Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: w/mHxubOsdJyiVr/PrEalHPa10zSnSWNoWiJNt+W0T8=
Subject key identifier: 80:92:20:73:FE:10:45:99:78:D2:BD:59:99:AA:AB:53:E8:E6:07:B8
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 0196748C2D2464D5F0345842C2B000C8BDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 11FC
Signing time: Sun 27 Apr 2025 00:01:05 +0000
Manifest this update: Sun 27 Apr 2025 00:01:05 +0000
Manifest next update: Mon 28 Apr 2025 00:01:05 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: cnH4j9277INR/469CIgNY5qvDavQfTl9S+Un3D3JLAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:2d:24:64:d5:f0:34:58:42:c2:b0:00:c8:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Apr 27 00:01:05 2025 GMT
Not After : Apr 28 00:01:05 2025 GMT
Subject: CN=80922073fe10459978d2bd5999aaab53e8e607b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:81:9b:93:06:59:b9:1b:b0:fd:45:5e:4d:
6e:1b:c0:d7:ac:18:38:df:1d:c5:50:6a:77:b3:85:
83:cd:c7:4b:b9:94:44:ab:40:d8:e0:7b:e6:33:0d:
6a:26:33:80:da:38:d4:c4:b8:d0:88:ba:c6:62:d3:
73:c4:21:e8:59:b5:09:3e:8a:9b:c6:77:aa:aa:fa:
5a:da:9d:6b:04:93:cd:97:8e:ec:76:d2:b9:3d:d6:
9e:a8:d0:7a:de:97:1f:74:e6:de:7b:a9:02:5c:b9:
be:19:3f:28:1f:24:5c:36:bd:2c:14:0e:c8:08:77:
8f:01:d9:38:58:bf:45:e7:20:cb:a4:e0:c2:4c:fe:
ea:da:f8:24:9b:c7:25:92:81:10:78:57:24:66:73:
84:2e:90:01:61:74:7e:09:9e:f7:b6:39:ff:56:60:
60:96:c5:b9:07:c0:ea:65:66:aa:5a:68:8e:6e:11:
78:e5:86:d7:ef:e2:cd:6d:b5:a4:ab:5e:f3:ae:a3:
c9:27:d6:f0:ee:0b:fb:37:a2:1e:09:72:09:ab:28:
eb:38:90:13:bf:c3:bc:d8:9f:93:bb:78:01:1f:01:
d0:5a:05:6e:f6:10:a2:5a:df:7b:d2:d4:2c:ca:4c:
f0:a8:7f:a4:e6:f3:12:c3:27:c8:63:4a:4b:fe:b7:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:92:20:73:FE:10:45:99:78:D2:BD:59:99:AA:AB:53:E8:E6:07:B8
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e3:ed:44:af:6e:b9:c1:06:c6:25:a4:95:1b:09:bb:4d:ff:
2e:f2:40:da:b7:0e:c2:78:c3:ec:5d:0c:69:c2:e2:04:02:3c:
25:de:79:e3:1d:52:72:3c:c3:ed:96:5e:96:fa:cf:6a:a0:a0:
37:0e:49:ef:bd:4c:59:76:ae:06:3e:cd:4a:82:7c:35:3e:b8:
72:1e:11:9d:65:1a:e8:cf:21:55:7a:df:99:d0:de:24:1a:cb:
09:f9:9d:27:94:31:f1:3d:db:87:95:00:91:10:0d:45:2c:6b:
08:30:e1:62:17:69:c0:a3:84:f6:f6:ba:03:73:95:a1:4b:6c:
1a:f2:ab:eb:89:2e:67:87:14:15:38:65:ec:12:23:3f:9c:03:
ef:e0:10:0e:18:a5:8f:bd:61:bb:49:98:14:48:6f:fb:68:f2:
5a:c4:d4:2f:e9:fd:b9:39:28:24:53:c6:6b:7c:f1:2a:f7:16:
e5:97:45:97:64:91:4d:7b:e4:a7:5c:1e:14:4d:c7:cb:72:4d:
a2:5b:c4:c3:87:a3:59:e5:21:a0:d1:0f:e7:99:b2:ef:d1:31:
b6:19:85:21:4b:03:4b:e7:a4:dc:8d:6a:f2:7b:c2:83:57:83:
1b:d7:97:5f:2f:04:79:5f:b2:0b:5d:da:ad:ee:ce:0a:4e:ee:
88:bc:6c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:29 2025 by rpki-client