Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: g9A5a3Qnd9UfNVEyzG+HMsqIIBR1USQqQ97rweoP8SY=
Subject key identifier: BD:AD:A3:7A:6B:E4:9D:2F:09:D9:F6:F4:41:F9:EE:15:56:3B:52:58
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 01967C4533973C81C0BBBD6B45A0715DA67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 03F2
Signing time: Mon 28 Apr 2025 12:00:31 +0000
Manifest this update: Mon 28 Apr 2025 12:00:31 +0000
Manifest next update: Tue 29 Apr 2025 12:00:31 +0000
Files and hashes: 1: tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa (hash: k/eXxf7557SFB+l+Q/mWhChu1kZsTZ07A3b0mG1jAsA=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: RVfUY1NYejN7ntL2dfdMyoVT2wn/gvYyomLDw0dbm7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:33:97:3c:81:c0:bb:bd:6b:45:a0:71:5d:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Apr 28 12:00:31 2025 GMT
Not After : Apr 29 12:00:31 2025 GMT
Subject: CN=bdada37a6be49d2f09d9f6f441f9ee15563b5258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:79:d1:a7:1f:03:97:4f:6d:b6:03:a7:f7:
72:89:50:34:4f:77:ce:52:b7:8d:10:e9:72:d4:2c:
fc:13:5a:9f:23:1b:69:bf:15:7f:32:90:b9:2e:85:
d0:a0:0f:49:19:c6:6c:c0:b4:60:0c:9f:55:a6:72:
85:e2:20:a1:d8:86:97:0f:c8:94:a3:3c:51:32:8f:
ad:77:a2:90:89:af:f4:27:cf:f0:a4:00:49:c8:4c:
da:b8:49:80:15:d8:43:5c:61:66:d2:f8:98:65:85:
11:e1:fe:56:c8:25:68:9d:16:25:0b:dc:d6:89:d1:
fa:a2:1c:7d:03:91:3d:43:6d:a7:ff:b2:ef:ea:a6:
16:f9:68:56:80:20:5a:68:83:e6:04:a1:05:b6:1f:
f1:2c:60:68:33:4f:26:f4:bb:2c:0d:46:31:ed:16:
7d:42:d6:46:e2:c2:78:50:dc:0f:bc:c9:e2:17:2e:
e7:87:c6:b7:de:65:3c:6c:30:dc:b0:1b:70:e6:67:
7b:65:58:31:53:dc:81:ab:0e:b1:08:4b:96:fc:67:
8a:95:2f:b1:5d:1e:11:86:36:d8:c7:9a:22:18:53:
81:30:d6:0b:92:3f:9f:ab:95:1e:3a:90:a0:f5:ba:
73:f8:19:75:9f:17:c7:2a:c8:79:57:cd:df:82:92:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:A3:7A:6B:E4:9D:2F:09:D9:F6:F4:41:F9:EE:15:56:3B:52:58
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:76:cc:3b:63:3f:48:30:a6:fd:71:57:60:77:01:b9:88:f1:
d5:0a:fe:18:70:0a:32:0d:aa:3e:a9:cf:35:2f:14:e2:f4:28:
cd:29:9f:7a:a3:fa:a2:f0:7f:74:31:c3:62:0a:a4:43:44:f8:
2b:5f:e4:ea:d3:4d:b4:d5:c1:e8:c6:8e:cc:6c:e1:a4:b8:eb:
45:f4:29:38:6a:d0:00:f9:3a:a1:cb:5a:ba:8a:df:23:ad:6d:
4a:e4:32:fa:5a:a6:91:91:0c:2a:05:73:4a:1c:22:44:03:3f:
c4:d0:ca:e7:1f:07:ff:67:1c:15:c6:da:d3:79:a8:b8:ef:65:
8a:46:34:da:6b:99:c9:0b:9d:c9:30:34:4a:c1:68:9b:1f:a0:
dc:dd:6a:43:a3:4e:d7:ca:61:fe:89:96:bf:a7:f6:86:76:5f:
7e:08:63:da:c7:2a:c8:a7:38:d5:95:02:ec:8c:36:34:55:91:
c0:57:3f:60:95:7a:bf:57:08:e2:7a:75:93:17:fb:59:18:fd:
a8:1b:c3:d3:60:04:c2:f7:64:77:f0:2c:b9:b6:d7:ad:0b:cd:
f9:40:cb:8d:06:21:a5:f5:6a:03:ec:3b:61:9b:ce:e3:5b:72:
11:b4:f2:b2:d6:72:48:6a:ee:7b:2d:30:97:c0:35:a1:45:71:
10:61:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:36:28 2025 by rpki-client