Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: 9W8Ac7REBKDrpFNGM5PMqmdLgbBzPfVj3P8v9JViWuc=
Subject key identifier: 77:2D:BA:3A:16:D9:2B:F3:BF:64:61:E8:09:32:BA:E2:FB:2A:1F:94
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 01968C9492A07E5067C660B981DFB3E42D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 121B
Signing time: Thu 01 May 2025 16:01:09 +0000
Manifest this update: Thu 01 May 2025 16:01:09 +0000
Manifest next update: Fri 02 May 2025 16:01:09 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: LdGAqeNlz1vqdzcKZTMoYlzX0sEns/UAZMxmXKeEkME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:94:92:a0:7e:50:67:c6:60:b9:81:df:b3:e4:2d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: May 1 16:01:09 2025 GMT
Not After : May 2 16:01:09 2025 GMT
Subject: CN=772dba3a16d92bf3bf6461e80932bae2fb2a1f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:fc:98:15:87:61:57:9d:ec:58:ec:b2:32:
46:a4:40:03:87:b4:a7:71:ad:fd:5f:ac:28:ac:c3:
51:71:37:15:b8:cf:dc:4f:04:c8:0f:5d:60:0a:6f:
99:b4:7f:68:9f:d7:ee:f5:95:53:e9:8c:fd:6a:85:
d6:90:32:95:7e:eb:20:29:95:ac:58:63:41:8c:8f:
45:57:37:50:49:ca:ee:97:ce:a2:fa:73:b0:ce:b5:
8a:41:bf:23:9f:0d:ff:4b:01:36:6e:f0:73:15:0e:
bb:c4:34:ea:cb:3f:bf:c7:3f:63:ac:89:1d:0d:ad:
85:ad:e8:59:01:d4:2c:3d:2a:97:ec:e8:e5:8a:97:
c8:6e:99:e7:4b:14:fb:3d:f1:79:f9:24:90:ca:bd:
57:63:c3:6c:0e:27:f4:d6:0d:10:08:b1:16:66:26:
a0:2a:9e:06:ef:55:98:3b:a4:0f:f6:d4:9a:03:57:
dc:88:c7:69:fc:0c:9d:c6:4b:b7:d5:f4:7a:32:db:
b0:e3:45:51:42:b4:8b:4b:00:41:f6:ed:1e:e6:27:
16:fb:58:da:40:99:b3:1f:35:cb:ae:90:18:00:52:
e5:f2:c1:7a:f6:ee:76:d2:cd:a7:de:43:cd:21:5a:
c7:99:c0:85:23:c3:8c:6f:f1:f9:48:67:87:d2:43:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:BA:3A:16:D9:2B:F3:BF:64:61:E8:09:32:BA:E2:FB:2A:1F:94
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:83:b6:7b:60:09:11:6e:6f:29:09:f8:d6:28:01:6c:f0:ad:
0e:fe:c8:98:7a:c6:b2:34:2e:f6:6e:41:31:38:d5:5b:83:56:
7a:11:87:98:64:25:22:56:18:89:ab:1d:62:cb:1a:bc:fa:e8:
12:e8:d3:c6:4a:cb:26:f7:45:75:47:06:54:2b:26:a5:c7:ae:
46:cc:cd:a3:46:ab:be:9e:9f:4e:02:ab:87:a4:14:3a:06:80:
76:36:26:1e:a2:5b:0f:3f:58:b4:74:c2:5e:5d:68:5c:e5:49:
83:2c:4f:75:f4:9c:c9:85:c6:40:ec:24:ad:53:27:48:9e:60:
db:94:97:9f:72:e2:6a:b5:24:e2:22:7e:6d:35:5c:b7:fd:3c:
f6:1b:db:d2:70:56:b8:f8:fc:b3:7e:33:6d:14:a6:36:b6:5b:
ae:da:3b:de:59:36:f3:3c:19:ec:bc:26:32:b2:84:d5:03:de:
83:a3:95:fc:9f:2f:a0:dc:e2:80:52:be:71:f8:f4:29:63:3d:
0e:f7:6f:d1:ec:35:4c:b0:7b:07:93:00:6c:37:3f:71:d4:a0:
ab:f5:cd:2f:d0:cf:c0:9f:89:36:73:90:c3:b7:e4:e3:60:fa:
2a:86:89:a3:25:d5:b5:8f:56:b4:96:f1:b0:c2:34:00:ec:5f:
95:4b:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:44:42 2025 by rpki-client