Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: zokMiAY8Mdo/ZfwWzeYC5a26FUc3QmoO3ge1Qtk4m18=
Subject key identifier: FC:5D:93:10:C2:67:76:E1:64:B2:9D:58:E6:5C:2E:94:59:27:8F:C1
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 01967CB385C36F4D8B89478AD8334F2867D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 14:01:01 +0000
Manifest this update: Mon 28 Apr 2025 14:01:01 +0000
Manifest next update: Tue 29 Apr 2025 14:01:01 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: F1wWexdU9EdeLMapYUu3UuOd26I8mNArltDzgPl2ewM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:85:c3:6f:4d:8b:89:47:8a:d8:33:4f:28:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Apr 28 14:01:01 2025 GMT
Not After : Apr 29 14:01:01 2025 GMT
Subject: CN=fc5d9310c26776e164b29d58e65c2e9459278fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:03:44:07:ad:59:19:26:f1:dd:8b:a0:ee:
0b:62:9c:59:ca:57:09:8d:1c:fd:f7:c8:2c:02:48:
ef:fe:62:f8:05:5a:ed:7a:44:cd:18:e1:7e:2a:a9:
d9:4e:49:36:53:c6:d9:c3:de:ff:e3:54:60:6c:d6:
64:64:d0:01:a2:28:d4:b5:fd:8f:94:89:89:36:06:
82:14:c5:4f:c2:fa:e5:e5:14:ac:78:d3:43:25:08:
79:c2:cd:63:bb:62:3c:f7:bc:be:13:e9:5f:cf:cc:
6f:37:e2:45:ec:db:84:ba:57:86:be:c1:1e:67:1f:
ce:b8:d2:f8:2e:a7:90:fa:3a:df:22:95:bc:4d:8e:
b2:41:67:b5:0c:4b:9c:39:76:a6:80:27:c2:25:56:
8e:6e:d9:12:f1:7a:c6:d9:95:4e:ed:45:3f:d8:e1:
14:ed:31:56:fd:64:19:10:cd:96:44:e2:14:35:fd:
e2:10:ce:e1:62:83:fe:dc:32:6c:90:0e:7e:e7:ff:
ef:a9:bb:57:a0:76:a6:24:12:e4:f8:5c:bd:14:ed:
fd:a2:8d:b1:f3:1a:ff:d7:be:13:17:62:70:c3:17:
0c:87:32:c7:75:94:18:03:be:01:5d:ff:65:67:33:
75:c1:87:75:65:02:ee:a6:9e:d2:e9:00:ed:53:fe:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5D:93:10:C2:67:76:E1:64:B2:9D:58:E6:5C:2E:94:59:27:8F:C1
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:38:99:53:27:24:90:86:0e:87:87:6c:bf:42:e9:cd:8d:
88:9a:0d:95:3f:8c:ff:1c:f0:1b:dd:60:de:88:ae:ff:56:a4:
6e:36:ae:c7:1b:6a:a4:39:80:77:e7:33:f6:d7:d7:55:20:c6:
a7:66:19:a3:27:0a:7b:ae:c9:90:a2:9c:31:61:a4:51:aa:4c:
6d:c6:78:21:70:d0:e3:0e:1e:6f:f2:0b:b1:61:52:91:1c:fc:
a5:e2:0d:eb:42:7a:2b:86:b1:55:2f:06:51:42:24:9a:48:6c:
07:46:d1:36:77:d1:6c:4b:42:a2:ff:5c:7f:b4:69:4a:02:cf:
e3:96:3e:e1:e2:3b:ba:98:32:fa:e4:d3:65:a1:72:16:8d:92:
29:f7:3b:94:1c:fc:ef:03:b6:b2:fa:17:28:8c:ab:fd:4b:c2:
3f:f4:e2:75:78:c3:7a:7e:c2:b6:7d:1d:f8:55:b8:a5:13:11:
88:a0:6f:8d:81:75:32:dd:34:a2:dd:25:f8:ac:66:2a:e9:1b:
f1:02:ae:0c:2c:c2:f0:d2:4d:38:4c:ed:9d:4e:19:8b:2d:0c:
39:6a:04:54:50:61:41:00:5f:7b:a7:0c:3b:78:fd:49:10:76:
d6:eb:8e:41:45:ea:20:39:34:c5:85:53:61:76:29:4d:29:62:
f1:63:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:13 2025 by rpki-client