Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: qI/MyvJVtz81dfXk2KypA9ZJRb1BEfZya/0NP8wFedg=
Subject key identifier: BE:1D:00:F9:9A:18:4F:31:A6:B1:32:EE:C2:CA:62:5F:A2:C7:76:A6
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 0197296F7FA6525FB6D2908D87EB839A12C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 157B
Signing time: Sun 01 Jun 2025 03:01:02 +0000
Manifest this update: Sun 01 Jun 2025 03:01:02 +0000
Manifest next update: Mon 02 Jun 2025 03:01:02 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: k2ktCGE+rNOXUipJHP2mqoourU1wIRn9QxR9xgWr9UU=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Jun 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:29:6f:7f:a6:52:5f:b6:d2:90:8d:87:eb:83:9a:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jun 1 03:01:02 2025 GMT
Not After : Jun 2 03:01:02 2025 GMT
Subject: CN=be1d00f99a184f31a6b132eec2ca625fa2c776a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:a2:21:51:13:9f:20:df:df:e9:e3:69:d9:
56:ab:9f:0d:3d:29:82:cc:81:84:e4:d1:42:27:32:
df:fa:40:e2:47:9a:7e:6d:b7:bc:7e:86:6e:66:36:
02:fa:96:2d:f8:c0:d1:d4:de:b9:14:70:8a:6d:85:
03:c9:59:f7:45:3d:95:bb:92:5e:9e:70:fe:63:01:
8f:61:9b:2d:e9:cb:87:10:91:5c:dc:b2:1f:d9:69:
31:ef:0e:ad:d6:bf:ea:5a:c1:42:6f:b4:82:a1:95:
a1:5d:2f:fb:fb:9d:c9:e5:02:01:9e:be:32:4f:b1:
77:1c:aa:bd:d9:99:9e:44:72:12:f0:06:f1:6c:e0:
70:e4:fa:f9:61:b0:ac:75:40:de:c8:8e:96:fe:2b:
39:38:f4:eb:31:bc:09:ab:b1:99:7f:f7:58:6e:97:
6a:83:4d:98:9c:fe:41:dd:48:fb:34:39:eb:f7:99:
27:a1:50:ff:a9:46:76:c8:65:34:e5:62:2f:df:45:
81:9b:0a:df:4a:e4:c0:e4:1d:ca:ff:0d:51:dd:2f:
ce:06:0b:82:73:57:74:72:d5:60:0a:2d:80:52:73:
42:a0:1b:9f:16:8c:c4:3e:fa:89:42:92:b7:28:a7:
95:c7:f6:52:3a:cd:df:5f:d1:7c:b2:4a:84:98:6b:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:00:F9:9A:18:4F:31:A6:B1:32:EE:C2:CA:62:5F:A2:C7:76:A6
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4d:3a:24:f7:04:b0:70:67:77:e3:bc:9c:c5:82:42:da:42:
fa:c2:e1:65:21:5f:3f:42:dc:a9:6f:b3:16:6b:d7:fa:9f:ba:
12:fc:c3:82:29:8e:8f:e6:ed:04:82:35:42:6f:2a:c1:73:66:
ac:c8:57:c3:27:79:1f:e2:54:07:94:42:a2:2b:fc:f1:2b:8e:
85:ab:55:5c:b8:10:d7:f1:52:1f:82:c9:5f:c4:32:5e:2a:fc:
b3:99:2b:04:14:c0:b4:25:5e:62:21:ab:f1:be:60:40:6a:87:
65:de:9f:23:81:bf:39:2b:44:44:ce:3a:7d:50:87:4d:92:4e:
c1:be:6c:5a:46:08:e1:23:a3:2c:cb:4e:9a:e1:18:cb:2d:7a:
2a:8e:66:78:41:9c:f3:fb:ec:fd:1c:b8:b5:af:08:78:2a:9a:
ac:b2:ae:c3:d2:3f:a4:6e:06:dd:d4:b8:1d:26:b5:63:18:be:
54:ed:42:47:fc:a7:6d:12:b6:6e:85:b8:43:03:20:8e:c9:3f:
e8:85:fc:d7:a7:5c:19:63:37:8a:5f:ce:a4:9f:1b:78:aa:3e:
b1:ea:c2:ba:c3:dd:1e:be:e6:ac:2c:91:b3:97:57:73:fd:69:
d0:ba:f2:eb:8d:8d:c1:e4:58:a5:d9:55:fb:c5:5b:e2:d2:77:
34:68:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 10:04:03 2025 by rpki-client