Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: gNLXzmQJFZL9HOzMu8x3Y8vyffezqctUeW3ZNUFUfdI=
Subject key identifier: 59:63:EC:B2:A8:34:E3:D6:37:0E:BB:FE:CD:7C:A9:26:69:71:72:6B
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019675D52190B5F6C4978A5DC51C884E4C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 06:00:24 +0000
Manifest this update: Sun 27 Apr 2025 06:00:24 +0000
Manifest next update: Mon 28 Apr 2025 06:00:24 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: ie8+w8zllvjXpBHMNSNclaDR2Jjb6Nx8wPw0+Nfi3NA=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:21:90:b5:f6:c4:97:8a:5d:c5:1c:88:4e:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Apr 27 06:00:24 2025 GMT
Not After : Apr 28 06:00:24 2025 GMT
Subject: CN=5963ecb2a834e3d6370ebbfecd7ca9266971726b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:bf:08:65:c6:f0:6d:ab:96:6f:26:de:cc:
aa:7a:11:19:a9:52:9b:2e:c2:41:45:77:d1:04:60:
8f:56:3d:13:a3:17:bd:66:0b:df:a4:d2:e0:b4:17:
b3:53:9b:90:f9:bb:b0:cd:85:6a:47:f8:fb:f3:e1:
51:a4:8a:9d:53:b7:36:6c:ec:7b:c2:2c:64:36:7a:
12:ee:96:a2:b9:98:ea:11:82:6d:a5:d4:8a:1b:e2:
a4:49:81:0a:d0:3e:1f:fd:47:3a:d7:f5:9c:61:05:
f4:13:72:ea:f9:c2:62:c1:d0:f4:c2:63:e4:93:e5:
71:6e:d5:69:d8:8c:3a:ea:75:7e:68:20:dd:90:db:
59:76:93:b0:4d:45:72:51:3a:c1:46:dc:4a:64:b1:
57:7e:70:24:39:d9:7b:eb:7a:1f:14:96:3b:e4:75:
ef:8a:b2:fa:c3:09:4c:24:fa:81:d8:0a:7b:1c:7c:
c3:66:84:04:1d:e2:eb:a7:e3:61:10:3f:9a:da:db:
8e:2b:5c:84:6f:fe:4a:c4:78:ba:c9:ca:10:df:6b:
01:d0:b3:77:40:04:4b:d4:a2:2c:37:71:27:78:0c:
25:bd:37:e1:99:5c:a9:d2:96:77:00:85:65:ef:54:
b6:99:8a:1c:78:37:21:73:ba:75:d0:e8:99:b4:ab:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:EC:B2:A8:34:E3:D6:37:0E:BB:FE:CD:7C:A9:26:69:71:72:6B
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5f:16:8b:bb:4b:58:29:a6:df:eb:19:03:9b:5d:68:0c:83:
04:7c:b6:37:17:8a:83:86:c7:9e:14:a0:80:eb:74:a0:68:4c:
4b:94:27:1a:e1:d4:c7:ef:3e:0e:75:5f:82:74:f0:c8:d4:94:
fb:91:4c:b4:be:7c:64:be:53:1d:30:da:3a:49:34:bf:15:3d:
eb:1a:32:f4:09:06:fa:18:f6:34:09:d9:2b:9c:4f:9a:37:98:
5c:68:a2:27:f5:04:62:d8:2f:e0:b4:da:46:d5:11:a7:ff:c3:
a0:1d:a2:44:aa:5d:d0:ef:45:e3:47:e3:1d:02:0c:4e:be:90:
0b:aa:12:f1:0d:93:04:aa:24:0a:b9:09:e2:1a:56:97:2c:ed:
ab:40:71:7e:63:96:8b:f9:92:8b:3e:25:1e:75:e5:12:b1:32:
27:52:9c:81:80:4d:9e:6c:bd:99:96:d2:31:f1:3c:3a:35:1c:
7e:e0:b2:43:23:81:0c:78:30:0b:97:61:3b:1f:39:47:c1:9e:
34:a0:34:7f:0b:de:c8:c0:78:aa:67:cc:3d:47:40:29:dc:70:
cc:31:9f:f6:e2:b8:8b:ce:f5:29:cb:78:2f:ff:6a:9b:da:83:
31:a7:0b:54:87:ff:bb:b9:fb:1f:e9:91:38:0c:67:d3:35:7e:
44:52:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:50:07 2025 by rpki-client