Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: m6W1fsE1E401iQUHR3Yy6DYASG5lV+QjP8+AY6oephs=
Subject key identifier: 60:CF:AB:01:98:B6:91:94:DE:24:F6:61:DA:2D:14:50:37:AB:D4:B4
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 01967E3343C0E6598276D7473BBB567B0F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 05E6
Signing time: Mon 28 Apr 2025 21:00:10 +0000
Manifest this update: Mon 28 Apr 2025 21:00:10 +0000
Manifest next update: Tue 29 Apr 2025 21:00:10 +0000
Files and hashes: 1: pUCR7J1Yuc7NHdPhzOaLS4lHeXA.roa (hash: duCthqxEbQDKuJSOfYFDXosZAjczkDom8uh5OUKy8l4=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: qjLLk1z5dtQsEqwGdeONc2N5aKaeBwMMe4A/gW9aa3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:43:c0:e6:59:82:76:d7:47:3b:bb:56:7b:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Apr 28 21:00:10 2025 GMT
Not After : Apr 29 21:00:10 2025 GMT
Subject: CN=60cfab0198b69194de24f661da2d145037abd4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:be:22:fa:f9:48:65:b9:e0:92:16:c4:5e:
3e:9a:9b:06:6d:70:fe:98:63:d6:aa:6e:1a:9e:62:
9d:86:c0:b2:59:43:48:8a:7a:87:91:a3:82:ce:67:
b0:aa:b5:49:4f:94:f5:74:ec:35:9b:d4:4a:26:31:
40:d7:c2:6e:8c:40:0d:79:2b:6d:2c:45:6e:04:62:
df:55:f2:93:54:4a:1e:4e:3d:7a:eb:5d:bf:1e:c7:
07:75:f5:b8:ba:81:e6:0f:fe:e9:25:ed:b8:6e:89:
4a:2a:9e:5f:27:b1:9d:5b:ff:f4:9a:c3:07:3e:33:
83:67:31:3b:33:0d:f2:72:2f:04:6b:72:e0:52:a1:
c3:a3:3e:e4:71:87:6c:09:81:3c:58:fb:f8:34:d3:
42:6e:84:0e:62:34:5b:f6:bb:f1:f7:15:30:e0:a4:
70:3b:73:46:88:43:1b:62:c7:c4:99:7a:1b:02:2c:
db:50:8f:51:2b:72:bc:1b:28:cf:40:5e:91:3b:7b:
0f:ea:82:3c:f7:ce:0b:64:32:0b:58:e2:f7:20:3d:
18:44:1c:59:49:ae:c3:13:9c:bc:96:80:76:8a:12:
6c:70:ec:89:fc:9a:d0:96:9a:f1:44:34:3f:c2:cc:
61:a2:63:0c:9b:fc:21:e8:8e:ee:7e:40:77:d7:e4:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:AB:01:98:B6:91:94:DE:24:F6:61:DA:2D:14:50:37:AB:D4:B4
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5f:ba:aa:4d:b7:e8:7e:2f:4a:fb:e2:68:26:f4:a8:68:25:
73:fc:06:5d:b9:bb:5c:6d:8d:f1:85:44:e2:d0:c7:94:5c:4c:
4e:f9:c3:6e:a5:2c:4c:dd:c3:ff:0d:92:b4:ba:a8:a7:aa:ed:
60:4d:bd:49:0c:dc:6e:66:93:06:1c:a0:f6:ae:00:18:28:46:
82:32:c0:37:92:49:94:e0:5b:07:aa:25:55:a4:7b:c0:a3:62:
c5:33:7f:96:a8:3d:34:8c:3b:92:f9:7a:d1:2a:fd:1c:ac:86:
89:99:1c:65:09:85:ff:26:58:c1:e6:20:20:b6:8d:0e:40:2a:
92:b2:47:a8:46:d7:6e:3f:f5:86:76:8e:9e:5a:0c:a6:5d:6b:
4f:26:39:14:58:55:2d:79:2b:49:ed:ca:ec:39:e1:cd:4d:af:
86:bd:3e:ee:9b:a3:5c:dc:8a:8d:11:76:64:f9:35:b7:27:14:
ad:a7:04:71:4d:49:de:24:75:77:4a:a9:c9:b4:b4:78:b9:7b:
cb:3f:df:2a:13:16:2c:f4:d3:0d:01:4f:08:21:0f:a4:b3:21:
c0:1d:bb:4c:fa:80:43:bc:2e:1b:7b:b5:94:4a:3a:95:44:e9:
4a:d5:74:57:36:9c:68:e4:06:86:da:07:37:31:37:6e:90:bc:
95:1f:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:32 2025 by rpki-client