Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
File: xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json)
Hash identifier: LGJWJIkJfC195+RjsUur+N9FJk3mspTBGCyzUi2xAN8=
Subject key identifier: CF:52:10:FB:68:41:EA:5A:FE:B5:A7:6C:5B:59:C9:64:BD:9B:3D:6F
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 0196948480006654C87F9B86FBE073D8BE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
Manifest number: 098A
Signing time: Sat 03 May 2025 05:00:33 +0000
Manifest this update: Sat 03 May 2025 05:00:33 +0000
Manifest next update: Sun 04 May 2025 05:00:33 +0000
Files and hashes: 1: 6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa (hash: Qmi5vwRBC8G/em6HsgOnkDIH/4egeMg5iAbwYtXG1+s=)
2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: uKu4dyCWebYzs0bEDuX3n/UAGpcVIkKjiqP2RW4rKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:84:80:00:66:54:c8:7f:9b:86:fb:e0:73:d8:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: May 3 05:00:33 2025 GMT
Not After : May 4 05:00:33 2025 GMT
Subject: CN=cf5210fb6841ea5afeb5a76c5b59c964bd9b3d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:24:48:4c:28:11:c8:94:92:33:b3:3e:1e:
cd:4e:17:da:1a:bb:3e:98:37:b0:2a:0e:2f:e1:a7:
7b:04:76:71:b5:3f:75:13:ea:31:e3:a8:05:16:72:
97:a9:8a:eb:01:dc:34:26:20:00:e8:d4:b2:38:f3:
7b:87:2c:cb:ec:90:4c:1e:30:16:aa:63:03:ed:18:
75:7f:48:8a:48:14:6d:dc:40:37:4a:74:7c:b3:94:
64:c5:6d:30:17:ee:5f:d4:a0:c5:39:8a:e7:d2:ab:
59:ca:bf:9e:d2:43:f3:46:e8:f5:78:c9:df:fb:b2:
a0:36:b7:38:49:c6:87:98:70:07:3d:09:32:79:a1:
8b:d4:ad:14:d3:90:fa:bc:25:87:44:bd:85:14:9d:
d6:c4:14:c1:3f:67:13:97:b9:04:2c:70:6f:90:54:
e3:66:9f:0f:6a:27:62:0e:91:56:ae:fb:0e:60:41:
fd:6b:93:41:a0:4c:76:97:42:b7:1f:73:3e:c0:67:
60:1c:c5:39:e8:9d:b9:ab:c1:82:fd:47:f0:b6:17:
3c:2a:7e:c6:b3:a0:97:54:f8:a2:4c:ba:2c:77:9e:
51:5c:dd:f4:c7:b9:36:1d:2c:05:63:d0:75:e2:fa:
58:ee:d8:13:63:5c:56:c2:a7:69:6b:ea:d1:c3:29:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:10:FB:68:41:EA:5A:FE:B5:A7:6C:5B:59:C9:64:BD:9B:3D:6F
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b6:60:ea:03:a8:ab:25:c5:f6:3e:b1:fd:98:50:c7:fc:3d:
b3:3f:46:6f:82:ad:22:e4:d9:d8:1a:0a:bd:0d:12:ff:df:0b:
7a:6f:8e:f5:d1:c9:f4:6c:51:df:3d:b4:52:96:a4:ff:b5:f6:
9d:9b:89:51:af:d7:f7:6d:86:21:b1:79:1d:e6:e1:a2:9d:04:
43:a8:4e:25:43:4d:58:81:74:9a:2d:15:d8:1e:c4:53:5b:70:
31:fa:db:af:3c:34:4a:33:79:3c:49:90:33:e5:8c:8e:d2:b8:
29:5c:1b:2c:b4:5c:29:36:5e:17:5e:24:fc:3c:64:33:0e:cd:
24:0b:41:35:fc:72:7a:a7:49:1d:82:c0:92:f6:93:ea:09:9b:
91:a4:98:e1:e6:38:13:50:14:ed:9c:11:48:ef:85:4f:3e:a8:
01:4c:a1:6e:cd:5b:97:82:70:d7:6b:c5:d2:95:3d:4b:2d:8f:
df:29:c4:50:e9:4c:4b:14:25:95:47:36:95:8d:32:c2:d4:67:
01:89:29:78:4f:7a:f4:bf:c3:de:bc:97:e4:06:5f:e8:d9:6b:
df:15:4d:c5:5b:8c:ea:47:76:a7:cb:9c:81:90:f6:86:69:69:
07:96:b9:5a:84:da:6b:5f:e5:44:50:91:4e:a5:dc:27:ba:8d:
62:48:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:17:44 2025 by rpki-client