Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: Is+W6FNyF1klIrIKyVd6B0TQGHXZZHOpx+XBTB40eRw=
Subject key identifier: CF:E0:9B:3A:2A:CD:62:61:14:46:CA:AE:98:C0:62:7F:94:3E:8A:31
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019687DBCC686274EF2106097F0626A37686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 18:00:50 +0000
Manifest this update: Wed 30 Apr 2025 18:00:50 +0000
Manifest next update: Thu 01 May 2025 18:00:50 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: Cgb77iDyMlVtLkA66xONl8ofp5Aa5lIknqYvMZYin3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:cc:68:62:74:ef:21:06:09:7f:06:26:a3:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Apr 30 18:00:50 2025 GMT
Not After : May 1 18:00:50 2025 GMT
Subject: CN=cfe09b3a2acd62611446caae98c0627f943e8a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:a1:39:5e:df:ef:02:e4:95:38:71:ee:9c:
6b:b0:c3:1d:1c:ad:9f:48:e9:9f:29:97:7a:f2:45:
ed:9b:5b:64:73:6f:0c:0f:b9:a9:cd:4c:06:01:e6:
51:13:ca:73:7a:59:65:b0:de:c5:9f:01:37:df:44:
b3:3a:ae:ea:5d:85:c6:7d:2e:95:c4:6a:63:f0:3a:
df:56:8a:cf:18:bd:97:70:a4:23:4b:37:99:71:19:
2b:09:2e:ce:8b:c8:54:a4:ea:cf:57:db:76:a4:92:
55:a0:47:34:97:bb:bc:d3:c5:ff:5d:97:08:2a:44:
9f:78:c4:70:b8:fa:13:74:e7:ad:57:d1:c9:bc:0f:
c2:1d:58:63:9a:91:ff:33:62:b0:ad:5e:45:b4:5e:
87:a1:07:dc:27:07:c6:1e:9d:29:e2:9e:08:ab:c0:
37:0a:5c:54:69:c0:e8:7e:33:c5:43:6c:04:35:c3:
29:08:0c:df:79:0f:06:7f:fe:76:18:24:2b:c4:44:
d4:80:1f:2c:f2:1e:f6:f8:31:dc:02:f7:b0:c4:8d:
c6:50:15:90:19:55:a2:47:a5:31:53:ef:16:1a:87:
c7:da:01:0a:13:8d:e8:8a:3a:a5:e6:b5:2f:e8:74:
aa:3a:67:eb:4f:24:a2:f4:15:d4:66:ec:75:07:bd:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:9B:3A:2A:CD:62:61:14:46:CA:AE:98:C0:62:7F:94:3E:8A:31
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d8:45:57:b4:81:e0:04:35:bc:43:14:73:29:51:ba:ea:f1:
fe:ef:58:45:76:88:83:b8:bb:76:58:2c:40:5a:bd:74:5e:81:
09:c1:0d:d3:63:44:51:9a:bb:a2:f9:ca:fc:28:63:2b:f5:75:
70:d2:5e:07:ce:5d:4f:6e:d6:68:c5:35:fd:3e:0c:eb:0b:ca:
ca:23:25:1e:96:4e:f1:44:65:31:84:2a:af:8e:30:ec:d7:e8:
4a:c6:68:3c:2f:72:32:5d:b5:96:7a:a4:47:8c:1f:0d:f4:c3:
87:ee:17:f6:50:af:7b:8a:b8:dc:cc:ba:cf:9b:e1:1a:2c:30:
4c:38:8f:90:49:46:1e:b4:4a:f8:56:2e:44:84:ec:14:42:6d:
b5:4e:50:6f:a4:dc:a8:a5:14:be:0b:89:0b:27:ac:bf:74:91:
0f:02:c2:23:09:b0:f2:d6:ed:67:53:ee:4a:f6:b0:9d:f8:f5:
f8:73:7c:7e:bb:a2:69:3e:5f:03:9b:05:d8:52:76:69:a5:b6:
bf:03:aa:72:d4:7d:c4:10:1f:f4:2b:2e:7f:9b:f1:78:01:c9:
65:a0:a6:ec:61:c2:4e:68:ba:d6:fb:4a:f2:c9:3d:e3:e0:f0:
56:6f:ca:ac:36:8c:91:b9:8f:ac:66:5d:48:75:59:b1:7f:08:
56:86:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:15:04 2025 by rpki-client