Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File: xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier: IAFNNt0Du13bbQwEvQuswvCtkgCv51Gho8d9uMWIh/Y=
Subject key identifier: BA:E9:F1:46:61:55:A0:06:E1:16:F8:08:A0:D0:0C:A9:F0:FF:9F:30
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 0196A2ADEC5677DDB896538D2276A3E2A998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number: 0AF3
Signing time: Mon 05 May 2025 23:00:29 +0000
Manifest this update: Mon 05 May 2025 23:00:29 +0000
Manifest next update: Tue 06 May 2025 23:00:29 +0000
Files and hashes: 1: tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa (hash: BXE0UWACwtmo2QDwp5Gd5dEhuobHdzrduyzOxIVuE/M=)
2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: dfdHRRYnLdtjrwQId+5FZPTi40hiAugdBjhXa04q+ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:ec:56:77:dd:b8:96:53:8d:22:76:a3:e2:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: May 5 23:00:29 2025 GMT
Not After : May 6 23:00:29 2025 GMT
Subject: CN=bae9f1466155a006e116f808a0d00ca9f0ff9f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:17:30:42:54:3f:98:e4:5f:b8:c4:9e:de:
3f:2f:27:a2:60:a9:06:ba:f7:86:c5:93:2b:96:85:
b9:7c:3d:21:c0:52:e5:37:ee:a8:fe:51:e9:11:19:
7e:04:84:7e:89:63:08:f7:35:3f:86:51:bc:d7:7d:
f0:a0:69:e5:f8:3f:c0:79:cb:d8:a3:a0:1f:62:43:
6f:41:fc:71:f1:e5:37:f7:79:6f:3f:f2:a3:12:60:
6e:26:4f:9c:28:7e:dc:c6:6b:01:ea:cc:19:5f:eb:
cb:30:6c:6a:3e:7c:67:b1:7c:c7:c3:c7:95:f9:58:
df:c1:27:6c:9c:5d:cd:f6:39:3a:97:4b:18:a0:39:
22:ea:57:cc:b2:79:77:69:36:73:96:02:01:81:b1:
e1:20:23:47:74:56:e4:29:12:3e:8e:aa:03:44:cf:
82:c5:21:ed:31:37:90:70:47:88:bf:68:e7:7e:02:
5e:53:89:04:1b:14:f6:15:9b:01:e5:17:44:0c:bc:
81:4a:5c:af:92:a7:7d:71:e4:71:b2:2f:20:18:f3:
30:5e:d5:8a:b7:5e:62:df:ff:6d:63:63:31:a9:6c:
93:da:05:32:fa:bb:43:68:a3:b7:c0:33:9b:ec:f7:
27:9a:bf:d8:73:98:39:88:a3:50:b6:3a:29:d3:76:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E9:F1:46:61:55:A0:06:E1:16:F8:08:A0:D0:0C:A9:F0:FF:9F:30
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2b:c5:e8:e1:f4:37:f4:9d:5d:06:01:c6:d1:78:db:d3:e6:
c6:ca:aa:28:ff:96:53:18:3f:64:07:5e:95:ce:f9:f1:bb:79:
1c:75:27:3e:73:c0:d5:6c:3d:18:4a:52:04:1d:45:ca:d7:6a:
60:c0:a3:a8:0d:05:40:9d:26:24:b4:8f:4a:83:37:cc:8a:95:
27:7f:b0:0a:05:d3:5f:29:6c:96:99:de:50:a5:11:57:e7:02:
66:da:9a:2b:7a:0c:5d:ad:cd:64:87:59:2d:1d:a2:bd:43:1c:
73:47:2d:ab:d9:47:ed:16:87:63:68:21:ad:ef:75:09:b0:97:
53:53:60:d5:17:34:0c:4e:4e:4a:22:c9:94:32:89:8e:18:fb:
72:d7:7d:1a:11:24:fd:b6:4d:db:b1:2d:82:3f:32:49:32:48:
e4:7e:8f:ab:33:75:ec:b9:b1:5a:37:c7:67:4d:d7:d5:25:6a:
11:a8:72:f6:6f:12:ad:6a:ba:d3:2d:d4:27:d5:98:ca:03:36:
f7:87:f5:20:b1:21:73:d8:9d:1d:e0:f0:61:5f:e5:e8:6b:f3:
4b:cc:d2:51:5c:7c:a4:dd:62:69:ee:d8:c9:0d:9c:f9:00:7a:
a6:17:f4:ac:7f:3f:a1:7b:82:7f:55:52:94:e3:cf:b4:9f:7f:
36:0f:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:52:18 2025 by rpki-client