Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: y1Cg0OsgKimFaFxbGNdPQLaXUvLlOkKYVZSEVpfZzLs=
Subject key identifier: 12:0E:44:73:20:B5:85:15:03:92:C1:FF:4E:45:43:18:58:46:6E:F1
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 01967EA20906AC0D5FA8FFF5A078ACF70237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 23:01:10 +0000
Manifest this update: Mon 28 Apr 2025 23:01:10 +0000
Manifest next update: Tue 29 Apr 2025 23:01:10 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: QLtuhMv3Nw+NrPGWPLBBIb2412utCtQgyzjrDgjX0DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a2:09:06:ac:0d:5f:a8:ff:f5:a0:78:ac:f7:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Apr 28 23:01:10 2025 GMT
Not After : Apr 29 23:01:10 2025 GMT
Subject: CN=120e447320b585150392c1ff4e45431858466ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:89:b6:9e:2a:a4:32:4e:ce:cd:71:4d:98:
51:17:3a:0e:3d:50:82:f8:62:df:cd:80:5e:be:6f:
74:4f:e7:51:d3:4f:f1:2f:d0:de:92:67:93:cc:e3:
66:4d:59:e1:da:8f:75:38:57:b2:70:44:28:f7:50:
9c:de:7b:d0:d6:a1:0a:c8:6b:49:2a:6a:e5:58:7b:
bb:4a:2d:a5:5a:cd:51:29:e8:64:99:f3:0f:0f:3d:
7b:1a:35:99:60:f0:4b:3b:c3:93:e6:a7:45:ba:2d:
a7:0a:0c:91:1a:e9:d7:18:81:8f:06:68:b5:7a:97:
dd:85:27:b2:b6:da:b5:60:fe:15:90:99:a0:16:76:
5d:ff:ea:2e:58:4c:72:04:8e:ae:94:ae:d9:8a:b8:
78:12:09:3f:62:ec:4a:96:04:7f:ee:00:7b:56:24:
52:3b:de:42:93:78:4b:a8:5a:2d:fa:c1:e2:81:6c:
e5:c6:95:ab:95:eb:fd:1e:35:e9:b2:bc:6c:07:1e:
0e:07:17:3b:83:00:0a:f0:1c:61:b3:80:d7:90:65:
1f:cf:e5:c6:48:ea:8c:10:8e:23:f2:81:1c:38:af:
b4:e9:d3:2b:c2:7c:c1:9a:35:9f:bc:e2:bc:61:68:
7c:1d:c6:9c:cd:02:67:ac:b8:7a:55:fb:30:d2:51:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:44:73:20:B5:85:15:03:92:C1:FF:4E:45:43:18:58:46:6E:F1
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:f7:3b:52:38:a7:1f:72:59:78:65:7e:ba:74:88:e8:44:
d4:ea:8a:91:57:8f:fa:db:cc:7d:96:76:9a:52:fa:fe:80:7b:
a2:11:53:a5:5c:5c:47:29:99:fb:54:4b:d4:52:38:1d:d1:16:
17:50:95:d9:a4:a4:b2:46:10:8b:12:79:90:0f:a9:80:81:28:
ac:8a:d8:01:fa:ca:65:a3:f9:27:f9:92:f8:9d:b5:a9:e1:08:
9c:6f:bd:da:9a:98:3d:47:a7:e2:95:6e:58:95:3c:33:29:ca:
75:69:92:0d:c0:8c:e3:f6:7e:7d:8d:63:78:c4:24:c0:4c:4f:
dd:46:eb:eb:dc:38:85:42:17:2d:01:17:1f:ce:80:ec:9d:e9:
43:29:a4:df:37:76:7c:97:10:2d:d9:96:11:b8:90:8d:b7:4e:
e1:d3:72:7b:e1:27:25:86:04:82:09:2d:b0:7c:14:fa:96:43:
a4:cc:d9:9a:90:c3:73:bf:72:f6:25:35:1d:5a:8e:ee:79:62:
81:aa:e1:94:6b:fc:a0:e4:30:bb:20:a9:b5:ce:af:d9:42:a3:
7f:58:2e:3b:ce:09:46:89:83:61:bd:65:77:84:68:d9:62:2e:
ea:96:88:4c:2b:23:27:2e:3c:17:fa:07:a5:a3:c2:e3:13:ff:
91:76:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:49:05 2025 by rpki-client