c1:bc:ab:44:31:c9:61:1b:25:fa:b2:85:46:
17:e5:59:e7:ad:1d:5b:d0:84:c0:c1:83:e0:87:9d:
9e:a2:6b:ad:91:b2:34:8f:ef:e1:56:9b:3e:b0:9a:
13:1c:65:73:28:83:40:22:2b:21:bd:7d:a4:a4:55:
3c:0e:8f:37:86:5a:09:65:4d:bd:4c:ed:ce:74:33:
39:fd:f1:e2:6a:21:56:c8:21:29:2f:2b:cf:97:49:
18:4e:13:92:92:02:57:a8:55:f0:64:79:32:4a:44:
2d:f4:08:ac:74:98:8a:20:9e:59:6e:40:dd:2a:58:
01:71:34:f7:32:c5:dd:ea:b6:d0:2e:a6:64:86:39:
73:3c:10:ad:41:3b:aa:b9:02:80:ee:43:1b:d5:68:
3e:5e:dd:ff:10:1e:b2:b0:67:20:79:a5:f1:22:dd:
75:75:69:4a:d0:b9:bb:ed:a1:70:96:18:fd:c7:54:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:33:DB:E8:81:3F:D2:C7:C6:D8:34:11:A8:92:B1:7E:E1:81:FE
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8e:5e:03:28:23:eb:6a:e1:04:d9:01:81:76:b8:1b:77:ec:
77:4e:35:b0:7b:5d:cd:98:71:3a:ef:4e:09:95:fe:b4:90:2a:
64:b3:99:6b:f2:80:ea:b0:74:b6:61:da:0b:5a:e4:02:9b:4e:
b0:74:e1:9b:d2:fb:78:50:53:79:19:75:ea:b5:53:37:d9:26:
12:41:35:14:c6:43:b5:2b:fc:2b:60:a3:16:e5:1f:4b:4e:bb:
bd:fb:6e:61:f7:26:d9:ce:5a:53:61:63:30:66:9a:d2:c6:d5:
53:23:5f:e7:7b:76:bd:96:ff:24:eb:a5:fb:19:fd:d4:89:82:
33:8d:fe:dd:dd:28:7e:b6:5e:a6:a2:8f:91:67:cf:bc:cf:7e:
4a:95:f9:8e:ae:a5:d5:d5:a1:3b:52:85:1b:33:0e:e5:70:0d:
9a:ef:ae:ee:5e:7e:e2:b8:bd:ad:d7:85:4c:ce:eb:68:33:64:
ca:e9:37:b8:fb:05:f7:10:58:18:e2:c5:2b:6a:33:f4:5f:46:
45:8d:40:43:1c:37:af:e1:4f:81:89:5a:d6:8f:04:0b:4d:b4:
ff:9c:0b:b1:03:dd:9f:1c:0a:25:57:c1:d5:c3:d1:ba:6b:1d:
ce:72:72:cf:4c:35:ea:13:10:79:c1:b0:56:6f:43:9a:a4:15:
16:5f:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:25:39 2025 by rpki-client