Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: 6+GN7jaEcgbfXiICg8zqFlPGNzn5ck4givzZYVO7vbU=
Subject key identifier: 5C:D7:41:AA:39:05:CF:F0:74:E9:C2:85:24:48:4E:C3:54:FA:88:6A
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 01967944340ABCAA70C27D968E43CB221694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 22:00:34 +0000
Manifest this update: Sun 27 Apr 2025 22:00:34 +0000
Manifest next update: Mon 28 Apr 2025 22:00:34 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: CjcgcPWC3a+zbfvBxTnXa1HLVjh3kGWUkMk4qBz+oIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:34:0a:bc:aa:70:c2:7d:96:8e:43:cb:22:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Apr 27 22:00:34 2025 GMT
Not After : Apr 28 22:00:34 2025 GMT
Subject: CN=5cd741aa3905cff074e9c28524484ec354fa886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:c2:68:5c:af:2d:95:5d:f7:c0:f5:a0:54:
06:7e:08:fd:89:48:d7:9b:ae:95:82:c2:24:49:8b:
b5:ea:7a:c6:21:1e:6f:09:6a:1b:ee:19:2f:c0:c5:
e8:b0:7a:62:1e:03:e1:69:3a:63:35:8e:cb:b0:c9:
7f:48:26:86:f4:e3:e9:ec:48:1d:00:45:b2:60:b5:
ea:4f:03:03:16:5e:4b:86:17:5c:f7:5e:35:d0:f9:
2d:f1:1c:1b:b3:25:1e:88:b4:58:f9:f5:14:0e:1b:
77:fb:af:35:ac:36:6d:df:03:55:16:b5:9d:df:8f:
3b:39:d4:66:26:d6:49:47:91:f9:75:d7:ef:46:0c:
79:c3:4e:28:2f:4a:ca:e6:75:84:97:73:7a:9c:96:
9a:6f:2b:6c:8e:25:f1:76:21:c4:a0:65:0c:58:2e:
06:3f:8a:db:ed:41:83:e4:5a:90:ee:87:e5:29:bf:
6d:4c:c4:77:4f:fc:dd:a8:0e:b1:d7:a1:86:cc:20:
2b:9f:f7:72:8b:cd:26:7c:ad:29:60:c0:54:2a:46:
25:1c:d4:35:cd:67:f1:4a:74:57:c2:43:9d:31:db:
f7:4f:84:75:49:1c:63:c2:fc:36:9b:ca:d4:ba:c7:
fb:22:17:a8:0b:d9:9e:7c:96:cd:bc:9b:eb:fa:74:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D7:41:AA:39:05:CF:F0:74:E9:C2:85:24:48:4E:C3:54:FA:88:6A
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:84:a1:9f:ba:de:35:40:2a:f7:b4:e0:24:bb:c1:c0:aa:4a:
21:ae:2d:10:dd:c6:da:72:00:d7:aa:23:40:4d:7f:3e:67:a9:
88:94:6f:93:6d:5d:74:d6:c6:d8:c7:1c:3e:3f:1a:6d:7c:08:
2a:ec:66:15:92:a5:a5:fc:a1:5b:44:cf:d1:90:bb:79:44:3b:
23:7b:84:d3:0a:02:79:14:cc:1d:4d:1b:d8:b6:44:90:93:54:
09:20:c5:40:97:52:8a:c6:6b:8b:a1:d6:45:bf:01:27:2a:9c:
e5:3d:70:57:98:77:13:d5:7c:54:65:86:a5:26:5a:b1:6a:49:
b8:b2:84:3d:35:b5:42:ff:e5:c8:4c:85:12:89:9b:d7:b9:ff:
79:5f:57:9c:11:1b:dd:94:ec:5b:4e:85:41:36:cc:98:76:79:
dc:11:15:b3:f6:46:7f:62:7c:e9:fa:98:48:1a:97:83:63:46:
7d:f4:9c:37:25:22:07:9e:75:8d:71:c5:e1:02:aa:8b:70:2c:
ce:87:f7:f4:9f:f7:06:b1:60:5f:57:a9:ad:ca:8b:ee:33:61:
17:df:5e:7b:0e:80:19:26:c2:66:20:1d:dc:97:df:a9:06:18:
60:41:df:7c:07:72:33:d0:f3:f5:a4:61:30:a4:87:99:5c:b3:
73:c9:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:23:07 2025 by rpki-client