Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: 2rfEQ5falkvN8HOClW+791ltcC2yNMKFr4HMdaDTLdI=
Subject key identifier: C6:FD:B1:07:BA:2F:49:85:38:81:D4:BE:1E:9E:49:08:8B:C1:09:A8
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019684A38D9048EE02F76924C1BB30F13C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 03:00:33 +0000
Manifest this update: Wed 30 Apr 2025 03:00:33 +0000
Manifest next update: Thu 01 May 2025 03:00:33 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: IT3VMvp6ot85gKbUq6msCVzBIBwGYVNsZ9s0ZaJXkwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:8d:90:48:ee:02:f7:69:24:c1:bb:30:f1:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Apr 30 03:00:33 2025 GMT
Not After : May 1 03:00:33 2025 GMT
Subject: CN=c6fdb107ba2f49853881d4be1e9e49088bc109a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dc:c9:7a:8a:f8:60:78:31:2e:d0:5a:f5:2d:
7c:3c:7f:bc:0e:63:8c:ee:5c:12:c7:e7:1c:5a:9a:
48:bf:f0:75:d0:2f:86:b7:68:c1:a4:30:13:e8:6e:
04:21:44:6a:c1:79:6c:3c:29:16:2c:db:8e:e5:b6:
ec:bc:11:ba:41:45:f4:f2:c6:2e:05:e2:f7:bd:9c:
75:68:1f:3e:ce:39:3b:44:76:6d:53:19:3a:e8:f0:
81:7f:25:2c:bd:e5:84:4c:bc:45:0c:5f:bd:9b:c9:
3d:5d:03:5d:6a:b4:e9:3e:e2:24:76:f6:84:78:f8:
5f:d0:98:94:87:a1:86:6d:db:5b:3c:d4:26:23:df:
1c:1d:8c:f8:cb:e0:d7:94:dc:ce:35:1c:6c:b3:f2:
05:ae:fa:73:f6:d8:bc:ac:2a:f8:7d:7b:f2:24:60:
6d:dc:09:97:91:8f:74:c0:d4:8d:11:d3:71:ca:ed:
eb:c7:54:29:28:7b:aa:08:e8:1d:db:e4:a3:38:cd:
b8:5b:9d:97:78:24:4a:bf:b8:62:a4:01:14:23:05:
dc:03:c8:8b:a0:76:70:80:c4:e2:aa:29:d3:4b:b9:
5b:1f:a1:f1:1b:4c:aa:30:88:b6:ca:fc:3b:af:24:
d5:bc:15:9f:02:9a:d0:51:ae:c8:34:63:25:53:44:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:B1:07:BA:2F:49:85:38:81:D4:BE:1E:9E:49:08:8B:C1:09:A8
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:b9:8e:99:b3:d0:e1:40:d3:ed:c5:b2:c6:84:a3:96:fd:
c4:04:93:23:47:2a:2f:b9:ca:9f:58:9a:a4:ee:5f:75:18:c5:
33:d8:32:aa:0a:d7:85:53:36:da:bf:58:57:98:03:df:02:ac:
37:d4:e8:29:95:60:00:9b:f4:ce:cd:93:ad:2d:40:20:c0:3c:
4d:4d:b4:f3:91:59:27:f9:1d:e4:59:29:6f:05:ed:e8:a3:46:
7c:69:ba:b3:8a:b7:2e:d5:d1:86:9a:f1:89:e0:ed:5c:28:9c:
8e:d5:84:f9:5a:af:85:eb:8a:c4:76:0f:8f:b8:0a:14:bc:a8:
f1:d4:22:30:ad:2d:93:e5:56:43:3a:be:56:ff:ef:ad:3e:3f:
d0:90:a9:38:a3:a1:33:39:49:1c:a6:3f:5b:7c:19:80:2a:ff:
32:ab:43:6b:f5:0e:bb:57:f8:14:d9:f6:29:8f:e3:6a:9a:4d:
79:21:33:ac:c3:47:9d:18:83:bf:ca:3f:52:43:15:78:e5:1f:
7e:2d:ed:bc:1c:81:d6:d7:1b:f7:8d:d7:d2:bf:80:63:c7:98:
7a:d0:9c:51:9d:ed:3f:b1:e7:a4:85:60:70:e6:6b:70:4c:ec:
38:50:af:68:f2:6a:88:60:65:5e:32:60:89:94:f5:e3:6d:e1:
8b:86:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:32:30 2025 by rpki-client