Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: tglHnrYjKUy1TPZLUeJJjXDYepqul9DGUs8anEdFZVo=
Subject key identifier: 22:1E:15:0D:23:A3:03:C4:81:C3:C0:91:97:F6:77:69:A0:DC:2B:54
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 0196A23FF8D56EBC243D67A46E982177A17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 041A
Signing time: Mon 05 May 2025 21:00:23 +0000
Manifest this update: Mon 05 May 2025 21:00:23 +0000
Manifest next update: Tue 06 May 2025 21:00:23 +0000
Files and hashes: 1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: LBTZE/DZvqUU8TvFKH00Omg2Ts4AnqBdM69C7dbYVLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:f8:d5:6e:bc:24:3d:67:a4:6e:98:21:77:a1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: May 5 21:00:23 2025 GMT
Not After : May 6 21:00:23 2025 GMT
Subject: CN=221e150d23a303c481c3c09197f67769a0dc2b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:66:52:66:6f:73:b5:39:6c:2a:e2:6a:6e:
df:af:aa:72:82:ca:e0:45:76:79:b2:26:98:03:70:
c0:1f:9c:8c:dc:ea:1b:ed:60:cf:16:34:c3:20:c0:
a5:ec:85:de:39:33:68:e2:de:f2:2a:27:c9:48:3f:
f5:b4:36:bc:a9:99:04:8b:3f:e4:2f:93:26:7e:7a:
88:6f:9c:dd:e3:e2:7c:b9:e8:99:dd:8c:d0:60:51:
da:15:ee:05:8c:25:4b:d2:da:bf:2d:ad:71:2f:4a:
fb:be:72:0f:bf:66:ce:67:32:dd:2d:be:e5:9c:cc:
01:78:d8:c3:a6:30:ca:ef:bf:1e:65:e2:47:00:f2:
85:c1:e4:8b:9d:ac:d4:77:61:7a:f3:8c:25:d4:86:
2a:f4:f6:89:16:af:dd:42:cd:2e:cc:ed:c7:4e:f5:
8e:2a:32:da:2a:e0:96:c3:2b:0e:f9:92:5c:f5:38:
28:7f:b5:cc:0e:37:2d:72:74:43:a9:a3:bf:15:2c:
f5:37:f7:ed:0d:79:81:a5:d4:67:42:03:6b:d3:c2:
52:fa:83:44:4f:51:89:09:e3:0d:99:33:75:d8:46:
e2:d6:1b:0a:45:da:2d:32:a2:64:fe:64:66:fe:47:
b4:dd:c8:30:71:9b:3e:64:38:76:fd:9b:cd:96:58:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:15:0D:23:A3:03:C4:81:C3:C0:91:97:F6:77:69:A0:DC:2B:54
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:28:7c:79:50:0b:9c:cf:e6:18:43:bb:4c:56:e1:fd:2b:0c:
6c:d5:eb:61:d8:73:6f:1e:db:03:b3:f5:34:62:d7:42:63:1e:
98:7a:b1:c3:3e:ae:12:10:60:bf:89:a1:fd:d4:3c:d6:2a:c0:
22:c9:9e:0c:44:4c:4f:8c:67:33:e9:91:5b:04:67:27:a7:e6:
b4:51:8d:91:43:a7:6f:f6:05:11:09:04:2e:ab:62:af:f7:6f:
bd:9c:ca:2e:96:de:28:ef:45:c4:a4:5f:02:ed:55:0a:01:dc:
7f:46:e6:aa:82:dc:f3:e8:f3:9f:67:de:84:f5:04:d1:dc:6d:
ab:e0:0e:81:c5:24:8c:cd:60:46:6c:a3:e2:a0:f8:fb:68:90:
92:07:5c:34:25:37:63:4d:66:c7:97:03:d1:53:45:23:db:3c:
73:d4:33:58:a9:88:14:79:81:0d:ba:9e:34:ec:90:97:74:8f:
fa:78:83:d9:bf:40:87:9a:39:8a:bc:cf:9a:8e:cb:98:85:a6:
f8:ce:8d:31:13:6a:b5:b5:3e:9a:19:71:1a:16:fa:49:14:b0:
ff:f5:a0:10:7b:c3:f1:81:2b:38:13:ba:9e:3f:c6:0e:48:c3:
3a:19:15:6d:f2:55:b3:19:8c:10:c1:cb:d6:88:26:cf:a5:d1:
26:8a:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:38:59 2025 by rpki-client