Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: oFGlMq4zzhtHaULs78SuNixR4D2NQv/vErRBLQaKbpQ=
Subject key identifier: AD:55:92:20:99:C0:6B:03:DB:39:FA:2C:48:49:2E:B3:96:21:EC:1D
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 019676433C9C87105138F835EC77F5D99FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 0446
Signing time: Sun 27 Apr 2025 08:00:39 +0000
Manifest this update: Sun 27 Apr 2025 08:00:39 +0000
Manifest next update: Mon 28 Apr 2025 08:00:39 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: akrgayDzl4zlLKzIecYM4qBOvCJZQ3RCjHltAOeCMJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:3c:9c:87:10:51:38:f8:35:ec:77:f5:d9:9f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Apr 27 08:00:39 2025 GMT
Not After : Apr 28 08:00:39 2025 GMT
Subject: CN=ad55922099c06b03db39fa2c48492eb39621ec1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:65:d8:7a:3a:5e:96:9f:e7:16:08:d3:26:
90:b2:c4:7e:ad:10:e6:f1:a6:b3:3e:2a:96:c2:9b:
03:ee:f1:e3:ba:02:74:92:54:e0:8b:92:1f:bf:3c:
39:8c:17:db:e7:87:6f:f2:4d:7e:49:fc:91:00:47:
7f:44:00:af:9c:d1:bb:69:c5:3b:31:9d:05:ec:d2:
ae:ef:bf:f1:08:25:ce:eb:23:35:7f:95:0b:dd:8c:
f6:1e:64:c2:8c:d0:aa:5e:e2:ab:64:4c:59:57:fa:
f3:28:8d:f7:ff:a9:95:44:df:cb:94:3d:52:a3:27:
8f:c1:2b:4b:da:2a:dd:2c:04:bb:db:63:84:59:e0:
5d:85:28:56:31:22:70:e0:52:57:c3:1f:97:3a:47:
ad:dd:e6:79:d3:5b:ff:07:63:c1:44:f4:3b:6d:24:
92:fb:36:02:5f:c4:f9:65:80:98:6c:48:62:89:53:
1f:60:d5:b4:cd:70:b4:e7:5e:b5:fb:6b:c0:d5:ca:
b9:ed:5c:e1:19:cb:3e:51:04:f8:83:1f:4d:fe:37:
dd:14:8d:e9:d4:e9:52:02:0c:95:b1:ad:bc:5a:73:
26:4d:78:c7:14:06:4f:a3:2b:e6:53:ad:b4:71:88:
bd:04:5a:21:d9:8d:4b:80:19:44:62:34:f7:ea:c9:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:92:20:99:C0:6B:03:DB:39:FA:2C:48:49:2E:B3:96:21:EC:1D
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f1:16:c4:61:9b:b9:04:87:29:d1:c5:bb:d3:b1:22:d3:b7:
70:c0:7e:63:a9:2e:2a:5d:68:46:c5:4f:c0:e5:63:9a:87:78:
d8:62:d1:3c:42:98:62:51:fe:ca:eb:aa:d6:ec:f9:02:5b:d8:
a6:8c:e3:55:c0:4f:48:0d:95:3b:8f:e4:e7:8a:f3:d5:60:ff:
42:e4:2d:d0:f0:42:e4:e1:b2:6e:49:90:09:70:8d:71:8f:36:
14:97:70:b3:6a:7a:5c:8f:8f:96:56:1e:af:c7:75:b6:2b:c7:
91:7c:e6:da:3b:cb:95:b2:41:14:e4:bd:03:44:d7:17:3c:07:
23:22:47:19:92:49:bc:ad:30:27:02:9c:09:dc:2b:dd:6e:de:
03:61:69:85:ec:eb:49:b1:e9:16:06:92:f3:a0:46:7a:67:24:
7d:1e:fa:65:62:a0:5a:b0:0b:c6:55:1d:81:7f:a8:45:64:51:
e9:5c:3a:70:80:dd:f6:6f:80:cc:10:ad:91:52:03:a0:99:8b:
6c:5f:68:05:46:8d:d3:61:51:7a:4f:2b:e6:c6:85:01:e0:73:
ad:bb:69:3e:0f:87:68:c9:0c:d3:36:62:34:1f:1e:37:55:fd:
6e:7e:ba:b0:90:da:9d:44:82:d3:43:21:dc:8c:1e:a9:0c:d4:
13:d4:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:43 2025 by rpki-client