Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: hyQJGdkaCv/rOZ2Q92OwTkfvUnAtx+f+SgnBOo4cLvk=
Subject key identifier: 55:C8:D6:FF:E1:18:C8:E3:08:1B:F9:4C:6B:C7:19:9C:E9:96:BA:63
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019688EE06E01D41E88AF77A73E8150EDFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0233
Signing time: Wed 30 Apr 2025 23:00:22 +0000
Manifest this update: Wed 30 Apr 2025 23:00:22 +0000
Manifest next update: Thu 01 May 2025 23:00:22 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: xRQrWsbyRxDEsGhDlU6GoHHWm2J7efkiEio0Z1cxLtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:06:e0:1d:41:e8:8a:f7:7a:73:e8:15:0e:df:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Apr 30 23:00:22 2025 GMT
Not After : May 1 23:00:22 2025 GMT
Subject: CN=55c8d6ffe118c8e3081bf94c6bc7199ce996ba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:f6:84:5c:fa:cd:c8:c6:c2:15:d7:4a:dd:
0f:36:99:ea:d5:2f:a4:66:ab:5d:4e:13:51:18:89:
d3:43:e9:ad:64:00:5e:99:36:6c:e4:87:69:dc:f2:
e7:de:1e:d7:a5:39:1a:6f:ee:4b:0c:be:49:a5:7b:
59:e1:25:3d:d4:77:ab:c2:93:e2:6c:ae:b9:b9:9b:
31:12:08:87:a9:2c:06:fd:86:47:e0:ae:50:09:42:
b4:e5:34:9b:ea:74:0b:30:3a:5a:60:cf:83:4d:fa:
49:b9:df:0d:27:5a:a2:99:9f:5d:07:1c:cf:31:cb:
8c:a9:b7:ee:e7:6e:58:ed:1e:76:04:39:64:2b:02:
65:41:73:5d:2b:45:b2:fc:77:5c:37:30:d3:78:62:
ff:4b:d0:2a:1b:04:b2:89:46:14:85:de:eb:64:78:
b2:24:9e:ce:49:90:44:2f:b3:08:f5:4c:b5:8a:3e:
65:08:9a:1e:6f:59:31:99:ef:3f:a0:84:70:63:84:
70:55:7f:21:d6:2f:3f:3d:71:6e:5d:0e:3b:b5:cd:
f6:a6:c0:d2:02:7e:c6:15:a5:1f:bc:6e:ee:71:e6:
b4:03:fd:6e:8c:c2:06:24:7d:92:c4:85:e2:c1:19:
ba:5b:05:c9:c5:6e:9e:ac:50:e7:66:c2:fa:d1:d8:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:D6:FF:E1:18:C8:E3:08:1B:F9:4C:6B:C7:19:9C:E9:96:BA:63
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:06:3b:13:ae:69:a5:4e:70:ca:70:70:78:c3:d0:26:b3:84:
52:6a:85:db:ee:e0:f1:d0:7b:e2:1a:c0:9c:ea:b6:b2:f2:67:
cd:31:86:79:83:6d:9e:d4:60:f4:26:62:27:df:5a:b3:38:a6:
37:bb:49:46:b2:d2:bd:0c:a7:c1:5a:11:d6:27:b5:95:1e:5a:
a0:b7:6f:5e:88:4e:4f:6f:b1:91:01:d8:1e:46:54:01:3f:f7:
bf:a6:bb:8f:38:aa:cf:c4:58:5c:49:96:23:ad:73:90:eb:85:
f4:78:ac:f8:64:56:d1:f1:63:85:2b:7a:92:db:e7:9a:9f:11:
b4:50:49:d5:80:77:28:52:e4:04:ef:da:9a:23:5d:91:f5:e6:
9f:e1:73:0e:1c:bf:f4:2d:09:50:4b:93:5a:47:ff:49:b1:f0:
29:5b:be:08:63:2d:9f:84:e8:4f:2c:ea:d9:45:4e:c6:88:ac:
0b:e9:c2:c2:2e:39:2d:3a:ec:7f:79:37:6f:f9:6a:6b:2c:89:
a2:ab:8a:9e:21:ea:5a:8e:c2:cf:c0:4d:0e:8a:4a:b0:1d:5b:
c9:b2:a1:c6:12:12:da:e9:d5:35:9d:49:fd:70:91:ea:5b:15:
f6:a1:33:ae:d4:19:75:2a:ac:78:53:c9:e4:c3:e7:1b:7c:ad:
b7:68:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:49:08 2025 by rpki-client