Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: pRV+xGaGLAZDMml5DuPHpVAJXG/AN1I5/LYf1GGLqtA=
Subject key identifier: 75:FB:0C:3A:9E:95:4C:33:E6:6A:93:BF:36:D6:DC:D5:91:29:EB:1E
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019690712CBBEB9358095D46684BE6731AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 1052
Signing time: Fri 02 May 2025 10:00:58 +0000
Manifest this update: Fri 02 May 2025 10:00:58 +0000
Manifest next update: Sat 03 May 2025 10:00:58 +0000
Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: f/1uWl9dc+Fd/TpO8TadXKASLwO9A07z/3RJk2zcaf0=)
3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:2c:bb:eb:93:58:09:5d:46:68:4b:e6:73:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: May 2 10:00:58 2025 GMT
Not After : May 3 10:00:58 2025 GMT
Subject: CN=75fb0c3a9e954c33e66a93bf36d6dcd59129eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:b7:68:81:e4:67:8f:59:02:21:1d:02:39:
64:65:55:d7:fd:23:23:77:48:ca:82:9b:d1:8f:de:
11:98:36:c5:65:6d:25:76:60:1d:f4:68:72:8e:41:
8e:21:c8:ff:d9:4a:b6:3a:18:85:6a:07:f7:aa:7c:
3b:8a:0a:8a:e5:99:e6:4e:89:aa:6d:3a:dc:f3:d1:
5d:3d:0b:9d:b1:b7:0d:12:74:b8:db:3d:aa:06:4f:
40:ed:2e:5b:f6:ea:68:38:7b:9a:e2:cf:b7:a1:a8:
f5:bd:e5:8e:1f:20:f2:ca:40:de:e5:e9:bb:0c:ca:
20:45:32:1c:51:da:7d:55:92:a9:2a:b9:80:e9:1d:
1a:ea:c6:6c:cd:f7:d5:9d:82:23:77:95:9a:47:0b:
af:1c:47:07:ae:e8:41:b3:2c:64:06:50:53:d3:f4:
f4:f5:13:8c:31:62:c0:b4:41:66:b1:4d:29:2b:30:
67:2a:a7:19:ea:fc:bd:e3:61:b7:33:85:97:f7:f7:
aa:c6:b0:9e:5e:4b:4b:a5:52:f3:c2:1c:6e:92:53:
c5:50:4d:46:dd:c7:62:44:7c:b2:16:7c:a5:9c:41:
6c:19:2f:5c:25:7f:23:eb:bf:aa:26:af:9d:53:07:
2c:54:ce:81:b0:06:30:69:38:6f:c4:d2:9b:d2:c0:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:0C:3A:9E:95:4C:33:E6:6A:93:BF:36:D6:DC:D5:91:29:EB:1E
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:12:f0:cc:d2:93:c1:1e:75:a4:6d:59:6b:24:4c:95:63:7b:
be:83:fc:76:4e:0a:9c:31:5c:cd:67:8e:0c:9d:38:fb:1b:14:
7f:5d:c1:08:28:f8:77:fb:b4:64:f1:cc:e1:81:0c:3e:a8:3f:
20:8e:61:14:ac:71:af:2a:1d:8c:53:cf:16:4c:b2:dc:a9:16:
91:00:6e:ed:af:4e:03:d6:ca:db:58:bf:3f:c0:e0:1d:de:da:
b5:42:22:20:13:56:b3:ea:17:89:19:f2:09:fe:68:86:71:60:
b5:7f:0e:20:79:a5:1e:bb:ba:1e:65:ef:3f:47:7f:eb:68:9c:
66:18:fc:cd:30:39:57:b3:b1:24:de:ee:1c:02:c8:36:d6:b0:
ad:c2:3a:46:e2:ae:f7:92:fb:79:08:59:48:75:a5:00:34:46:
d6:98:df:82:ff:45:fa:21:d1:24:d6:19:a9:23:39:fc:0b:3b:
4f:b2:1c:93:b8:84:ce:cc:59:64:25:b4:ae:e4:23:e1:7a:e6:
7c:c3:69:9a:fd:6a:c8:e7:75:ee:e7:87:95:26:e8:0f:21:d1:
11:1e:81:5e:7c:a3:21:cf:97:bb:f6:e3:51:38:20:f5:3b:1a:
e0:aa:47:8b:45:5b:9f:d5:34:11:37:28:70:1c:96:5c:cd:b3:
77:de:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:19:05 2025 by rpki-client