Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
File: xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json)
Hash identifier: kGt8jMTawgGp8ZW0TTQfZjmlsGkBprMWXkX7Lr1fTSE=
Subject key identifier: 3B:78:D4:A3:19:B0:86:E5:DF:C5:03:CD:9D:CE:E7:04:E7:31:09:9F
Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Certificate serial: 019676B149EE618D8E77FF086A4E3F902E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
Manifest number: 1399
Signing time: Sun 27 Apr 2025 10:00:52 +0000
Manifest this update: Sun 27 Apr 2025 10:00:52 +0000
Manifest next update: Mon 28 Apr 2025 10:00:52 +0000
Files and hashes: 1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=)
2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: +ZxEN5f8ofyrw6YSsQOqbBxYBht14POOLdWPAjLMzKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:49:ee:61:8d:8e:77:ff:08:6a:4e:3f:90:2e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb
Validity
Not Before: Apr 27 10:00:52 2025 GMT
Not After : Apr 28 10:00:52 2025 GMT
Subject: CN=3b78d4a319b086e5dfc503cd9dcee704e731099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:f3:eb:0e:8f:de:fe:a1:e1:6b:f1:3d:97:
32:c7:5c:28:00:e4:a8:f3:a9:3c:8d:c2:43:b8:35:
65:3e:f9:05:25:00:40:79:eb:33:5d:16:8b:0e:9c:
42:f1:f5:5c:66:84:27:58:b8:3f:b2:e7:f0:fe:8c:
e4:69:54:e8:28:63:d3:85:ef:b0:10:c5:2d:6e:c8:
f1:d9:7e:4e:74:3d:34:0b:f8:43:c7:e9:ec:6e:f3:
39:c0:63:92:75:4f:ea:ea:f9:73:a7:a7:f9:01:7e:
7d:21:4b:19:cd:25:bd:73:99:32:5b:86:0b:9b:8d:
d3:22:d9:40:34:b1:5a:81:b5:ea:1f:2a:d6:9c:1e:
9a:25:d9:1b:f0:6d:48:4e:f6:76:fd:45:8f:38:d8:
f1:56:6b:59:d3:8c:93:24:47:1a:01:d7:6f:3b:17:
63:bc:64:8f:e7:b1:25:fc:0a:a5:e5:25:ff:6e:85:
ac:29:29:58:47:be:c8:d6:11:d5:6b:24:19:0a:ac:
42:57:2b:87:91:44:c1:5c:c9:0b:64:f9:9c:af:93:
e1:76:38:13:a9:6e:e7:80:80:2f:bc:75:b0:69:9f:
58:22:3c:c2:ed:a4:03:6a:a3:9a:91:88:e3:27:86:
24:28:7e:60:89:9a:b0:d6:7d:a4:aa:fb:cb:d0:bc:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:78:D4:A3:19:B0:86:E5:DF:C5:03:CD:9D:CE:E7:04:E7:31:09:9F
X509v3 Authority Key Identifier:
keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:80:18:a6:26:0c:09:8c:19:e7:0d:c6:d1:a5:ff:c5:3a:f9:
8c:9f:35:da:e5:6d:8e:7c:ec:18:c6:3d:97:94:54:ab:c9:54:
25:08:cf:a9:27:9c:1d:35:71:b5:63:9d:d5:e9:ec:a4:87:bf:
4e:06:33:cf:09:6b:62:f3:26:51:98:0a:1e:c1:26:70:42:60:
ba:12:22:89:c7:72:25:58:c4:45:00:97:a9:7c:b4:6d:a5:15:
dd:68:3b:96:d5:d8:c4:c5:64:ea:e4:65:55:d0:59:77:69:f4:
06:3a:48:7c:f7:4e:e5:6e:33:2b:de:56:c6:b9:66:b1:b1:93:
d9:36:f0:b5:01:dd:7a:fd:84:2b:8e:1b:3a:8c:13:40:53:b7:
25:ec:e4:f0:d7:b2:fe:b7:ef:72:74:23:4d:18:05:05:a3:9e:
39:59:53:eb:f4:76:f0:8f:0a:1d:67:6b:ce:67:8e:70:b7:63:
22:5c:ee:f9:59:6f:3a:0e:e0:dd:89:97:fb:07:b9:51:c6:aa:
c5:20:ca:64:b2:93:d1:3d:cb:d7:3a:e9:a1:1d:b4:6a:65:65:
59:47:64:96:d7:59:b7:54:e4:e3:07:23:46:ae:e9:f9:0d:b2:
2b:4b:81:30:76:7b:db:74:eb:91:30:81:a2:5f:88:81:42:e7:
91:f3:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:23 2025 by rpki-client