Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: lhRkJtMFuLYaqa6TqSSp6z+Y40+GbgpBMjelRoPK0CE=
Subject key identifier: 89:69:95:4D:E5:4D:C8:F1:99:E9:2F:53:D6:33:93:6E:88:20:C9:AE
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 019677C36A4788C67BA1EAC0C448ACFFE5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0D7B
Signing time: Sun 27 Apr 2025 15:00:17 +0000
Manifest this update: Sun 27 Apr 2025 15:00:17 +0000
Manifest next update: Mon 28 Apr 2025 15:00:17 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: u98+OOJ3T5Icehi4+4Tbh6EbrIav2mM/P17aTIcN6W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:6a:47:88:c6:7b:a1:ea:c0:c4:48:ac:ff:e5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Apr 27 15:00:17 2025 GMT
Not After : Apr 28 15:00:17 2025 GMT
Subject: CN=8969954de54dc8f199e92f53d633936e8820c9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:40:96:6a:f2:1a:78:1a:da:0d:d3:0f:45:
53:f3:50:2d:a5:3d:f5:f3:5e:68:de:b4:43:64:9d:
28:d1:b4:9c:fe:02:da:79:ca:4b:4d:1e:0c:9e:c7:
2e:62:2d:1e:fe:25:d6:19:fc:da:0b:80:1d:3e:40:
c4:87:5d:03:b8:e9:11:7d:ba:10:16:26:4f:22:43:
67:9b:49:f9:a0:ab:2c:3d:f3:6a:b4:bb:32:7c:a9:
e3:d3:96:3f:fb:be:47:61:2d:79:4f:15:56:57:4c:
1d:f3:70:05:24:aa:de:79:c0:93:6d:01:7d:88:3f:
fb:9c:25:84:b8:61:ae:25:bd:79:2d:75:13:25:83:
fb:f4:64:f7:02:e2:85:a6:e3:f2:36:a8:4a:1a:cb:
dc:a6:80:e4:c5:f3:f3:70:c6:9f:53:01:70:82:09:
7a:c9:92:2c:d5:93:16:e7:1a:9b:a5:55:88:63:87:
8c:d7:a5:56:02:0d:d8:d2:ef:6d:e7:ec:e0:f7:23:
7e:e0:c6:ec:5c:0c:aa:52:28:8d:13:35:91:36:0b:
ce:ec:a5:67:e2:3a:60:d7:25:a5:00:12:91:47:c1:
c7:81:1a:9e:ce:53:79:c3:b8:6b:97:48:b7:d7:d8:
3f:b7:2b:45:71:91:b3:4c:ba:50:6b:90:ec:ce:e3:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:69:95:4D:E5:4D:C8:F1:99:E9:2F:53:D6:33:93:6E:88:20:C9:AE
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:06:b4:8a:28:be:17:e4:c5:b2:6a:19:0a:da:7c:94:fe:
06:77:47:1d:be:25:d1:5b:cf:77:32:f8:5d:3b:13:df:82:62:
05:93:46:1c:08:1b:82:01:e7:06:49:71:5c:bc:b3:a6:e8:88:
24:70:0d:69:1b:ac:a7:94:0f:2c:4e:94:f2:2d:e3:a2:70:85:
44:e6:73:04:32:e7:7f:9b:75:86:12:aa:52:cd:34:38:ce:d3:
1c:33:ec:63:c0:c9:81:e8:4d:c1:1a:d1:f1:1f:9c:07:66:07:
c1:13:ef:ff:e6:e1:53:da:8c:89:28:5b:05:01:d7:6c:85:1a:
7f:58:43:8a:12:4b:2e:4d:74:11:08:a8:b6:c0:5b:73:78:4a:
37:e8:7e:82:93:6a:dd:0a:1d:09:f5:e1:64:23:74:00:71:47:
e3:1d:ca:4a:43:79:53:0e:55:58:9c:eb:88:30:f9:f3:1e:ab:
cd:1d:70:3c:ca:8d:ec:85:0c:c2:d7:c4:a6:bf:24:09:94:4b:
52:06:60:19:e3:78:85:a8:a1:5d:e2:87:c2:b1:8b:1b:9f:50:
56:ed:51:23:fa:3c:de:d4:e3:b0:3c:b0:2b:a0:07:2c:ac:eb:
fc:47:1b:56:d3:37:d0:ac:b9:e8:98:28:df:eb:36:7c:b7:82:
81:e9:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:21 2025 by rpki-client