Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: Xx5K16NcrIPmaQgM8uYbjphw4nxzBw9ivqTztnTaBvo=
Subject key identifier: 28:31:3B:78:E2:C7:EB:FC:81:EE:03:9A:48:87:B4:9F:A6:45:E3:71
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 0196B96CD0251CE506EF345AD2FD1B6C77E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0755
Signing time: Sat 10 May 2025 09:00:38 +0000
Manifest this update: Sat 10 May 2025 09:00:38 +0000
Manifest next update: Sun 11 May 2025 09:00:38 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: t4Jx3GLRDd4UzEEYxE1Dw524sO7oHCaCw3llo8B54RQ=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:d0:25:1c:e5:06:ef:34:5a:d2:fd:1b:6c:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: May 10 09:00:38 2025 GMT
Not After : May 11 09:00:38 2025 GMT
Subject: CN=28313b78e2c7ebfc81ee039a4887b49fa645e371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:5f:1e:e7:b7:05:4e:6d:e0:79:d9:a7:85:
ba:83:c7:16:62:dd:6b:42:3b:a0:44:31:e2:58:0f:
40:4a:94:c9:d8:e4:6f:ac:7b:12:a1:66:48:76:43:
3b:6e:c9:48:6a:59:9f:98:ab:0f:1b:32:a9:eb:d5:
42:e2:12:94:15:0a:2a:b8:e1:50:30:cf:f2:cf:05:
7a:29:9d:92:94:df:89:f7:54:4d:ad:07:e1:3b:24:
46:e4:2a:39:83:83:ae:fa:cd:d5:c1:7a:22:41:c2:
6d:d5:f6:70:e9:70:50:66:2a:ab:d4:ad:b7:9a:fb:
45:55:ef:95:05:8a:38:ff:13:08:01:c2:75:3f:fa:
33:1e:3d:e7:e2:05:ed:c4:00:ea:a2:32:2a:43:ec:
b0:ec:b2:8e:52:04:bc:cb:ff:d9:18:74:a1:94:b8:
7e:08:bd:47:7b:70:c6:68:91:35:e4:6f:46:d3:f3:
51:22:4c:e2:a7:69:14:b2:e4:16:6b:7a:12:d7:5a:
8e:01:2d:a6:88:64:2a:73:ce:81:6a:eb:4b:11:48:
47:b3:b6:fd:3e:d6:e1:27:1d:9e:e4:aa:49:0d:06:
87:28:1c:4c:d1:8e:91:8f:e3:c9:8a:55:c6:46:de:
0e:3b:38:b9:ca:69:95:4c:ad:ac:4e:02:ce:d5:77:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:3B:78:E2:C7:EB:FC:81:EE:03:9A:48:87:B4:9F:A6:45:E3:71
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:57:5a:8f:30:66:37:fb:7d:8b:4b:59:86:40:ee:79:4d:76:
2f:4e:c2:c8:38:d2:6f:12:ed:47:d5:a4:11:bb:77:25:d9:cc:
98:70:97:08:86:40:ed:a1:55:2e:c7:59:4e:13:4c:3d:32:18:
8b:20:1d:ec:2d:61:27:06:21:d4:a7:64:b5:2d:eb:8d:d5:21:
2b:73:e6:25:1e:48:6f:5a:d8:c6:98:07:e6:a8:01:30:0f:61:
71:33:74:7f:cb:14:d1:8e:99:a8:9f:df:2f:cd:73:88:ea:a0:
58:57:c2:1c:8b:1c:02:34:5a:36:22:9f:82:17:98:1b:9d:2d:
f3:28:b6:29:a3:ab:ab:31:2d:4b:59:fc:5d:60:fb:f5:0b:16:
e7:f1:34:6e:9b:5a:fe:75:0e:41:8d:c7:51:4f:7e:80:2f:13:
1b:91:f7:64:41:54:9f:1c:b1:ae:28:84:de:80:65:0a:65:20:
87:9f:b7:d5:e2:db:a0:9d:17:76:e1:96:42:9a:81:05:1b:d0:
e3:91:ee:79:f2:42:45:e8:fb:7e:a5:22:9e:d9:99:26:f8:0e:
bf:7a:19:c2:a5:0b:cc:44:38:87:eb:e3:6b:4a:f7:4e:44:e6:
e6:6f:56:bd:1f:e2:e9:d0:90:c3:fa:6e:c6:ba:90:0c:57:6c:
fd:a4:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:24:32 2025 by rpki-client