Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: oHhKDoYaxtxyf5TYz1Y42tVKAHZXGz5EJCgekYQHQRg=
Subject key identifier: 83:DE:AD:55:04:42:42:25:A3:E2:3B:A5:C9:01:A8:E0:4A:7C:F1:FE
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 0196BC00607FD365A4A13C0106EA8C4CA90E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 153C
Signing time: Sat 10 May 2025 21:01:03 +0000
Manifest this update: Sat 10 May 2025 21:01:03 +0000
Manifest next update: Sun 11 May 2025 21:01:03 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: YTcQDxBYUPAmWxZlM2/5fILJ+OIqq/apVa4Z+Ry/+l8=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:60:7f:d3:65:a4:a1:3c:01:06:ea:8c:4c:a9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: May 10 21:01:03 2025 GMT
Not After : May 11 21:01:03 2025 GMT
Subject: CN=83dead5504424225a3e23ba5c901a8e04a7cf1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:ab:a0:1e:87:06:0a:84:e3:51:90:f8:d5:
22:b4:21:5c:47:f3:ff:cf:e2:3f:ef:dc:51:03:1c:
f4:6e:24:bf:e5:26:22:bb:1e:93:c5:3f:dc:c9:b5:
7d:f4:23:fa:0f:a9:27:f7:eb:a3:23:06:36:54:b8:
a7:be:a1:35:09:e0:17:d1:0c:64:25:35:15:04:b2:
e9:ea:c0:1e:1c:97:d6:ea:7c:34:2d:38:1b:4f:3e:
4b:76:47:f0:2b:c5:b6:14:27:d4:c6:d9:10:9b:c1:
d0:20:16:62:4f:42:25:27:e4:6a:c0:e1:b3:10:11:
50:a0:fd:38:f8:66:1b:eb:97:85:02:ea:78:81:74:
f4:fd:22:95:8a:ed:22:ab:42:01:20:8c:ec:88:19:
fa:ab:1f:f0:d9:44:ce:c0:ad:c3:98:11:e0:af:7b:
cf:be:46:0e:fb:a4:34:71:b4:d1:29:27:43:8c:4d:
30:b3:22:c1:c2:38:a6:b7:9a:31:67:91:44:58:86:
62:5c:81:52:31:61:82:f6:46:61:e4:62:b6:30:7c:
89:81:3e:fc:4a:8f:3e:3d:8f:fa:b3:4e:a1:62:f8:
92:74:8b:9a:3b:81:2b:cc:7c:51:4a:84:a2:d2:06:
4f:82:76:05:15:9b:da:c1:3c:08:d9:20:3b:97:1c:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:AD:55:04:42:42:25:A3:E2:3B:A5:C9:01:A8:E0:4A:7C:F1:FE
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:91:21:cb:f9:f2:19:e0:00:40:92:74:4d:cd:2e:74:5a:18:
45:2e:10:0a:a9:ab:63:72:4f:b4:7e:a0:22:b0:ed:ff:f0:1d:
ab:30:02:7d:87:7f:a0:47:9b:26:84:6b:80:e6:ff:f9:27:4b:
59:e0:a3:87:bd:f2:38:d9:15:8e:8e:2d:2d:82:fb:ad:d3:dd:
c4:f4:66:79:29:ab:3f:72:fd:5b:33:2b:22:47:dc:44:1c:27:
12:87:13:33:ae:a6:49:33:47:54:d8:7a:d0:ea:20:e1:68:ed:
83:28:1e:57:e6:bb:a8:3d:36:68:67:89:2a:8e:07:52:18:94:
49:2a:b2:b4:29:45:24:37:e5:d8:38:7d:2b:71:5b:eb:da:eb:
26:6a:1a:72:c5:b4:7e:32:9d:e7:b8:ac:ff:4b:db:42:6c:4b:
1f:b7:28:db:e4:29:c9:64:9e:a1:19:9d:2f:a7:d0:3d:74:3b:
a5:cd:dd:03:b9:e8:c5:11:fb:0e:07:4e:08:0b:f2:29:2f:9c:
94:21:94:eb:2e:b1:d5:32:29:3e:62:a3:34:a6:46:4b:62:dd:
7c:a6:c8:64:6d:b5:15:d3:bb:70:a1:bb:d7:e9:6b:6a:d3:e9:
8d:f1:b4:5d:39:26:c4:01:da:6c:e9:0f:f1:19:cb:59:f5:37:
aa:e1:d2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:17:33 2025 by rpki-client