Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: hDODVTvqexV3zQCS/JcfLA+2nohkhWnmPxK0x1WJH7U=
Subject key identifier: 38:B2:8A:6F:77:24:01:BA:80:9A:83:E7:6C:D9:2D:92:1F:29:69:4A
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01968D01B08D6F90EECA3471A2F51D3823EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 18:00:19 +0000
Manifest this update: Thu 01 May 2025 18:00:19 +0000
Manifest next update: Fri 02 May 2025 18:00:19 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: qsVg1Q6vCu6qsOPM4BNA7gNBR/Fu2pJ/7x15fVOWZ9A=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:b0:8d:6f:90:ee:ca:34:71:a2:f5:1d:38:23:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: May 1 18:00:19 2025 GMT
Not After : May 2 18:00:19 2025 GMT
Subject: CN=38b28a6f772401ba809a83e76cd92d921f29694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:d6:78:1c:23:06:a0:b1:73:c4:c6:22:b5:
c3:ba:47:6d:82:45:3d:86:15:87:c7:08:68:60:15:
94:fa:0f:e6:21:d0:00:ea:d2:eb:14:a2:d0:cb:e4:
93:0c:44:f2:2d:41:06:98:6e:4d:db:31:3b:75:ce:
d4:7d:e7:28:08:c9:0e:57:f5:84:fe:e3:e0:d8:32:
33:b1:32:59:e7:37:90:a3:4b:86:86:94:08:63:99:
dc:9a:fb:10:48:7d:10:d4:90:34:c8:8f:93:b9:fa:
d8:58:59:df:4a:fc:b8:6f:15:a9:10:c5:e3:15:74:
14:9e:4b:88:9c:db:d5:6d:4f:11:6c:28:15:47:4c:
6f:af:ef:74:93:d5:8d:0f:2d:d1:69:81:ae:72:ee:
81:be:d5:75:88:82:fe:ef:e1:40:0d:e2:79:70:88:
ba:df:75:aa:ec:96:b8:91:c8:60:f0:0a:43:ff:54:
ff:4c:8f:b5:a3:d5:35:1b:f0:56:14:8c:20:1f:51:
85:a8:fc:ca:6a:79:cf:b0:16:c8:79:9e:be:e5:08:
4d:bf:22:ff:8a:d7:d4:fd:7e:48:61:21:9f:f2:68:
f9:56:6e:ca:c3:7e:e0:98:05:39:df:b7:40:e6:94:
0a:ad:21:e9:8a:19:40:22:f8:93:8a:2f:be:be:29:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:8A:6F:77:24:01:BA:80:9A:83:E7:6C:D9:2D:92:1F:29:69:4A
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dc:39:0b:bb:26:cc:2f:e8:73:da:76:13:a7:f3:dc:05:ab:
56:58:b3:be:85:ae:c9:a2:90:82:47:0b:03:ec:43:2f:51:f4:
bb:0c:b1:1d:b4:0b:9f:6b:a6:a0:45:9d:06:a4:b2:bd:e3:2b:
0b:85:91:06:64:06:d7:e2:5a:95:97:bd:76:47:a6:98:a5:a7:
4b:6e:da:2e:d6:c4:7f:b5:fa:e6:f0:4e:4f:2c:b3:a2:67:06:
c5:15:ad:f1:f8:94:a5:72:9c:bc:08:90:a9:85:98:47:bf:ea:
10:a8:d7:db:55:38:0e:88:e2:13:99:8a:ef:fe:74:66:6a:35:
08:36:31:9a:e6:b7:e5:ca:09:70:ec:d3:07:5e:ec:75:f1:01:
bb:7f:b6:e8:76:bf:e7:5b:9f:03:6f:18:73:25:11:dd:3b:d5:
80:b2:e2:07:9a:14:81:b6:b5:17:e9:f2:c7:7c:08:41:42:9d:
bd:11:fe:ea:bd:eb:2d:a7:5d:ad:27:dc:8f:02:6b:29:9a:ce:
f1:13:e4:6e:b9:0f:c9:ec:a5:db:69:e2:b1:9d:e7:5c:17:6c:
d4:6d:25:93:0e:74:79:44:92:0b:a5:1e:7f:e7:f5:16:9e:85:
71:39:bc:1b:fb:e1:10:fc:bf:32:2a:bc:75:2a:2b:bc:77:70:
93:3b:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:16:20 2025 by rpki-client