Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: bYZyFdiaIjt+/EGSa5q9+ItSI+H9WBchZI3OmqMCrkU=
Subject key identifier: D6:6E:1A:38:65:1D:0C:98:7D:51:B1:CE:A5:5B:D3:CF:D0:39:F9:A2
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0196827E4872506EF2233CD97AEE060A71D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1055
Signing time: Tue 29 Apr 2025 17:00:36 +0000
Manifest this update: Tue 29 Apr 2025 17:00:36 +0000
Manifest next update: Wed 30 Apr 2025 17:00:36 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: ohWMwcHsmzP9mM5lv76v+uCVm3vVp+Ct78t5Qwq1zZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:48:72:50:6e:f2:23:3c:d9:7a:ee:06:0a:71:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Apr 29 17:00:36 2025 GMT
Not After : Apr 30 17:00:36 2025 GMT
Subject: CN=d66e1a38651d0c987d51b1cea55bd3cfd039f9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:ac:ca:fa:15:3a:29:5c:7d:8f:3a:17:8d:
e1:70:14:1f:72:cb:9b:3d:c0:06:66:e4:e2:79:44:
5f:53:55:4f:c7:29:c4:6a:8f:61:54:a5:52:90:57:
10:12:d6:df:21:ce:d9:95:8b:07:03:d3:38:64:26:
56:4e:f4:04:62:d3:fb:ad:0d:6a:ee:10:cf:98:c8:
c2:fc:c2:e6:5b:2f:d0:d2:50:1c:6c:1e:73:35:8c:
7d:77:f2:5d:9b:c9:44:e2:29:cf:60:90:14:5a:de:
52:fc:b0:6f:d7:d8:20:f6:02:73:af:f7:e7:b3:50:
93:b5:83:6a:49:28:7e:ee:ce:33:bd:a2:b9:4e:0b:
7d:2a:97:14:00:da:eb:be:1a:43:b4:78:1c:ff:b5:
d3:cf:0c:b2:b4:7f:96:fd:57:98:14:a5:d9:6f:32:
34:48:c3:54:7e:c2:53:f0:c9:d1:ed:83:c3:14:d8:
0f:99:9c:aa:59:51:81:33:86:f2:cb:90:fa:87:b2:
1b:6c:bd:e1:e6:be:32:7f:93:4e:41:ac:1d:2f:85:
68:79:1f:12:53:34:c3:59:b9:1f:cf:ee:24:73:f8:
d3:f0:01:ff:81:52:7b:63:09:d1:e2:e7:bc:00:93:
88:0b:b1:11:3f:4a:f8:d7:89:ee:4b:e4:9d:7c:79:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:1A:38:65:1D:0C:98:7D:51:B1:CE:A5:5B:D3:CF:D0:39:F9:A2
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:02:78:5b:f9:71:bb:25:37:5b:8d:67:9b:33:08:9a:ee:0b:
5e:e3:1e:84:e8:e3:a9:75:f9:85:e1:00:16:d1:0e:02:0f:41:
b8:4f:7f:2d:c2:b0:09:67:1c:54:ca:aa:cb:1f:dd:15:ad:ae:
bd:d4:6c:2d:e9:af:a4:af:13:f5:8c:ae:af:c7:73:4a:29:40:
24:b9:02:6e:0b:39:0b:1c:51:e4:b0:aa:03:dd:b3:36:b0:5e:
6b:7e:ed:3b:14:c3:b7:82:36:24:65:3b:7c:7a:d6:90:d3:7d:
dc:93:42:11:01:fb:76:48:e4:f3:43:df:a0:b9:1e:f8:b5:96:
f2:10:16:f8:0e:6b:24:c4:9e:1f:c4:b8:03:36:c1:db:fc:7b:
3a:a9:48:43:d9:8f:72:2b:95:34:e1:b8:05:d4:36:b2:97:8d:
8c:7f:68:1f:5c:91:da:b2:76:53:62:58:1a:86:a5:3b:38:d9:
a6:71:75:30:85:8d:b9:80:5a:4b:31:2f:e1:ae:ba:11:47:4f:
32:5c:9a:55:e4:a5:12:3c:9f:ee:a7:25:b2:43:2b:df:bb:37:
cf:de:f1:a1:1a:83:78:9e:71:23:da:2d:17:38:da:ab:f8:39:
39:c7:15:05:a9:45:25:38:01:4b:83:d0:21:da:c5:0d:7e:21:
8a:cd:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:52:40 2025 by rpki-client