Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: ckcqw1ESBcsCNWLNtVcC+dYHBvXpcArEaEL4IDl8/8s=
Subject key identifier: 32:3E:23:8F:45:EE:42:A8:66:D5:FB:9F:2C:C8:FE:42:8B:51:0F:BB
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 01967BD7B37939D03BCC927C0E8470D8A60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 10:00:55 +0000
Manifest this update: Mon 28 Apr 2025 10:00:55 +0000
Manifest next update: Tue 29 Apr 2025 10:00:55 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
3: aHqqL1NN5YtLBNmQYn6ZUukv3fE.roa (hash: LV3wM5zWPJWC7ZTCI+xUuEUT6iOR32mYf+UKwFD/zS0=)
4: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: pEP++V4+smcBM+fScwOe+Q3bbKkuK/30Y4Jp65wezew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:b3:79:39:d0:3b:cc:92:7c:0e:84:70:d8:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Apr 28 10:00:55 2025 GMT
Not After : Apr 29 10:00:55 2025 GMT
Subject: CN=323e238f45ee42a866d5fb9f2cc8fe428b510fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:fb:94:05:6f:4c:14:61:15:1c:0f:08:d2:
17:4c:5d:02:ef:b9:2e:28:b5:b2:18:e0:76:b2:04:
ed:56:a7:21:fe:50:a1:74:2e:85:f6:a3:f3:a0:18:
45:ff:47:9e:56:a2:ed:0a:dd:9b:cd:e2:ba:7f:7b:
a6:d9:cc:7b:38:50:e2:2b:64:53:7b:40:7b:ac:f8:
ce:40:22:e9:85:0f:10:de:37:0d:22:45:86:db:8d:
36:9d:10:56:ca:f8:43:1f:b3:50:86:4c:da:f7:bf:
99:8c:dc:85:d6:bc:46:13:bc:e6:6c:3a:7d:72:fb:
a1:01:58:2d:5c:14:66:8b:7a:6f:2d:c5:af:df:dc:
32:c0:2a:89:ce:ce:06:ee:10:cc:f6:a9:17:7c:e5:
30:a1:0f:03:3d:35:98:fe:60:c7:99:18:a7:61:2f:
c8:f1:a7:91:9d:ba:0c:7b:36:d3:62:fa:05:1d:90:
6a:f0:90:78:65:cb:ff:bc:cd:ab:ff:8d:54:97:2b:
94:4d:cb:51:e4:88:22:cf:4f:c4:28:84:eb:c2:50:
7e:5e:da:6a:fa:39:7d:2b:74:a5:ac:7d:cd:15:50:
2f:33:83:0a:b7:16:75:fe:fa:f9:13:71:a3:7b:59:
76:cf:5e:2e:13:26:18:e9:2b:e4:7d:b1:55:f6:0e:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:23:8F:45:EE:42:A8:66:D5:FB:9F:2C:C8:FE:42:8B:51:0F:BB
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:71:0e:fd:23:3e:e7:06:21:a3:cf:51:b3:0b:bc:d0:3f:
b3:8b:b8:1f:b2:39:63:94:0f:74:1d:45:d4:7e:5f:a4:f7:bc:
39:f4:9e:8e:4a:a6:ad:cb:1e:e5:2f:01:bf:c6:8f:e5:ce:16:
1b:9a:be:03:cb:96:26:40:33:2d:f1:76:a5:ec:91:09:31:48:
9d:cd:29:21:97:1b:0c:e5:77:91:88:02:c0:b1:4e:b8:3e:f5:
c3:57:58:bc:21:d8:b1:0e:77:74:96:eb:fd:a6:45:56:70:f6:
dc:55:a3:53:6a:56:f2:a4:c8:f9:39:58:82:49:57:f2:8f:09:
75:64:6f:7e:ff:93:08:f4:fc:28:67:96:58:44:03:54:d5:9f:
ed:5a:96:65:f2:b1:ca:79:13:e4:c3:bd:0c:58:60:b1:06:f5:
74:0a:a8:66:9d:91:7f:27:ef:3c:7c:df:e1:7f:f2:e1:ac:6c:
fc:73:d6:46:6e:67:a5:3b:72:7b:65:5b:d4:a8:78:8f:37:66:
c9:66:69:3e:cc:4f:aa:01:8c:a0:ed:85:f5:07:4d:91:c6:52:
68:ce:62:11:74:03:0d:fb:e1:ac:3f:2c:fb:03:f4:bb:9a:e7:
4d:0d:5c:2a:e4:b5:2e:94:6b:e0:f6:44:40:08:64:aa:db:6c:
22:db:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:59:12 2025 by rpki-client