Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: k/tgFn17MKN8WebhHRwNZf7K0FGC1WBcqsuo6lb3Xvc=
Subject key identifier: F0:71:82:A1:16:58:AF:3A:91:A8:97:01:15:60:9B:53:33:12:E4:A6
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 0196876D659F3BAB0477737F0B09AB680716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 09D1
Signing time: Wed 30 Apr 2025 16:00:15 +0000
Manifest this update: Wed 30 Apr 2025 16:00:15 +0000
Manifest next update: Thu 01 May 2025 16:00:15 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: ej5LJ+ThrPTpOAbREZm9QYR1eEAajs1yQUZ+1VWPOlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:65:9f:3b:ab:04:77:73:7f:0b:09:ab:68:07:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Apr 30 16:00:15 2025 GMT
Not After : May 1 16:00:15 2025 GMT
Subject: CN=f07182a11658af3a91a8970115609b533312e4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:8c:96:2b:e3:3d:8d:76:bd:38:0c:1b:d6:
74:49:00:85:bc:cc:59:11:9e:47:b2:58:46:b8:02:
f9:f5:56:85:9e:ed:b8:69:6f:b5:f7:45:04:93:84:
0f:23:b4:80:d0:2c:81:9f:40:42:ad:d6:09:2d:58:
46:4e:98:fa:77:8e:cf:16:73:19:79:26:d2:1c:32:
6e:9b:47:62:c1:c2:46:73:e0:58:df:be:6b:57:56:
98:0d:d8:a6:d9:86:67:45:38:70:d8:33:a3:5a:6f:
e1:7e:3e:e8:57:8c:20:f3:b7:75:d7:86:49:e7:75:
81:af:a6:cc:ba:26:61:ea:0d:8b:f3:42:4e:8d:7e:
79:9c:fd:0f:eb:a0:ae:1f:12:c0:dd:b1:b3:6a:28:
7c:f0:a0:5b:c2:5e:1b:eb:12:93:57:dd:21:bf:9c:
95:aa:cf:58:e5:cb:9a:70:08:2b:c7:cc:ac:a6:6b:
8a:f1:e7:0e:e1:26:56:c5:93:05:12:23:1b:48:dd:
23:49:5f:60:b5:65:2a:1b:f0:16:97:a0:09:97:57:
fe:de:39:a0:f4:94:22:8c:86:e3:71:d1:3d:64:12:
db:2e:36:48:7b:54:3e:3d:61:45:68:44:41:28:ea:
f8:22:51:fb:4e:2c:0a:f7:66:90:d1:2a:87:0c:21:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:71:82:A1:16:58:AF:3A:91:A8:97:01:15:60:9B:53:33:12:E4:A6
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:91:15:c4:92:77:af:86:9d:78:90:85:1c:7b:96:31:a0:7f:
d4:85:03:7d:ee:23:bb:33:8e:dc:a9:4e:d7:bc:5e:db:ab:50:
ec:87:94:2b:fe:47:fc:b3:11:3c:03:d7:47:9c:d3:fc:fd:02:
8a:4e:a9:b8:e9:22:7c:32:36:d8:08:a5:13:18:4c:55:a0:5f:
b3:45:7b:04:4f:21:53:0e:f9:ba:c9:60:8a:43:f8:3a:8f:dd:
30:0b:c3:0c:75:76:42:32:30:dd:4c:9e:c7:53:3c:12:0b:ae:
6a:eb:3e:26:45:1c:73:d6:6c:6f:90:a7:ef:e1:70:54:50:d7:
a8:45:3b:79:b1:9f:a8:94:ac:8a:bb:22:9f:c5:30:15:0c:f4:
85:08:0d:e5:5c:d5:21:a2:37:13:73:9b:0e:3b:63:d2:b4:69:
98:0f:f4:83:3d:3e:23:c0:d3:61:c2:bb:2a:17:e2:6b:09:bc:
bc:55:2e:e4:71:37:b3:b6:dc:2d:27:b3:49:53:a9:69:7b:30:
6d:cc:ea:9e:6a:f5:1b:30:ae:26:c9:f3:f5:f9:9b:35:94:0d:
e1:a4:a7:e2:16:b3:f5:b2:f4:7d:2f:d8:94:50:76:e1:20:2e:
48:c7:59:62:c2:26:11:e1:79:96:3d:2c:8d:0b:ec:33:46:b7:
99:63:01:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:41 2025 by rpki-client