Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: mkoQFTlVVXRJS5RXWYdf+EJYx/WCNQYCzM26+KHkLO8=
Subject key identifier: 1C:71:E4:89:8A:E3:C5:7C:C0:45:73:00:59:FE:53:83:EE:03:D0:C4
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 0197488CD4053AF8249B7A64E8E3388A4C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 0183
Signing time: Sat 07 Jun 2025 04:01:18 +0000
Manifest this update: Sat 07 Jun 2025 04:01:18 +0000
Manifest next update: Sun 08 Jun 2025 04:01:18 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: YbewsPd+kJzFN+bYoxB7OZWe9x4aBc9B4H8aBGZ1q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d4:05:3a:f8:24:9b:7a:64:e8:e3:38:8a:4c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Jun 7 04:01:18 2025 GMT
Not After : Jun 8 04:01:18 2025 GMT
Subject: CN=1c71e4898ae3c57cc045730059fe5383ee03d0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:3c:7e:fb:d5:af:7b:f4:d0:74:7c:35:e6:
08:b3:51:a8:96:4e:c3:cc:b8:30:56:37:ff:c9:b6:
0f:28:be:0d:85:02:e0:d8:7c:24:a5:f0:a1:6b:53:
c9:11:53:78:f8:36:fb:38:f2:30:14:a8:7b:c6:22:
ee:f1:0b:1a:67:ef:6f:0f:03:27:cc:55:61:c2:5c:
e0:7a:c5:6f:e6:c9:45:b7:44:93:fa:12:e9:31:33:
0b:53:6c:ee:9d:ac:aa:ad:b5:7f:35:f1:19:b0:c0:
fe:09:a2:9b:fd:76:49:25:21:4a:8f:2c:21:b0:d1:
ba:6e:40:03:6e:8e:92:83:62:5d:4f:8e:b5:52:e1:
31:55:43:25:e0:7a:49:19:52:f5:66:bc:8b:51:55:
18:e7:33:4b:f5:56:bd:2a:33:2f:20:11:25:07:b5:
f2:9a:93:73:91:d8:d5:4b:25:68:4b:af:a5:68:cd:
a6:f8:ea:45:ed:98:18:e2:f6:5c:22:49:4e:03:20:
12:e1:5b:77:0c:45:88:43:e1:06:4c:da:f3:01:3c:
b2:f9:3f:e5:66:84:b7:1f:e3:96:34:f8:67:0c:71:
d7:ad:2a:b4:49:d6:1a:5e:5a:d7:a2:80:18:3c:af:
6e:26:04:3b:b9:4d:54:15:7c:62:d7:3c:6d:78:7f:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:E4:89:8A:E3:C5:7C:C0:45:73:00:59:FE:53:83:EE:03:D0:C4
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:ce:b5:0a:e4:0a:f0:78:d7:9d:d3:1a:18:da:c3:2f:c5:
5a:d2:e3:dc:38:38:5e:68:d6:d7:6b:5d:1e:b5:3c:21:d9:a0:
9a:98:f5:08:a3:92:86:99:45:55:e7:cf:49:fe:40:1c:fa:1d:
a0:d4:fb:bf:fa:92:c8:45:32:af:1a:1c:20:d2:df:4d:0d:01:
fa:75:53:cd:6c:b0:b5:4e:5c:81:d3:c6:15:30:5b:b8:bb:5f:
9c:63:9f:ff:e0:24:e8:89:c5:75:95:f7:79:9f:23:9d:ea:80:
53:d3:03:3b:89:3b:b4:af:4a:56:74:fd:05:e3:ef:9d:ab:35:
e3:6f:09:23:66:95:30:db:67:f5:e8:20:45:ae:0c:ac:a6:98:
1a:c6:29:96:b2:7d:13:03:12:40:75:34:a0:9f:09:7c:ba:3f:
88:0d:d7:12:30:5f:26:4f:a1:e1:87:9b:72:1c:3e:cb:33:25:
8c:71:ec:f0:ba:d9:a9:45:65:80:8a:1a:b7:e4:3e:29:82:72:
26:bc:3a:86:3f:ba:71:15:37:f3:ba:d8:3c:65:fd:74:05:04:
52:4b:d1:13:15:f7:19:e1:5b:e0:f0:77:35:f2:51:1d:7f:c1:
72:3b:d1:c3:c0:52:0e:f8:45:f9:81:6d:52:79:27:9d:b4:cb:
b9:81:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:19 2025 by rpki-client