Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File: X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier: 9lj4zbHf77mxqKC0gmOxMaeaFGWV3rnLiSaP8Z01dZ8=
Subject key identifier: 87:D6:6A:61:A9:A3:01:10:68:BA:0E:CA:E7:7F:F4:EE:EF:DD:61:0E
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 01967E6A9D3F85BEDADC2DA051EFD13133DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number: 151A
Signing time: Mon 28 Apr 2025 22:00:38 +0000
Manifest this update: Mon 28 Apr 2025 22:00:38 +0000
Manifest next update: Tue 29 Apr 2025 22:00:38 +0000
Files and hashes: 1: 2N_bsVB0KvO9RyGjzRLMSxh2whM.roa (hash: hwDDM8IuPT+bKKqC9g8Bom6jz4+b+lZbDkkn2LwwNsU=)
2: JvK-cLcIjgxCJ_K14_FWFEfc7vQ.roa (hash: 1p38hpbTbOTu95nT8/nMNcs2xO2ksXr8ZuGwpDzXer0=)
3: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: nTe8ovTNE0Pk7KSlASQuhOtWEIBFkZ9uUNejKL8/WBI=)
4: t_DIdqaN6y2JKMbW8hZqlx5pBLI.roa (hash: sTPX3pfoCgx/hl/X8Ze0rx/7BembW5p7LcW8LP/fL7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:9d:3f:85:be:da:dc:2d:a0:51:ef:d1:31:33:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Apr 28 22:00:38 2025 GMT
Not After : Apr 29 22:00:38 2025 GMT
Subject: CN=87d66a61a9a3011068ba0ecae77ff4eeefdd610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:cb:e0:6b:6f:ed:34:e9:d8:d9:60:bd:78:
c7:a9:09:84:eb:63:6b:b2:ad:71:35:47:f0:48:71:
33:cc:61:b9:3c:8b:3a:97:9c:bf:d0:a9:2b:e7:64:
cf:08:af:e5:c3:83:d5:c1:d0:ba:f2:54:81:3a:ab:
5c:4a:8b:82:2e:86:98:f0:c1:78:93:e1:24:01:f8:
0f:2b:75:55:a0:14:45:5e:78:c1:a2:e1:44:8b:0a:
3e:be:22:28:30:97:d4:81:3b:40:d3:0f:5a:60:60:
f9:0a:b1:f1:29:6f:fc:8c:72:76:73:2f:5d:a6:1d:
5e:5f:b3:60:c2:5f:db:2a:1d:55:32:25:53:a5:fe:
57:d5:c7:7f:b0:b5:b6:27:c1:bb:ce:0b:4b:6b:d1:
6c:55:d7:db:b5:6d:32:5f:3a:ef:54:31:9a:39:26:
09:fd:dd:cf:9c:86:6f:2e:60:78:f8:e0:15:70:0a:
f7:cb:48:2d:54:14:34:b0:6d:19:7c:01:a5:5b:28:
5c:b9:96:e1:35:5d:99:9d:c5:b2:f2:89:61:fe:45:
24:77:a3:9f:97:2f:76:84:99:7b:81:8a:b2:f1:dc:
ee:96:79:37:7c:22:5c:b4:07:71:d2:86:ec:8f:53:
ca:4c:48:dc:f9:fa:91:6a:3d:77:13:1b:3b:d4:17:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D6:6A:61:A9:A3:01:10:68:BA:0E:CA:E7:7F:F4:EE:EF:DD:61:0E
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:4b:14:de:b9:c7:65:4f:8f:5b:f9:6c:83:05:f3:0a:62:
09:70:0b:47:f3:62:3b:48:0d:0d:ee:de:29:2b:71:fd:2a:72:
7c:a4:ef:f9:d5:d7:3a:8d:be:0f:38:8e:d7:ef:f6:a3:c1:b3:
78:1c:3c:a1:45:40:0a:f0:66:86:90:f8:c1:53:9a:64:d9:83:
65:c3:9e:94:53:b8:24:64:3d:e9:2f:d3:7d:50:93:cb:7d:49:
5e:18:ca:26:9a:ea:0a:90:a5:91:75:69:49:ec:5b:eb:7b:41:
c6:d9:e9:e6:f4:a7:fd:fa:e2:51:91:8a:4e:70:00:6e:f1:14:
7e:b2:fa:0c:e9:a4:59:a9:88:d3:b7:86:15:d5:fa:c7:4a:41:
53:dc:43:53:58:5f:40:ee:1a:59:6b:ac:20:43:d4:83:62:ab:
f3:8f:4f:92:be:9a:f6:82:80:c1:a7:ee:09:9a:f6:c9:0e:b8:
f2:86:bc:23:ec:e9:35:62:f2:19:4c:cb:e4:0b:48:fc:72:0f:
aa:f1:a9:8e:c7:d6:65:9e:ab:03:40:57:6c:0a:a0:05:42:e5:
c4:f3:11:a8:e8:b0:88:c3:d6:1a:05:40:3b:42:a2:f8:70:e9:
11:31:1c:28:7d:cd:78:b4:90:2d:ad:51:43:b3:27:98:90:39:
a4:93:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:07:57 2025 by rpki-client