Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: FKCifrd37DG+iTEs8lsHEN1YVQ6pXdjdTQy4UKx1geE=
Subject key identifier: 5B:18:9E:21:F2:DB:77:B7:96:F7:B4:F8:B6:45:64:B2:05:87:C6:92
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 01968849333E86F8AEB570EA48D7FF8AB0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 0FC7
Signing time: Wed 30 Apr 2025 20:00:20 +0000
Manifest this update: Wed 30 Apr 2025 20:00:20 +0000
Manifest next update: Thu 01 May 2025 20:00:20 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: 1zw21Mvxa41JFj8slXM+zYow3py8NtH5++HVCGHfjg0=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:33:3e:86:f8:ae:b5:70:ea:48:d7:ff:8a:b0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Apr 30 20:00:20 2025 GMT
Not After : May 1 20:00:20 2025 GMT
Subject: CN=5b189e21f2db77b796f7b4f8b64564b20587c692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:17:d1:bb:04:d7:b0:21:01:67:79:8b:62:
78:7c:bf:27:1c:5d:b9:77:9c:92:e0:ec:e2:ab:7e:
be:9f:19:62:ae:cf:15:39:92:0f:e6:13:41:0e:f1:
89:78:e7:f9:fc:70:c7:ba:eb:6d:e4:80:da:33:a0:
dc:33:ae:24:7b:c4:72:a2:7d:bf:a8:77:c1:6c:4c:
cb:b4:9f:48:73:e7:69:2d:23:a3:90:7c:0d:64:ff:
a0:25:52:85:00:b4:f8:2a:a0:c1:9b:db:dc:8a:c2:
af:a9:da:e6:75:68:2a:ba:a3:a3:39:6d:a3:a4:0f:
3e:14:66:9e:b3:48:1f:9a:41:f7:60:b7:bb:7f:0e:
e1:45:77:42:37:80:b3:ba:17:0c:9c:55:d0:88:48:
25:19:36:da:d1:fb:02:e8:c6:5e:d3:d4:29:66:f9:
13:6d:ea:be:66:24:3d:50:51:85:45:d2:bf:e4:55:
eb:ce:0b:35:14:f8:49:55:ae:6d:29:3a:5d:64:1d:
28:3a:a2:e3:80:5a:2f:35:50:0a:35:f2:fe:4d:3f:
6c:57:7e:bb:dd:33:00:e6:ed:96:0c:fa:5e:79:b5:
ba:bc:15:1b:bd:fd:ab:4a:a3:de:d6:3e:a7:f6:c4:
5f:a6:67:36:4d:1f:b1:c2:c5:78:63:05:e8:21:6e:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:9E:21:F2:DB:77:B7:96:F7:B4:F8:B6:45:64:B2:05:87:C6:92
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:26:d7:4f:aa:aa:03:bf:48:fe:5a:05:15:0b:8b:8d:be:68:
7f:6f:28:18:0f:3f:bb:30:11:2d:0f:fe:c8:18:52:ed:d1:c7:
4f:53:0a:2f:4f:53:b6:52:6f:99:2b:50:bb:c0:80:8a:7b:f3:
93:0f:53:d8:c6:51:51:ce:ce:5b:4e:d4:fe:9e:b6:be:50:4e:
65:9b:cc:ba:3c:33:8c:46:b2:ad:dd:60:aa:b2:5e:4e:95:f8:
2c:62:7f:ba:a4:c9:e4:03:00:12:b4:6a:2d:db:a0:78:2c:0f:
ef:35:fa:97:47:75:87:5a:37:75:c7:ad:c0:2f:6d:20:3e:ca:
df:6a:ca:d0:03:8b:f4:2c:06:45:2d:74:6c:2e:fd:8a:6f:d4:
49:62:4e:b2:e8:cb:ff:20:74:d8:33:04:35:3a:13:3c:66:08:
94:07:cd:7a:ab:7c:01:24:69:4f:f6:5e:ef:a4:e7:23:27:e8:
5e:ba:19:86:7d:bf:c6:31:0f:7b:9d:dd:fe:a6:b2:d3:f8:d0:
8d:3d:d8:46:9a:2e:a3:28:8e:8f:50:d8:68:10:7d:aa:ef:c1:
06:00:fc:26:35:51:43:6c:61:9d:6e:8b:b0:49:ed:41:4d:90:
fd:d2:1d:5c:5c:bb:47:ff:30:49:bf:89:66:29:01:3b:1c:84:
b9:32:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:35 2025 by rpki-client