Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: ut9giBhPnHg9zphbVaFhgQF74L/xfEi1NLd7eGe4Pgg=
Subject key identifier: 88:6C:C6:83:A2:BA:F3:16:73:D6:28:70:2E:A2:BF:0B:B1:D1:B4:F2
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 01967F46641D197A18392773443B7545AC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 03C8
Signing time: Tue 29 Apr 2025 02:00:41 +0000
Manifest this update: Tue 29 Apr 2025 02:00:41 +0000
Manifest next update: Wed 30 Apr 2025 02:00:41 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: uXCON9UhyVng7AU2JWX1IeTL5pHjDUFK/mj0TmMTxrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:64:1d:19:7a:18:39:27:73:44:3b:75:45:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Apr 29 02:00:41 2025 GMT
Not After : Apr 30 02:00:41 2025 GMT
Subject: CN=886cc683a2baf31673d628702ea2bf0bb1d1b4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:44:33:60:75:d3:54:01:89:6e:09:a7:66:
09:71:fe:82:45:bb:de:1b:c1:e0:b3:56:26:14:c6:
17:ac:09:e5:56:7e:dd:5b:72:e2:6e:d3:6b:6d:44:
d8:a6:ea:05:c9:87:24:58:ad:cc:5a:ff:26:17:1b:
de:78:47:e3:26:35:6a:09:ff:d4:3a:8f:40:0a:7d:
9a:15:eb:cc:b8:7e:ef:8d:5e:2d:49:22:19:9c:63:
71:ff:46:cc:4a:c9:cd:da:46:0d:2f:45:7e:7a:10:
d0:73:ce:2b:8d:0a:24:ba:74:47:ff:82:34:99:b7:
20:81:3c:2c:37:ad:94:9b:cf:e1:54:fd:26:40:4f:
de:90:c1:1a:42:16:f5:2e:b9:cf:3d:b9:0c:a2:98:
b4:13:7b:ef:ee:65:a5:3a:fe:89:f7:9e:05:94:23:
ac:67:f1:68:a9:ca:e3:22:7e:3a:2a:11:bb:be:f5:
7e:fc:78:ea:0a:46:50:21:e7:00:a2:18:8c:45:dc:
c1:66:8e:f5:f9:2d:b8:fa:65:b8:4c:aa:5a:9c:24:
51:54:fd:33:98:1e:3c:b6:a9:35:99:a0:63:15:8d:
af:ad:73:0f:3e:35:6a:5a:b1:44:71:29:8c:b0:58:
fc:bb:16:b6:4b:fe:ea:5f:b0:a0:37:b2:2c:49:47:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:C6:83:A2:BA:F3:16:73:D6:28:70:2E:A2:BF:0B:B1:D1:B4:F2
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:5e:28:f0:e0:02:ad:cc:88:b3:20:9f:17:85:16:2a:c5:
48:f3:24:b5:dd:52:a6:eb:48:5f:b4:24:58:10:79:b9:77:e8:
60:94:e2:64:76:3a:fa:d7:d7:72:9b:6a:1a:43:13:7e:01:6c:
58:9a:40:98:21:65:29:3e:36:b8:ad:a0:6b:53:55:80:4c:ba:
7e:c9:fc:42:a1:da:56:60:0d:2c:ca:d3:3c:78:f8:7a:41:77:
80:23:77:e9:54:61:12:aa:66:9e:8c:49:f9:51:1f:d2:88:15:
e7:54:2b:fe:23:c0:c5:ed:01:47:d0:b1:5c:9e:cf:bb:5d:25:
fd:dc:21:e2:4e:58:be:df:34:b2:64:17:3f:6c:9f:db:ce:3d:
f8:f7:17:fe:74:81:ab:3f:2d:a5:d6:94:ba:b7:d6:14:9a:61:
6b:7c:3b:56:60:f9:86:91:fc:10:19:1b:ff:98:2b:a1:40:08:
5a:62:dc:22:0d:6a:cb:04:d3:81:c3:79:9f:a1:6b:e2:09:c5:
f6:45:ca:eb:eb:cf:c9:00:43:d7:56:67:63:bb:4f:7c:aa:3e:
f5:98:00:7b:f5:b6:6d:af:60:cc:ab:47:17:bc:a0:38:1a:21:
d0:fa:60:ae:bc:a5:59:48:c2:6b:68:b4:93:21:c7:34:fd:5e:
29:4f:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:29:38 2025 by rpki-client