Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: 1BPmrc7EyKOfHFAJQeTuHRy9nkY2FwUB3ww8cP6s28U=
Subject key identifier: 01:17:6C:A5:20:DA:87:56:E6:A7:67:ED:34:32:0A:0C:28:EC:AA:05
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 0196B2587A17DC5311BE3E620729670E974E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0B13
Signing time: Fri 09 May 2025 00:01:04 +0000
Manifest this update: Fri 09 May 2025 00:01:04 +0000
Manifest next update: Sat 10 May 2025 00:01:04 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 14Z6ZmqMfkqkzESDImmMtkegX49jd9LR+r7T6KuAtgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:7a:17:dc:53:11:be:3e:62:07:29:67:0e:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: May 9 00:01:04 2025 GMT
Not After : May 10 00:01:04 2025 GMT
Subject: CN=01176ca520da8756e6a767ed34320a0c28ecaa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:94:38:2a:06:dd:8a:b8:ae:3b:6d:be:5a:
92:68:b9:a7:c9:4d:eb:35:33:e5:74:ca:3e:e6:ec:
89:5a:f1:fa:aa:cb:db:61:10:23:c0:46:1c:70:05:
9e:4e:79:a3:69:51:e9:f8:b1:a7:26:45:87:b7:9a:
d4:8a:e0:3b:34:60:f2:48:55:e2:35:30:4d:3b:28:
ae:2d:81:ce:39:aa:cd:35:71:a6:48:07:3e:0a:41:
36:f6:e6:e7:a0:db:7d:f8:51:2a:44:69:37:81:f1:
08:d6:7c:eb:69:74:5c:e2:7b:f6:1f:55:c2:37:60:
21:b4:dd:77:6d:73:36:c1:ec:dd:a4:74:02:29:b2:
5c:df:f4:6a:3c:1e:1f:e4:4f:7a:0d:d7:ba:42:20:
38:15:4f:46:70:5a:c9:af:35:1e:e8:53:13:cd:0a:
07:c8:4c:18:b0:34:ea:7d:5d:2c:bc:4e:6e:e9:fe:
f7:1f:18:30:f5:3b:27:68:5c:6b:bf:eb:eb:b2:66:
a8:1a:5b:39:a1:39:51:85:22:1e:3a:eb:b7:ee:a0:
72:28:56:0c:94:62:a6:36:da:0c:fd:a0:4a:68:83:
fb:90:ab:db:ff:22:d5:e9:2c:1f:ea:99:b7:e1:e2:
84:75:b3:1a:ad:0b:c9:53:bb:ea:97:dd:ac:e3:19:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:17:6C:A5:20:DA:87:56:E6:A7:67:ED:34:32:0A:0C:28:EC:AA:05
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:24:d9:bf:1a:b8:ca:7d:b3:11:20:ca:cf:ed:db:83:e4:4a:
66:1a:24:84:5a:e8:26:87:08:58:81:d4:7c:1f:88:92:c8:87:
d1:92:3f:19:b6:ef:cd:62:81:e8:1e:fa:0a:ca:b6:01:18:05:
51:5d:41:03:75:65:fe:bc:20:93:83:04:35:6a:36:05:ba:0a:
37:ae:fc:c3:1c:13:6c:ac:b4:be:15:8b:fc:f6:6d:7d:18:7b:
4d:bc:a8:db:57:7e:c9:2b:41:28:cc:fc:96:b5:01:9b:ac:8e:
fe:8f:bf:90:57:c9:75:8a:7b:a4:9c:d2:12:63:ed:0f:a8:e5:
63:ae:33:e4:e1:70:64:9c:99:03:77:61:90:67:dc:bf:f0:d6:
ab:c7:ac:d2:03:fc:3e:7e:b0:dd:e6:f4:a3:f1:f4:c0:c1:0d:
60:b0:02:40:c4:06:f9:c5:df:92:99:a6:8a:a9:68:36:f6:62:
10:98:7d:17:02:47:74:44:65:ff:16:56:43:62:e9:86:35:a7:
5b:8a:bd:4c:46:36:af:bc:02:1c:c2:c8:08:4b:c4:44:76:8d:
5f:ef:f4:a1:37:8f:93:08:67:28:20:50:c7:0c:20:7b:e7:2f:
cc:cd:4d:de:04:40:0d:20:f6:51:22:da:d2:ae:e7:59:b3:5c:
4e:db:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:10:38 2025 by rpki-client