Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: KI4+5aWH9i9SjINCvTP4VShepHVzoIokkljhz40SkJ4=
Subject key identifier: D5:20:06:BF:C3:A8:77:38:D9:AE:92:A4:29:C6:5F:C8:85:18:EB:34
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 0196AAD5488C497F84DB7D6A90655F2FD2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 13:00:26 +0000
Manifest this update: Wed 07 May 2025 13:00:26 +0000
Manifest next update: Thu 08 May 2025 13:00:26 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: Q8byJfqDNErU6tG/dH/NWfAO09u7go9WipdRKaUrVSM=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:48:8c:49:7f:84:db:7d:6a:90:65:5f:2f:d2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: May 7 13:00:26 2025 GMT
Not After : May 8 13:00:26 2025 GMT
Subject: CN=d52006bfc3a87738d9ae92a429c65fc88518eb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:f9:9d:85:7d:7a:27:ed:74:8e:fc:3b:87:
fb:f8:02:8f:87:40:da:ef:bc:67:14:d5:ea:64:4f:
93:e1:fe:cf:66:fe:7e:f3:f9:e6:ee:5f:8c:c7:41:
e8:63:25:01:e7:d6:04:26:ba:a2:43:50:e4:60:b7:
f8:bd:39:8d:db:b2:99:7b:a5:a0:8b:93:d5:84:80:
84:87:21:4c:72:bd:1f:82:c6:e9:f6:f7:f3:dd:3b:
6c:a6:61:05:38:33:ff:5e:82:b6:72:4c:e6:eb:4c:
32:87:37:47:71:db:9e:d0:0e:7a:d7:06:25:2f:ba:
84:a1:4f:a3:f3:2d:a1:da:ef:a8:52:9c:af:e9:63:
86:fe:1c:13:1b:50:9d:8f:63:73:2e:b8:f2:35:34:
16:e6:e1:4f:56:79:e0:53:d4:8e:54:5d:d2:81:28:
bc:cc:04:9a:e0:17:ad:ca:33:ba:c6:80:ca:e1:bd:
87:2f:1d:6a:a1:d5:be:df:18:0d:95:36:4f:10:4b:
c0:17:db:f6:55:f5:ff:49:6a:86:72:e5:97:d2:c1:
d6:92:52:d8:ba:13:94:70:c8:85:8c:a2:ad:e1:9f:
f0:0a:6f:62:16:86:62:49:10:89:dd:55:8f:18:78:
93:43:a6:b2:66:a4:f7:ef:b7:e8:62:3f:ba:7b:ae:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:20:06:BF:C3:A8:77:38:D9:AE:92:A4:29:C6:5F:C8:85:18:EB:34
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:80:22:08:c4:9a:ca:ce:d1:47:92:2e:02:67:91:de:86:e0:
a4:2c:2c:18:6c:e9:02:78:ea:00:ad:ea:30:ee:66:d8:95:0e:
31:55:42:a0:45:1b:85:ec:63:61:50:62:7d:13:44:c7:2a:de:
aa:95:ac:60:09:ce:9f:d5:93:d9:c3:7c:4e:bf:7c:e2:49:ca:
79:a4:e3:91:d3:b7:aa:eb:b4:f6:b4:ea:e3:b9:f2:d2:98:5f:
13:6b:ab:51:bc:e9:09:6e:7b:a7:ee:11:bd:16:fa:66:80:bc:
2b:57:f3:7d:f4:ef:78:ca:96:01:3f:3c:b0:c4:42:37:d7:83:
af:76:cc:0b:0c:5a:13:b9:8f:47:d5:f6:30:d0:80:d5:38:7e:
4e:4b:db:3e:4a:5d:d1:ce:06:3b:12:40:c4:06:1c:f6:e6:c7:
c5:af:ba:4a:01:3e:0b:67:55:36:15:27:c3:a5:0c:7d:ae:64:
0f:e6:3a:65:af:b4:09:e7:7b:3d:db:5b:a4:a6:4c:67:51:91:
93:ac:f1:74:2e:8d:f6:44:fd:3f:55:88:fc:e1:52:91:26:2c:
03:4b:4e:6e:aa:07:79:be:d1:4a:31:79:74:8b:82:5d:31:d3:
b9:32:2d:c3:dd:e8:7d:b4:9e:87:47:8d:e1:3f:be:dc:bd:82:
21:96:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:22:49 2025 by rpki-client