Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: gztECWGPklACkP0Die7ZceaENkQ4SWpizAv0bbNhrD4=
Subject key identifier: 27:2E:CD:93:7D:6A:8A:48:F3:C6:99:8D:C3:B6:F6:38:9F:90:A4:86
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 0196759EBB67FB4399D1D722848D575C9948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 05:00:59 +0000
Manifest this update: Sun 27 Apr 2025 05:00:59 +0000
Manifest next update: Mon 28 Apr 2025 05:00:59 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: +6DfB0PmGxtZTN17JsDRAcP2kAN3sbO0pLYNPDgVJRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:bb:67:fb:43:99:d1:d7:22:84:8d:57:5c:99:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Apr 27 05:00:59 2025 GMT
Not After : Apr 28 05:00:59 2025 GMT
Subject: CN=272ecd937d6a8a48f3c6998dc3b6f6389f90a486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:23:5d:1f:3c:5a:bb:e8:03:4e:49:b6:b1:
31:51:33:08:5a:9f:9e:4e:46:5b:df:a7:13:6a:ca:
8d:8e:71:0a:dd:9a:9b:28:60:4a:6f:ce:57:91:d6:
23:68:57:24:45:ff:6b:02:07:ec:a6:52:a5:c3:67:
b9:8b:a2:c5:bb:b3:50:c9:e6:cb:97:c2:9b:58:b4:
48:9a:f6:0a:fd:ed:42:8b:2e:bb:1c:f0:9d:a1:ba:
e8:5a:25:e5:4e:ba:54:9b:f1:bb:98:9a:55:43:57:
99:01:27:ec:b3:aa:e1:7e:d5:d0:e6:db:98:2a:f8:
e7:aa:80:92:f4:ee:f1:ca:b7:0f:d2:da:fe:71:22:
e5:48:3a:62:b8:fc:7a:ea:ea:68:42:e8:2e:93:36:
ef:23:7a:46:f8:3d:a9:04:ed:45:b8:8b:f8:a1:66:
0a:83:94:de:07:2b:c8:a8:90:79:02:e2:80:53:1a:
1e:6e:55:57:a2:8c:9e:6f:ff:6a:d0:81:6f:4c:da:
a6:98:e3:13:9f:5b:39:ff:57:fc:26:18:ea:b5:94:
ea:af:cc:d6:ff:39:ab:ff:72:8c:3a:24:5a:eb:ae:
02:bf:9c:66:de:8b:4a:56:ed:01:37:dd:92:28:e5:
96:8d:ae:d0:ce:df:cb:75:c8:2d:20:d2:32:3e:ed:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:CD:93:7D:6A:8A:48:F3:C6:99:8D:C3:B6:F6:38:9F:90:A4:86
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:38:dd:d4:14:55:d2:dd:9a:9f:58:dc:74:1d:9e:67:df:1a:
4e:c1:53:e5:90:7d:45:e3:84:7a:ac:79:f4:2f:b4:d4:c3:ac:
0f:13:12:b3:e8:51:2e:c4:c7:2d:52:81:0e:50:24:c4:1a:74:
3a:3e:f7:e8:fa:32:89:8d:a9:a4:18:27:17:08:6f:0b:6b:81:
a5:d4:05:ed:3e:0b:19:f1:81:51:3b:94:e8:93:ac:e4:0e:41:
88:93:9a:8a:6e:8d:27:8e:ce:ea:28:7a:e4:fc:a1:21:bb:5d:
76:f6:f5:0b:ec:b2:dc:09:88:26:a1:a7:d9:f3:a1:db:cd:b8:
cd:30:af:0f:dc:7a:92:74:a9:dd:f5:78:f6:a5:d2:bc:75:52:
42:18:44:ea:9c:27:e2:12:93:f3:ef:fb:60:ee:17:cc:18:bc:
2f:7b:30:41:71:8b:ec:f5:db:d1:34:2a:c8:73:5d:de:bf:ec:
3c:57:e3:82:f7:7c:39:9c:22:b5:71:0e:50:90:09:2a:ba:ca:
eb:2e:6c:0a:db:10:a0:63:bc:48:e8:38:03:61:ff:6c:cd:63:
16:a2:aa:15:74:c9:18:0e:b3:7b:e0:7d:e7:b6:91:7c:6d:fc:
fa:09:fb:a0:15:b8:78:e5:41:94:0a:87:6b:d3:fb:e7:63:52:
6d:e1:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:37 2025 by rpki-client