Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: ewJT1u8HknUW0wHjjxr8FdK+o+BN29Yz+3xgfXulM2o=
Subject key identifier: 57:66:4D:B0:3A:DA:9E:52:3B:A5:43:B3:4F:2C:20:6A:B4:10:0B:A8
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 01964D7E8F3CE6D8D6EE96250BA92D1B33D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 0101
Signing time: Sat 19 Apr 2025 10:01:01 +0000
Manifest this update: Sat 19 Apr 2025 10:01:01 +0000
Manifest next update: Sun 20 Apr 2025 10:01:01 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: zALFU4U5OTFSS0wgygX+PnMj5PsUAxMtj7GsyPI74ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:8f:3c:e6:d8:d6:ee:96:25:0b:a9:2d:1b:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Apr 19 10:01:01 2025 GMT
Not After : Apr 20 10:01:01 2025 GMT
Subject: CN=57664db03ada9e523ba543b34f2c206ab4100ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:51:f1:21:af:fd:71:db:eb:c9:09:2c:8d:
32:51:12:98:07:02:37:7d:a0:54:df:eb:a3:52:31:
9a:9c:01:5f:76:ef:52:cb:36:5b:b9:36:a6:ae:a3:
a2:0f:4c:43:d2:0c:8f:c0:88:bf:e7:c6:03:9f:c3:
c3:60:2a:fc:db:43:08:c0:e6:a2:42:0c:5a:5c:44:
cc:fc:09:d6:36:d6:74:bb:71:9d:6b:1c:2a:95:b8:
14:40:75:53:c1:71:a1:a9:80:85:06:f8:f3:38:ee:
95:da:35:0e:86:85:43:cf:95:85:b0:8e:22:1d:5d:
1e:0b:68:b1:b2:38:24:91:0f:11:73:0d:1b:fc:95:
1c:2e:43:8d:3f:b2:61:20:d2:94:1d:f9:68:5d:7d:
d9:88:bc:29:16:40:94:5d:35:c9:7c:f9:f7:c4:9d:
56:91:1c:a5:aa:d7:72:eb:24:9d:9e:8b:13:af:d4:
8b:2b:c3:98:53:b4:fd:76:bb:9c:fa:45:d5:4b:56:
90:bf:35:e7:84:64:8d:82:e3:c6:b7:26:49:22:cf:
0a:21:d0:27:b8:3c:a3:ac:80:17:3d:0c:43:1f:6e:
d2:fe:ca:1e:89:39:3a:e3:35:68:e5:d0:a5:a7:96:
3d:58:8e:cd:b6:9c:a8:09:1c:df:46:41:6b:49:18:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:4D:B0:3A:DA:9E:52:3B:A5:43:B3:4F:2C:20:6A:B4:10:0B:A8
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:36:06:3c:3b:c1:11:1f:49:ee:a7:b6:b9:d7:f2:85:46:a2:
aa:50:c2:91:79:5b:1c:4f:06:4e:d5:ff:0f:48:21:50:0d:bb:
64:a2:d5:81:97:20:ac:06:1c:4f:9d:1d:ce:8c:58:70:1c:3f:
f9:14:ee:00:a1:5b:fd:81:c9:e0:22:06:3f:50:02:63:de:dd:
04:bb:55:e1:be:6d:0b:c7:97:19:e3:7f:95:b4:6b:c5:48:15:
73:22:a0:f1:bb:fc:fd:8d:2a:ff:6d:1a:80:59:95:07:db:b9:
af:17:cc:ed:cd:18:68:7e:d3:ca:b5:32:41:ad:a9:13:4a:8d:
30:f2:ee:56:04:24:0a:25:b5:a6:f2:e1:91:5d:25:29:f6:a4:
74:5f:02:58:a7:7a:28:ca:91:be:ea:9f:13:68:2d:34:f5:e0:
b9:16:23:ef:70:1d:54:05:42:ec:5a:ce:dd:fb:8e:9f:30:14:
58:be:c6:be:dc:41:92:7b:4a:e0:43:47:6b:c7:74:e7:e4:78:
2f:63:5a:b2:ec:43:45:02:a4:7e:e1:cc:b7:1e:78:12:b5:aa:
0c:81:7c:44:4c:4a:fc:7e:91:9e:fc:9a:ea:52:3f:2b:33:5b:
41:eb:ad:09:2a:00:c9:d0:c1:b9:52:bf:af:94:6d:b6:ed:5c:
22:b6:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:57:42 2025 by rpki-client