Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: B3hXJqE4F2Unta0Bl6/NR+iWABaNEwwRmVrLCAOg/o8=
Subject key identifier: 57:B5:6C:37:CE:7D:B5:B1:6E:90:96:A2:78:CF:57:13:D2:32:E0:44
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 0196A578112BD1A1EED85FD39059C1583A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 12:00:31 +0000
Manifest this update: Tue 06 May 2025 12:00:31 +0000
Manifest next update: Wed 07 May 2025 12:00:31 +0000
Files and hashes: 1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: tYswSnDEEmIi9qm3G+WAiqb4jNuEnaJu1TGfUDhg5yE=)
2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:11:2b:d1:a1:ee:d8:5f:d3:90:59:c1:58:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: May 6 12:00:31 2025 GMT
Not After : May 7 12:00:31 2025 GMT
Subject: CN=57b56c37ce7db5b16e9096a278cf5713d232e044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:76:2d:cb:cd:cd:7e:d9:20:e1:8f:37:04:
36:11:0c:d8:25:9c:55:97:74:41:43:56:f8:13:5b:
96:2e:6f:68:e3:2e:8a:48:ff:fc:7f:7e:c3:7d:bc:
81:96:22:01:85:c6:56:de:ac:ea:3e:4d:aa:34:1e:
e7:7d:86:9b:2d:b1:2f:01:cb:d7:33:26:4f:f8:d3:
28:bc:45:e9:25:a1:3e:cb:21:a5:75:a8:40:de:0f:
b8:80:58:4b:45:9c:8d:19:5a:92:0a:71:d9:58:62:
a6:3c:48:cf:a7:c3:76:6b:07:25:64:96:a2:6c:63:
35:b3:ea:d5:7f:62:48:5a:41:56:89:8a:cf:ab:fe:
da:d6:c9:e2:ef:87:5d:1d:4c:78:84:b2:12:e9:39:
2c:91:5f:e1:28:2e:46:f6:e3:ac:7d:b3:d5:6d:5a:
be:4c:e8:44:64:f5:ed:ee:2d:cf:53:5e:cb:cd:25:
60:91:64:67:6e:9d:8e:9a:6d:89:6f:2b:0d:15:66:
80:61:a4:34:fc:62:8e:52:43:87:61:89:9a:71:91:
60:98:94:70:90:dd:53:6b:cc:ff:a2:49:ef:fd:76:
07:38:34:42:a1:a7:82:6e:75:96:52:60:5a:a4:67:
8c:f6:8a:6d:81:20:e5:64:cc:b2:df:84:ac:e1:ee:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:6C:37:CE:7D:B5:B1:6E:90:96:A2:78:CF:57:13:D2:32:E0:44
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ab:ae:51:54:9d:a3:9e:18:14:55:ef:6e:4c:fa:8f:5c:e5:
ad:72:58:6c:18:d3:43:63:78:59:83:f2:e6:93:ef:9b:c5:e3:
43:09:90:b7:c0:68:76:2d:f5:d7:ef:32:ac:6c:63:01:32:4c:
3b:d8:b6:07:cb:5d:2e:8b:1e:f5:11:8f:c9:bf:f4:c5:c2:6c:
1b:04:3a:dd:79:a7:98:b2:cc:86:d4:72:cf:ff:20:8d:c9:e2:
7d:89:27:87:fa:f8:89:79:a2:72:b3:95:30:7c:8f:d3:d8:e6:
c2:a1:17:ed:b7:9b:6e:97:db:10:d0:8b:e6:06:5c:09:0f:d1:
8b:51:40:29:b6:2e:75:04:83:c1:71:6b:15:96:9a:47:a4:50:
e4:82:80:eb:b7:08:ed:78:43:82:db:7d:df:6a:b3:47:85:25:
72:51:8e:f3:ea:3f:1f:e2:54:da:2e:ce:1d:b6:ee:20:4d:1a:
b3:d1:9a:ea:d8:23:00:e0:aa:d5:e1:61:23:3f:c5:d6:03:e5:
d5:1b:a5:81:7a:2f:b0:fb:9f:c9:bc:7b:2b:1f:dd:99:dc:a9:
e2:0f:d0:d2:41:df:00:29:a7:e3:a2:97:a4:d2:de:75:4c:09:
7b:a3:3e:15:36:fc:e9:78:48:58:9b:75:d0:e1:25:d1:43:33:
86:23:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:07:44 2025 by rpki-client