Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: 8uIc7T13+PrNpbivuFUYuV+CxkCfnqwDeozVD+ZqXAk=
Subject key identifier: 0D:FE:21:06:B8:0F:A5:B4:EF:55:03:3D:3E:28:A7:12:B5:97:D8:33
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 01968849C34FD564406CDC405BCA889A2F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 02DF
Signing time: Wed 30 Apr 2025 20:00:57 +0000
Manifest this update: Wed 30 Apr 2025 20:00:57 +0000
Manifest next update: Thu 01 May 2025 20:00:57 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: i2Oe/aOyFxJfOYqpIkGv5gtFIYfTihoDHEySoqMIjGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:c3:4f:d5:64:40:6c:dc:40:5b:ca:88:9a:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Apr 30 20:00:57 2025 GMT
Not After : May 1 20:00:57 2025 GMT
Subject: CN=0dfe2106b80fa5b4ef55033d3e28a712b597d833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:98:80:09:4b:7d:57:4a:97:dc:50:55:0b:
6d:35:b4:8a:46:7b:7e:3f:78:75:83:79:af:a6:cf:
ed:85:e3:ef:fc:f9:59:10:8a:58:a4:2b:1f:92:53:
1c:f6:3f:ac:c9:08:a3:95:46:f8:f4:a7:e5:3f:05:
ab:61:33:93:8f:79:ee:8e:11:a6:ba:58:b8:39:10:
a8:64:39:69:f0:a0:cc:59:38:a8:76:8e:f2:7c:e4:
f7:ca:39:fc:b5:d9:f3:86:ea:0d:7d:c6:4e:ea:7a:
75:68:d6:92:fc:d8:d5:f5:8d:1c:43:c2:d1:f8:25:
ee:10:e9:28:67:80:a4:58:0e:cc:49:4c:16:f8:64:
e3:8e:f7:eb:93:6f:fd:11:db:70:d7:bb:48:e0:a7:
b0:6d:9c:24:bf:51:17:00:ef:ef:26:ca:4f:b1:3e:
5a:6f:b6:ba:6e:00:5b:38:c7:dd:16:d3:8a:f5:bf:
ed:f1:97:6a:01:59:a2:9b:c5:99:9e:19:91:fd:af:
11:a8:23:0c:54:3e:e5:7c:d1:cb:31:1e:e4:62:d5:
65:56:cd:a3:d1:41:ce:bc:ee:c5:c0:3d:47:ea:0c:
34:66:84:c7:06:b0:61:aa:1c:c6:b4:37:c7:40:53:
80:50:2f:9c:9a:7e:4b:d0:43:0c:85:f8:d7:d2:b9:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:21:06:B8:0F:A5:B4:EF:55:03:3D:3E:28:A7:12:B5:97:D8:33
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:25:8e:fa:32:6b:52:1e:7e:dc:f4:ba:7c:01:f2:fc:47:
3c:00:f3:ab:7f:ae:07:38:cd:2a:83:18:6f:26:de:a4:18:ff:
3b:91:af:06:92:23:63:bd:51:32:cf:fc:ae:c3:78:df:60:26:
37:40:32:d1:e7:fe:ab:17:3f:56:9f:d1:9b:37:5e:4f:3c:a4:
02:4c:fb:57:91:2f:34:02:3b:50:20:95:f6:03:71:4e:4b:34:
fa:d9:04:20:01:e2:be:cf:f8:aa:9d:f1:72:d0:bc:e0:2f:62:
30:50:3c:32:1b:79:32:36:8d:79:d1:9b:b9:7e:28:7d:4d:06:
d4:91:f3:fc:31:3e:ac:56:16:fe:ec:b5:ac:e4:21:97:13:06:
c1:fc:b8:8b:a1:99:5e:ee:63:db:1c:e4:70:a8:03:c9:f5:f2:
85:02:a1:fb:26:90:7b:df:ed:e4:25:68:05:01:ad:cc:c5:ee:
f8:a9:78:20:27:50:d7:57:cd:c1:88:09:3e:9a:cd:fa:11:ec:
8f:c1:83:69:da:b0:dc:6a:40:f7:84:a6:6f:07:53:62:4a:d7:
bf:7b:46:9d:bc:29:cc:f7:28:c4:87:93:b7:4f:89:93:48:71:
14:8b:a1:32:60:29:04:ae:57:0d:9b:89:c5:7c:f4:88:93:1c:
8b:a9:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:18:06 2025 by rpki-client