Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: rj0+dtL/89Trz7tDSRWuWsE1BZ+NqZf1pKl3OZswezk=
Subject key identifier: BA:EC:8C:36:51:D8:30:7A:8D:67:7D:D5:75:73:76:6A:2A:9E:D7:C5
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01969F3F6E6F50CD4ECCAF243BC6E7B36F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 152B
Signing time: Mon 05 May 2025 07:00:56 +0000
Manifest this update: Mon 05 May 2025 07:00:56 +0000
Manifest next update: Tue 06 May 2025 07:00:56 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: z9MFKyC1FhK4wo2amvA2etFb0G777DKwYBF+BNYvftY=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:6e:6f:50:cd:4e:cc:af:24:3b:c6:e7:b3:6f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: May 5 07:00:56 2025 GMT
Not After : May 6 07:00:56 2025 GMT
Subject: CN=baec8c3651d8307a8d677dd57573766a2a9ed7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:85:e2:0f:a5:5b:f5:c2:d1:eb:cc:20:4a:
84:ba:9a:19:27:eb:7a:1e:13:35:56:87:33:ab:4b:
e3:5a:72:f5:db:1f:35:5f:b9:50:87:eb:3d:0d:c4:
6c:a5:05:ca:bf:06:8a:c9:71:8d:d2:69:25:8a:30:
cf:05:d4:5d:5d:70:ca:7b:6a:49:6f:10:b3:15:b6:
13:8a:6d:c1:cd:5c:44:9f:0f:21:f0:c9:39:ac:66:
e0:a9:21:71:df:78:c8:fd:83:3e:8c:ef:0d:38:5c:
48:2c:24:13:a9:c1:4e:27:f7:de:b6:33:12:4f:10:
68:29:a0:f7:e9:64:28:b8:f1:97:2f:47:54:0c:71:
e4:aa:d1:a9:c8:01:b5:cc:91:7c:80:35:c3:bf:a7:
55:c1:fc:f7:be:18:af:76:c3:6a:6b:37:fd:d9:ee:
dc:ab:16:9e:c0:67:34:3e:25:e8:44:7b:03:e6:6b:
47:37:6b:e8:91:33:3b:09:f1:4b:75:31:e9:dd:15:
30:97:10:fd:ba:bc:b2:5e:f1:12:db:ab:ba:b3:4e:
e4:8a:d4:13:a8:84:a7:7d:5f:51:d5:85:1b:c8:76:
96:8a:9c:98:a7:be:26:0d:25:10:28:38:dd:9f:fd:
3b:cd:e1:38:7f:e5:6e:2b:1a:0d:c3:25:c0:c1:ef:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:8C:36:51:D8:30:7A:8D:67:7D:D5:75:73:76:6A:2A:9E:D7:C5
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cc:a2:27:a2:6a:7b:5e:43:5a:b3:25:9d:8f:6e:d8:68:d1:
b5:d6:9a:82:84:0c:e4:75:42:14:3b:23:9b:31:ba:a6:31:b5:
76:f9:fb:7a:7a:dc:8a:7b:87:26:3d:2c:01:d5:7c:32:d8:e8:
ae:a2:43:48:2b:62:cb:98:eb:91:8d:44:cf:c1:98:9d:ab:43:
03:77:8d:b0:87:6e:3d:06:6e:4e:45:2f:f2:ba:42:a1:b2:9e:
a6:f4:5c:65:7e:9c:8f:5e:61:b7:88:f5:7b:d2:ef:0b:ee:7f:
4e:f2:62:26:9a:cd:fc:bb:21:36:b6:e4:fc:c7:8b:f7:ad:4a:
e8:be:78:16:57:ee:dd:04:d8:c8:dd:ce:72:31:e2:d8:dd:00:
f7:6d:33:04:16:d1:3e:75:ba:af:10:de:10:dc:1d:f9:39:a7:
e3:cc:2e:22:6a:90:a5:89:e2:e8:28:f8:55:27:25:af:84:e3:
54:92:82:a4:53:d7:73:21:fd:f7:ea:7f:c7:92:77:6e:38:03:
b4:fa:7b:c8:01:83:ae:9c:3b:e8:03:ab:ec:47:ca:7f:4f:a3:
16:a1:68:fa:17:6f:f5:8a:5a:52:2b:10:c4:d6:e6:7a:3d:d9:
f9:5f:89:f4:c0:5c:7c:c6:4a:a2:e9:d8:f4:b5:ef:30:d4:46:
2c:76:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:21:33 2025 by rpki-client