Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: gLsbByxf6VYcPcrMzkRPn4/FBtJrhRkdbB/M3C2lcAE=
Subject key identifier: D4:60:E0:23:3D:67:1B:A4:8F:60:67:B8:0D:95:2C:C4:2A:BC:10:68
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019685ED5944B47F2D0080E97BAA68BB9AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 136C
Signing time: Wed 30 Apr 2025 09:00:46 +0000
Manifest this update: Wed 30 Apr 2025 09:00:46 +0000
Manifest next update: Thu 01 May 2025 09:00:46 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: Eb5QuFd156j8UvZk1EOLlpLM/mXVp0Y8DVNdwFgRIxs=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:59:44:b4:7f:2d:00:80:e9:7b:aa:68:bb:9a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Apr 30 09:00:46 2025 GMT
Not After : May 1 09:00:46 2025 GMT
Subject: CN=d460e0233d671ba48f6067b80d952cc42abc1068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:f2:da:fb:51:0a:64:26:a1:51:b0:e2:59:
72:8c:bc:cc:09:50:ef:4b:9e:d0:22:0d:8b:b0:61:
12:1c:8e:52:c5:09:c8:3b:ae:14:a3:d7:8b:90:7d:
55:5b:68:25:92:b8:e4:00:db:7f:aa:61:fa:bd:a5:
54:62:2f:75:94:5e:6f:12:6c:8b:0b:57:13:f7:70:
a9:ea:f0:c3:9b:4a:63:15:75:9d:f9:76:47:5a:eb:
f5:70:30:b1:c4:a8:40:23:bf:77:20:30:fc:f5:11:
54:6c:36:4d:4a:5b:bc:b0:97:6f:42:eb:70:20:ad:
45:08:40:05:07:8c:7a:36:57:ce:71:ad:65:ed:50:
6a:36:38:5e:25:ef:67:bd:b2:da:db:f8:6a:ec:bb:
10:ac:28:da:2e:16:c0:85:fc:a2:36:89:55:89:8f:
51:63:6f:1e:f6:28:94:13:da:eb:e1:7e:16:70:5c:
b5:88:39:dd:f1:b4:be:8d:e9:8c:1d:eb:5a:71:3b:
78:0b:72:d7:13:6a:b7:1d:25:03:d7:6a:33:96:13:
c4:94:8f:15:1b:a5:b8:25:a5:d3:c0:6f:b6:cc:6c:
52:59:58:f2:32:65:53:85:37:31:15:55:4f:ff:db:
7b:ad:48:00:8e:b8:67:68:80:44:6d:b8:33:1b:12:
01:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:E0:23:3D:67:1B:A4:8F:60:67:B8:0D:95:2C:C4:2A:BC:10:68
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:42:e0:49:b9:c1:de:1d:28:e9:a2:72:e5:e2:1e:85:4d:a7:
fc:99:1b:1b:fc:a7:3d:0b:b3:09:3f:76:4a:43:21:ad:83:cf:
0b:9e:86:b1:6a:88:62:76:92:49:04:8b:ac:65:fa:c4:cc:35:
6c:57:88:c0:d0:84:46:4b:6b:52:be:f0:80:b5:96:44:cf:58:
9e:4c:69:b0:ac:30:38:9f:96:7e:64:a7:9a:ce:a6:81:5f:8a:
44:f5:cd:ca:e8:69:66:6f:ed:48:fd:39:d4:c6:82:7f:98:65:
70:08:af:3a:4e:2f:69:d8:64:8e:e8:cf:b1:cf:e2:1e:6c:58:
28:58:c1:ab:36:2e:d3:e4:ff:d1:b1:1a:63:b8:68:1f:30:d4:
ce:4c:52:54:55:af:26:10:2c:81:47:50:67:c8:7d:48:2e:f9:
66:f8:67:e0:dd:e4:aa:8b:8d:91:9d:9a:a7:3f:11:ea:a1:e3:
be:21:47:33:07:9c:c9:5d:f3:81:c0:96:0a:b6:b0:29:c8:f9:
05:79:fe:0a:38:05:64:cd:24:8a:60:d6:b9:14:8c:e8:06:5a:
10:21:b8:5b:87:f0:56:9b:10:d9:b9:02:ed:9c:5a:d7:f4:a4:
1e:f2:59:f4:4a:e1:49:0b:c3:ab:6b:26:c3:c6:85:1a:fa:8e:
d1:b6:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:50:57 2025 by rpki-client