Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json)
Hash identifier: QHKMiraTIqKDzxQ2nR3c2hPNC1eb9dswOdCJW6Am/y8=
Subject key identifier: B4:D4:E4:2E:92:DF:A0:16:3A:8E:A6:7B:CC:EF:71:A1:7F:FA:A1:EC
Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Certificate serial: 0196C7CD7319DE4E14459CC85B95553874A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
Manifest number: 01FD
Signing time: Tue 13 May 2025 04:00:52 +0000
Manifest this update: Tue 13 May 2025 04:00:52 +0000
Manifest next update: Wed 14 May 2025 04:00:52 +0000
Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: wqaQJOAWqHANlth24xd/Dir21qIetSi6N4h8YSjQFrI=)
2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:73:19:de:4e:14:45:9c:c8:5b:95:55:38:74:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110
Validity
Not Before: May 13 04:00:52 2025 GMT
Not After : May 14 04:00:52 2025 GMT
Subject: CN=b4d4e42e92dfa0163a8ea67bccef71a17ffaa1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:62:e1:fd:c4:00:8d:dc:3f:05:a8:29:9a:
c0:a3:4f:e0:dd:09:9c:4f:19:0f:44:18:7c:f5:06:
54:fe:b7:d9:47:5a:f4:e2:d7:06:c1:37:f7:f4:c2:
eb:68:c2:cc:b8:bc:d2:4a:03:f0:29:76:93:4b:64:
46:55:ab:89:18:fa:16:26:5f:82:6c:5a:69:a0:6e:
10:a9:8b:ec:10:a3:a3:f2:aa:35:fa:52:ee:6f:76:
b6:1d:80:59:35:44:9d:38:48:29:2f:9e:d4:42:01:
25:1e:31:d6:4a:2d:d6:58:4e:22:4c:78:8e:53:19:
8a:61:5d:c8:fb:c6:bc:00:87:56:e8:1c:4f:3a:82:
dc:fa:26:08:d5:a7:dd:96:55:17:d1:84:44:1f:c3:
1d:30:11:55:69:4b:29:90:97:9d:3b:ed:8e:5d:f7:
dd:db:b4:d5:4b:67:55:0c:5b:c2:07:26:ab:4f:4f:
ce:90:b2:73:86:d3:1d:6c:55:92:cb:df:ae:b8:d6:
b9:20:1b:e7:79:ea:5b:20:b2:a8:b7:ec:c4:bb:39:
0d:02:4d:55:4d:1f:85:49:97:c8:fc:54:73:eb:2f:
52:a1:06:4a:58:ef:3a:7e:b1:50:97:79:b5:a0:36:
7a:5c:59:a7:7f:d2:f1:c2:2a:a4:9e:51:4a:4e:cf:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:E4:2E:92:DF:A0:16:3A:8E:A6:7B:CC:EF:71:A1:7F:FA:A1:EC
X509v3 Authority Key Identifier:
keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0e:33:c0:9d:91:53:05:93:f3:dc:aa:57:f3:e9:1a:6e:77:
e1:87:58:62:92:cf:e6:57:61:7c:58:95:dc:ab:2f:fc:95:6a:
47:09:32:2b:19:ad:81:8e:22:c8:db:ca:5e:f6:ac:ab:53:91:
12:e6:e6:b7:b5:7c:b3:ec:21:49:ab:c5:5e:7c:94:6f:85:b8:
fd:f3:84:70:a0:49:f2:36:f9:79:e8:b1:43:d8:a6:09:77:8d:
84:4e:95:02:f7:f3:f5:09:44:17:d6:ce:09:91:ab:cb:6a:f8:
15:a1:6d:a5:b9:a4:3d:85:40:e0:27:d0:29:a8:a9:5c:41:c4:
84:cb:ae:24:7b:3b:2b:40:10:99:54:b8:30:b9:dd:eb:53:1a:
d1:f7:c9:70:22:a6:8e:9b:e6:a1:a3:d5:86:33:c6:b3:14:5b:
8a:7d:ad:c9:b5:36:60:0b:09:94:54:77:9d:bc:67:05:3a:c9:
4d:85:65:6e:0b:f9:e3:d8:8f:8d:0a:b2:14:fe:11:c5:ee:b2:
d6:0e:42:58:96:4b:44:72:14:0e:4e:d6:2d:1a:72:b8:b3:1f:
3f:db:c1:53:58:44:4f:12:63:46:d0:59:59:2a:91:58:b8:5c:
29:22:ac:1b:82:69:a5:c8:ac:31:5a:15:1b:38:fc:70:fb:0d:
54:9a:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:10:47 2025 by rpki-client