Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: UGgfAbYtBrMoOhjfykDLHxPi29wfYEeRON44lijhyg8=
Subject key identifier: 91:A7:73:EC:AA:E4:81:25:6A:90:3C:2A:D9:F8:09:FD:76:08:CD:DF
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 01969484697478D056730E51220B962C0802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1522
Signing time: Sat 03 May 2025 05:00:27 +0000
Manifest this update: Sat 03 May 2025 05:00:27 +0000
Manifest next update: Sun 04 May 2025 05:00:27 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: ngcAzIB2l1f2qNPrhYQnEm2pZB4BWRHxkSLTMZflUeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:84:69:74:78:d0:56:73:0e:51:22:0b:96:2c:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: May 3 05:00:27 2025 GMT
Not After : May 4 05:00:27 2025 GMT
Subject: CN=91a773ecaae481256a903c2ad9f809fd7608cddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:11:ef:f1:b5:b4:c7:6d:29:8d:38:70:b5:
f3:2f:83:d4:0b:bc:ab:7d:2f:9f:06:9b:17:5d:65:
ad:13:65:5d:f9:5d:0b:6f:64:54:27:39:89:90:77:
b0:b5:33:ed:53:82:ff:88:e0:6c:c6:09:ca:7e:71:
02:3f:28:08:81:26:cf:ca:46:c2:40:2a:d5:cb:ee:
b3:c5:39:81:67:ba:6a:ca:30:1f:67:96:4e:ef:06:
53:2e:e3:1b:d2:62:71:10:9a:00:90:2a:ff:89:bd:
b1:e2:40:cd:f8:2d:c6:53:9c:e4:19:6f:c5:73:63:
f3:bc:bf:99:d8:0d:9a:e6:95:9c:98:58:41:c6:c1:
9c:b3:7a:85:f9:6e:ef:8d:7e:a0:be:a2:b6:2d:49:
f4:a2:d9:64:21:ba:a9:15:6f:06:48:cb:10:a2:ab:
e9:44:76:cf:85:86:8e:78:b6:05:d3:a2:61:d5:16:
a6:be:2e:5c:98:50:98:05:e9:91:14:83:c6:52:0d:
80:7c:70:5f:78:12:38:86:6c:1f:9d:5a:68:a4:ed:
3c:a4:91:94:b1:85:95:70:95:69:e1:9c:f0:2a:23:
07:db:9a:ca:a5:3a:1d:58:a7:f8:ec:b9:02:1a:c9:
d5:27:22:85:a3:f0:0a:53:52:66:2a:94:53:2b:a9:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:73:EC:AA:E4:81:25:6A:90:3C:2A:D9:F8:09:FD:76:08:CD:DF
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:a3:b8:73:7f:ab:82:07:24:46:4f:c6:e8:26:0c:c0:1c:
51:b7:fb:ca:aa:6a:93:63:3b:fd:dc:00:c7:b7:86:ec:e2:cc:
6f:e4:eb:bd:09:12:96:9f:73:5b:3c:29:5d:da:a1:ef:8d:7a:
21:e8:c5:fd:8e:4c:93:70:fc:62:c9:47:da:0d:10:05:25:3b:
77:03:51:8e:33:d0:22:e8:df:73:b6:7f:98:71:56:86:b1:c6:
ca:d6:f8:93:38:67:06:d2:f0:2d:38:85:0b:cd:0d:6c:65:ed:
90:af:e3:90:f6:9f:b4:3b:68:16:8a:05:5b:be:37:0f:de:34:
d2:20:b2:7f:46:4d:51:93:23:c3:3a:97:be:e9:af:7b:56:ae:
66:04:5f:99:a7:5c:25:b6:1a:1e:af:44:c5:2a:a8:11:0b:29:
d6:12:77:52:2f:83:a7:e8:b1:9a:b6:7e:27:24:f5:82:d2:d4:
7e:ff:20:8c:1e:d9:34:80:90:43:4f:46:0d:8f:92:c3:95:f1:
25:aa:73:43:df:a9:ba:04:d1:02:9f:99:a5:ae:35:7d:29:a8:
0d:45:81:4d:c6:92:6b:93:35:a4:11:84:b2:b6:6f:8c:ea:57:
7f:21:7a:c4:9c:de:8f:9d:1e:6a:c7:98:51:f1:0a:9d:8b:ba:
28:80:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:10:22 2025 by rpki-client