Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: tf7+yxfK+ug5p7J587Nc4V4xonqWzba8MyIb4Ie2IVY=
Subject key identifier: 52:8D:A9:4E:DD:2C:67:F0:F7:E4:61:C9:1A:17:BC:F0:DE:AB:4B:95
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 01968993268DBC6615C33847D202E74A854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 02:00:44 +0000
Manifest this update: Thu 01 May 2025 02:00:44 +0000
Manifest next update: Fri 02 May 2025 02:00:44 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: XODonhWhGpJLD9R4X+GQg77i8dj68wOUFl33DHX8Q68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:93:26:8d:bc:66:15:c3:38:47:d2:02:e7:4a:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: May 1 02:00:44 2025 GMT
Not After : May 2 02:00:44 2025 GMT
Subject: CN=528da94edd2c67f0f7e461c91a17bcf0deab4b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:a3:af:69:ff:ea:5c:c9:1f:6b:34:00:bf:
e2:09:b9:33:ea:78:25:b6:92:5b:29:e0:3f:fd:70:
92:af:1e:44:ae:00:b9:f5:bd:ef:15:23:99:1e:28:
27:9a:c1:de:58:e3:6e:5d:3f:95:fd:c1:27:99:7f:
a1:1e:a4:67:51:cb:77:be:2b:85:20:9a:26:99:94:
89:71:06:6a:4b:4d:3b:aa:7c:00:2a:5f:12:32:2a:
ab:a9:04:a3:ae:25:f2:3b:a9:01:de:ff:75:c5:7b:
52:0f:49:c4:8a:d1:51:4d:83:c4:dc:53:7f:f4:52:
a2:1a:87:14:96:57:42:d5:60:27:80:27:42:f3:08:
b7:f6:35:2a:6f:0f:cf:36:f4:bb:bf:9a:cc:90:e5:
d5:40:51:b3:f0:6e:74:6d:c2:f9:c5:fb:a2:6f:a9:
a1:55:0b:f7:08:51:f4:ae:97:06:ab:49:99:67:09:
df:26:0c:d1:7d:e4:38:c0:23:63:da:6f:ba:eb:9b:
e0:46:ff:c6:d0:ef:fe:64:3a:ca:7a:6d:5f:43:89:
0d:81:d9:b6:33:7d:6a:09:3c:35:a6:14:4f:61:fc:
b8:4f:a6:e1:39:cf:73:c3:db:fd:46:6f:2a:fe:87:
94:b9:89:84:ea:75:69:65:78:ce:f3:20:80:67:45:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:A9:4E:DD:2C:67:F0:F7:E4:61:C9:1A:17:BC:F0:DE:AB:4B:95
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:7f:fa:ba:57:81:23:e9:a3:6f:aa:78:96:a1:af:c1:06:
5c:c9:79:6b:c2:e4:d3:34:69:ec:35:d7:dd:66:f7:ea:ab:46:
b9:3f:81:69:65:08:1e:92:f8:90:bd:de:4a:87:ca:ac:91:68:
9b:2c:9c:18:2a:2b:8c:56:9a:c9:36:f5:be:96:41:07:c7:72:
5e:24:db:d5:be:10:61:bd:6d:9f:1b:cc:85:34:ed:33:cb:bd:
18:fb:07:12:38:bc:65:e7:60:e8:b2:66:3e:fb:a1:a4:50:95:
6a:dd:28:87:a1:e5:77:1f:48:c5:c4:33:e7:1d:0a:e9:39:ca:
1b:5b:09:2f:ae:e0:d9:3a:25:5b:c9:08:e4:f7:13:73:34:5e:
e1:b0:fd:58:60:a6:9c:29:e4:90:d3:fb:0e:36:ae:7f:26:5a:
ef:2c:20:a3:4c:39:b2:fd:d0:d2:ea:86:ce:4b:8a:b2:cf:da:
ec:45:4a:38:10:ab:08:1d:b3:fb:0b:81:e3:61:de:a6:ec:f6:
d2:40:13:fa:98:63:dc:37:b1:3d:9c:43:bc:77:c8:e4:77:1a:
4d:bf:f5:8c:33:b0:7f:ba:b0:93:92:24:3e:a1:b8:11:3d:25:
00:57:d8:31:23:86:48:50:ea:2e:6c:49:a0:29:65:67:9b:3c:
2b:4f:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:58:34 2025 by rpki-client