Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: tefM7Rf/gbyn11VAd8Lq/p7o+ABNIDG8DUfwvM0wiRE=
Subject key identifier: B1:ED:47:B0:1B:C9:EC:00:03:6E:31:5E:DB:90:0D:92:3C:F3:4E:8A
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019676432661345F12B8AF13D492F6F5D680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 08:00:34 +0000
Manifest this update: Sun 27 Apr 2025 08:00:34 +0000
Manifest next update: Mon 28 Apr 2025 08:00:34 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: jVbe2LOt0EnAbjtJApT6bwMkpEeuKRagTg3mSpnKAoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:26:61:34:5f:12:b8:af:13:d4:92:f6:f5:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Apr 27 08:00:34 2025 GMT
Not After : Apr 28 08:00:34 2025 GMT
Subject: CN=b1ed47b01bc9ec00036e315edb900d923cf34e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:8e:6a:02:59:d2:58:7b:0f:c7:30:88:3a:
66:ed:53:3c:bd:fb:6d:98:ea:42:d0:ac:15:27:0a:
c2:62:a4:7d:81:73:bd:64:1c:58:d4:f3:78:4f:f4:
9f:a9:85:56:2f:7d:02:48:14:9f:78:9b:f9:b4:5b:
20:7a:fc:6f:7d:65:10:8a:33:5f:9e:cb:66:56:5b:
ab:28:cc:27:1a:9d:02:5c:d8:80:ec:61:0c:26:4d:
ea:c1:5b:be:59:a9:3a:ad:cc:43:fe:ae:13:58:71:
ae:3a:8e:38:ba:e1:7f:2e:0a:e4:a2:85:e8:fc:5d:
b8:f7:51:b9:ac:53:f0:18:15:0f:42:33:eb:b8:f6:
c3:58:1e:7d:c8:5e:f7:2c:2d:4b:6a:61:48:8c:ac:
43:ee:d9:2c:fb:2e:db:5d:e7:44:2a:29:56:c4:62:
ac:ef:00:8c:fa:81:fc:56:c4:36:86:46:1b:db:eb:
8c:77:49:c5:f3:f7:74:17:c9:49:85:5f:87:92:33:
9d:05:f5:e7:d1:14:8f:df:44:50:44:3a:47:e6:ff:
b5:89:ef:d1:58:7b:21:18:55:46:35:8b:37:ef:a0:
29:a6:e5:cb:a9:4e:05:46:25:e3:dc:f2:fb:bd:e6:
e6:31:06:27:2d:27:b0:40:b0:e4:e8:d4:04:9a:b3:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:ED:47:B0:1B:C9:EC:00:03:6E:31:5E:DB:90:0D:92:3C:F3:4E:8A
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:53:e1:f9:3a:8f:38:59:78:1a:d1:cd:f7:c5:29:2d:76:
0f:93:8f:f4:a7:3a:b7:23:b5:c8:d7:63:70:7d:e7:4b:79:01:
e3:78:9d:38:80:10:57:f9:b0:d1:b0:22:42:c9:78:28:ed:56:
46:bc:87:30:2a:97:ab:12:cc:d8:17:16:3e:e2:df:a3:7b:07:
a8:f2:96:bb:38:d9:73:ea:0c:80:b5:28:60:bc:5d:4a:ae:10:
79:5d:b0:7c:8c:e9:12:7c:1a:9e:42:ed:e8:c4:4b:f0:42:0b:
78:2e:1c:74:08:f4:9e:0c:9b:df:f0:a0:bf:95:59:04:ab:ee:
44:7b:4f:37:3c:27:a0:d8:2d:73:6e:d4:8b:5a:8b:43:1c:18:
d6:dd:be:79:11:5c:a4:17:04:d8:1d:20:80:39:7c:c2:42:ff:
83:51:86:1d:f1:6b:a6:2e:72:c8:05:18:77:ee:30:24:23:16:
ba:49:ee:90:7d:9c:be:61:69:52:80:79:ab:2c:f2:64:d5:25:
64:92:ee:56:64:f9:46:44:f4:7b:d1:3a:56:cb:bd:45:26:39:
58:1c:4a:23:38:ae:a2:98:37:cc:0c:39:44:91:95:f4:75:aa:
ab:75:82:61:66:68:01:f3:1c:cf:4b:90:b7:75:c3:57:8e:0a:
86:f2:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:53 2025 by rpki-client