Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
File: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft (raw, json)
Hash identifier: 1QEL6hZhUxrYc/UVf+6KrDTUtcS2vROIKRzJjg6IJvY=
Subject key identifier: B4:29:8C:53:4E:3F:11:99:F2:83:50:D7:A9:7F:E2:5E:7F:F7:12:CB
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 01967CB37B400D35AFE50FD08B53C034D300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 14:00:59 +0000
Manifest this update: Mon 28 Apr 2025 14:00:59 +0000
Manifest next update: Tue 29 Apr 2025 14:00:59 +0000
Files and hashes: 1: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (hash: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=)
2: cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl (hash: 4dv6YXcluHO9xSjCp+WsV6t3YP+rMO/UzI2zARDC7j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:7b:40:0d:35:af:e5:0f:d0:8b:53:c0:34:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Apr 28 14:00:59 2025 GMT
Not After : Apr 29 14:00:59 2025 GMT
Subject: CN=b4298c534e3f1199f28350d7a97fe25e7ff712cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:08:41:3a:8e:57:9e:ca:2c:9a:3e:82:9a:
a8:18:96:bb:cb:5e:8f:fc:5e:09:cf:ef:1f:6d:da:
76:3b:e5:98:5c:99:96:05:81:d1:9b:5d:37:25:6c:
88:8e:d7:ee:04:ea:c1:f7:5b:4e:7f:3e:ec:bf:cc:
f8:15:48:8c:78:b1:ee:b6:53:7f:0f:0d:4d:80:3f:
c8:96:e7:64:45:08:9b:ec:02:ee:7e:cf:fc:45:51:
d0:6e:67:5b:e9:4d:ba:8b:ee:85:18:61:70:46:4a:
f9:43:f8:bd:7a:eb:27:cc:5e:4d:9a:a7:41:4a:51:
ab:9f:f7:68:46:0c:0e:5e:1e:44:7f:30:d3:12:d2:
4b:a6:ff:e5:c7:ab:f0:d9:16:35:0b:3c:c8:10:2c:
81:0e:60:90:9b:a5:8c:7e:d4:89:15:35:c8:79:62:
8c:cc:55:6a:34:7c:02:f1:ff:cf:48:77:96:41:03:
a5:17:28:d4:61:d8:9c:8b:f3:61:f9:37:22:88:f8:
9b:9e:f6:d0:5e:10:eb:ef:f2:08:0f:d9:5e:12:06:
98:49:c0:f1:1a:60:16:4f:95:e9:f5:6a:27:37:e9:
fc:77:ec:b5:69:2b:e1:aa:84:21:a1:89:00:ad:ba:
2d:5c:51:cb:0e:a2:5e:91:b7:89:2b:29:35:13:c5:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:8C:53:4E:3F:11:99:F2:83:50:D7:A9:7F:E2:5E:7F:F7:12:CB
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0c:e7:97:c7:fe:79:b9:5b:8c:6a:22:a1:71:81:6b:d4:46:
ad:fa:b5:d6:95:54:f7:dc:c4:7a:31:f3:a2:1d:07:58:1d:7e:
c2:9b:de:fa:6b:c4:e0:3e:25:eb:80:23:1b:d9:c3:2e:2a:5b:
ad:fc:54:ff:51:9c:7d:75:36:3f:40:84:1f:b7:6a:1a:9e:9e:
38:10:14:38:77:3b:6f:3a:7e:0c:27:3e:b7:80:6d:44:51:fb:
70:00:75:d9:5a:cf:a9:4c:f0:37:dd:ce:57:db:2b:23:32:df:
ac:62:5a:8b:3b:c0:b5:c7:74:f0:92:e2:e1:41:66:4a:c9:75:
cc:ba:4f:4a:66:66:80:61:56:ec:f3:30:19:fe:a4:91:2b:67:
37:bc:3d:45:6f:7f:a7:63:74:35:82:94:78:78:62:61:19:7c:
bc:f9:79:ca:76:ac:d6:d2:78:3f:2c:ac:86:22:3b:ed:9e:97:
2f:c7:2b:2d:31:5d:15:95:95:1b:a0:4e:86:00:44:67:5b:75:
cf:23:b2:a7:b5:43:4e:16:d1:2d:6f:67:10:ab:81:c9:ff:97:
29:c0:7a:fd:9d:b9:18:15:5f:34:8a:d6:42:6e:35:4f:03:1c:
ca:af:4e:05:04:a8:ca:84:1c:39:e7:c7:a5:bb:55:6b:96:5e:
e4:8e:a2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:14 2025 by rpki-client