Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: 44m9AaP7Am82RE4ncpe12ojGEgqgNPdyEePcrTooh44=
Subject key identifier: 7E:69:73:40:4D:96:CC:11:59:58:B0:75:0C:45:84:AD:FF:81:66:89
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 01968736B6A6CC748E8E569A9B00319B2948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 15:00:31 +0000
Manifest this update: Wed 30 Apr 2025 15:00:31 +0000
Manifest next update: Thu 01 May 2025 15:00:31 +0000
Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: MqQwN5mDvhIpN97QMQcYlAkxi5toVYm+nsLLJtJ+E00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:b6:a6:cc:74:8e:8e:56:9a:9b:00:31:9b:29:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Apr 30 15:00:31 2025 GMT
Not After : May 1 15:00:31 2025 GMT
Subject: CN=7e6973404d96cc115958b0750c4584adff816689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:c9:b4:e2:f2:da:30:33:bf:4f:d4:1d:68:
47:f6:0c:cf:ab:05:7d:ac:d7:20:89:a5:fe:44:76:
27:95:a0:fc:ce:ba:0d:ac:97:57:7b:53:a1:32:25:
c6:ac:c0:90:d3:6e:5c:fa:8f:77:d6:3b:03:dd:54:
22:e7:07:bf:90:34:97:e8:59:c4:f1:ea:7c:3f:e9:
e7:7c:56:bf:6e:08:ab:2d:8c:fd:9e:69:3e:72:84:
c3:3f:d8:70:80:70:4e:3e:59:ef:dd:59:f1:a3:42:
3b:f1:66:5b:26:79:d2:80:32:dd:d4:f0:9f:97:38:
ff:4f:9c:c5:4a:63:db:c5:97:43:b6:6a:71:d2:79:
95:1b:c5:ae:bc:40:a8:6a:23:35:d0:d6:7b:79:03:
8c:ba:07:20:80:b1:68:0a:0e:b3:da:18:3d:76:fd:
80:32:03:07:25:f5:d5:91:cc:55:c5:b2:7a:51:db:
be:24:5e:b2:1e:53:0c:ee:9e:0f:b9:7d:45:f5:e7:
f8:db:9c:c1:19:ff:93:5b:40:b1:37:ed:5e:b6:46:
2f:d7:cf:cd:f3:4f:8e:e3:01:f3:68:ba:2d:1a:fb:
58:bc:2a:7f:de:c1:97:62:3f:3c:74:9c:ac:c3:c3:
22:06:16:64:d4:f8:ca:e7:5a:61:bd:21:21:49:5a:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:73:40:4D:96:CC:11:59:58:B0:75:0C:45:84:AD:FF:81:66:89
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:7e:89:96:38:a1:ea:3d:7f:4e:91:ce:a2:07:6c:68:f6:
b3:a1:11:82:56:1f:91:01:f7:80:61:58:44:8c:cf:c3:c0:8c:
7e:82:8d:c9:06:57:9b:c5:43:6b:ad:9b:82:f9:0e:0e:f7:29:
c8:14:e3:62:be:7f:0d:4d:f4:c6:7d:09:55:eb:bf:ad:e1:e2:
fd:2d:ec:39:3c:e6:65:98:ca:67:37:71:c1:eb:59:96:ee:51:
51:ce:d0:02:51:9f:7a:43:70:9b:49:4b:63:c1:4e:e6:7c:96:
1b:01:a7:fb:fd:89:35:8f:e4:b0:1f:54:e9:3e:fd:0a:b6:7c:
57:cb:e7:e3:33:0a:8a:2f:ac:16:96:a4:7c:c9:98:bd:0a:0e:
5c:51:4f:8b:f4:61:73:04:31:51:3d:21:c9:21:29:93:2c:c0:
bf:a5:78:38:69:b0:97:2c:44:aa:5e:97:1a:12:3a:96:fd:50:
cc:64:cc:c3:7a:1d:b3:9e:55:24:15:1d:d2:6c:f0:d7:c0:e4:
85:3e:ed:87:77:5e:49:23:16:9e:27:3e:c7:4a:46:6a:98:26:
fb:90:e5:cc:f1:7e:e6:bd:1a:45:89:b9:af:53:a1:9c:92:06:
79:86:5d:0d:d4:64:c9:b5:f3:3d:cf:ba:f1:a1:f3:e8:1b:16:
d7:f1:a4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:03:29 2025 by rpki-client