Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: Mp5CPbaQB5ly+eM5xAAHS25yL4K4hl6FGKkA+MHCJUQ=
Subject key identifier: 31:89:DD:22:B1:A8:14:4C:8A:23:CB:4A:41:94:03:A5:31:65:84:38
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 01974B56C014FE77B750F590A8AF5DC605D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1590
Signing time: Sat 07 Jun 2025 17:01:05 +0000
Manifest this update: Sat 07 Jun 2025 17:01:05 +0000
Manifest next update: Sun 08 Jun 2025 17:01:05 +0000
Files and hashes: 1: kvgwT2CIxiAz0KGy17PsocByagw.roa (hash: uswWYZe8p+8Gmx/n8zkQaGQ6Q2+Rru2JGoDveoK/xUw=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: cEj2tXZ0WchHkrEOCfbFAmdUa1Ayc5WV7GL17CDs0MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:c0:14:fe:77:b7:50:f5:90:a8:af:5d:c6:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jun 7 17:01:05 2025 GMT
Not After : Jun 8 17:01:05 2025 GMT
Subject: CN=3189dd22b1a8144c8a23cb4a419403a531658438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:16:f4:5f:98:0e:bc:f1:4e:eb:51:70:71:
cc:ad:e9:13:76:e0:9e:e0:3d:a4:2a:cd:1c:1d:9a:
1b:bb:30:d4:24:0e:63:6c:24:c6:f8:e9:12:70:e7:
02:99:1f:2a:9d:c3:79:64:f9:1f:ca:14:3d:1b:52:
81:7f:7d:b8:87:15:64:2d:bb:19:38:45:c4:5d:3a:
e2:76:4b:e3:1b:3a:01:e1:7a:59:5e:8d:9d:cc:92:
6c:a2:92:71:5d:e0:b3:75:ce:44:4a:f2:c9:65:03:
d1:e3:6a:25:a1:0b:d7:4f:b6:9c:64:90:bf:bf:f6:
99:9e:71:48:7b:53:f1:66:a8:c4:b3:1c:8b:8e:ec:
41:99:36:97:fc:2b:6b:30:03:b1:a5:e8:68:23:1d:
0b:7c:f7:26:a9:13:b4:51:0b:f9:24:27:71:14:36:
5b:87:96:37:22:40:b2:84:70:f3:e2:4b:42:c2:f8:
f2:29:95:e5:d8:d2:29:6e:ac:e8:74:be:5b:c8:71:
4d:de:52:03:20:c8:42:a2:12:bd:a8:cb:be:ae:08:
2c:84:de:bf:ea:02:86:10:d3:bf:fd:65:0a:f8:ce:
e2:63:73:30:6a:d3:d4:09:f3:a7:fa:63:87:90:c1:
cb:7a:6b:7d:55:ea:7e:f9:8f:ee:ea:7f:19:c5:82:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:DD:22:B1:A8:14:4C:8A:23:CB:4A:41:94:03:A5:31:65:84:38
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c1:b0:f7:2a:6a:b3:fd:18:c6:7d:fc:04:fb:0e:89:a2:15:
2b:7a:39:e5:67:4e:8d:ce:4d:bb:d7:8d:65:fc:35:40:46:b1:
f2:fe:86:28:11:9c:97:2c:f6:83:07:a8:70:38:d3:f0:a1:fd:
a1:19:13:78:31:d9:ef:0c:5c:85:60:8c:c2:52:75:a1:77:c3:
e7:03:67:df:6a:06:aa:86:82:8a:17:94:12:e3:fd:93:8b:24:
14:4b:92:88:39:d4:d9:29:b8:83:90:53:69:61:93:61:9a:e2:
c1:35:33:a2:94:9e:1e:41:99:21:29:00:e1:b1:97:1e:57:69:
b8:a2:3e:99:dd:d3:a6:9d:96:b6:fa:ca:bd:7e:38:a9:4d:76:
84:35:0c:05:10:eb:ae:38:70:62:44:bf:54:61:26:10:db:a8:
12:4e:79:e8:f5:4b:f8:4e:7d:4d:30:1c:d3:2c:83:40:0f:63:
6e:56:01:e8:05:89:ad:af:2c:15:fa:bf:21:ab:03:f0:be:18:
e3:40:ce:8c:bf:ec:60:aa:26:64:f7:45:5c:8b:ce:c8:fa:bb:
5c:da:04:17:f3:6c:43:2a:9a:78:c4:bf:0e:f7:b2:da:e1:78:
4b:54:88:3e:12:c2:74:2f:8a:c1:33:30:ff:09:59:8a:f0:21:
99:66:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:11 2025 by rpki-client