Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: b+ewKOmiYcCNS+0/mAaeBxEZU3mBjsuuugNlBKdEGgA=
Subject key identifier: B3:1E:68:E5:FD:FB:2B:7B:2D:FA:76:71:DC:7E:1D:46:97:EF:94:65
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 01968D39AD88A1A44C860E610F87E777979F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 19:01:29 +0000
Manifest this update: Thu 01 May 2025 19:01:29 +0000
Manifest next update: Fri 02 May 2025 19:01:29 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: YTNMTgR8Z6t81o/T2MFRmVwD461CB2ADu8BEe+3rKGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:ad:88:a1:a4:4c:86:0e:61:0f:87:e7:77:97:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: May 1 19:01:29 2025 GMT
Not After : May 2 19:01:29 2025 GMT
Subject: CN=b31e68e5fdfb2b7b2dfa7671dc7e1d4697ef9465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:74:30:d5:17:a8:66:dc:4a:fd:33:d0:f8:
29:3e:19:1d:19:de:09:2a:02:20:c7:93:78:87:42:
4b:f2:d9:53:71:15:20:98:a0:d2:64:64:cb:69:b8:
f3:6f:3b:13:4b:42:38:5a:fd:56:90:c8:a2:d1:66:
10:b8:d9:03:2e:1b:98:da:3a:f1:aa:af:eb:ce:91:
68:14:9c:7c:8c:cb:0e:8a:9b:45:47:35:31:d0:4f:
10:17:08:d1:e1:aa:c3:73:f3:c9:e6:09:de:8b:84:
b8:63:68:0c:f2:2e:04:c1:76:03:5c:a8:60:e1:3d:
4a:9b:a4:3a:5a:d2:84:23:f6:5d:07:82:87:56:5b:
39:37:49:89:82:7b:65:96:20:36:eb:96:34:2e:45:
a1:f6:26:72:12:30:9a:c4:98:0d:24:6f:70:6b:f9:
0d:85:6f:4d:0c:17:6b:5c:bd:8a:51:33:08:37:21:
b0:77:73:63:3d:2e:75:e6:ab:52:cd:8f:10:d5:db:
a1:dd:96:df:ad:7d:e9:85:ad:f0:c8:cf:e8:37:80:
86:c1:66:e9:d8:12:6e:dd:3a:19:ee:84:24:29:02:
c2:e0:d8:be:a6:99:56:6a:5e:f9:cf:0b:5d:e8:1e:
2e:e6:ed:dc:31:55:e8:9d:2a:9a:2c:a1:9b:9d:b7:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:68:E5:FD:FB:2B:7B:2D:FA:76:71:DC:7E:1D:46:97:EF:94:65
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:41:ce:de:3c:88:a8:33:fb:16:01:84:24:97:5c:8d:4e:
f1:13:7a:f0:5f:d0:99:64:ad:ce:d1:be:cb:34:ea:d4:50:cd:
50:88:b8:0f:9d:18:0e:44:3c:12:ad:11:49:a9:73:07:1a:83:
57:a0:6a:d3:ca:a4:6a:5a:13:41:e6:52:d9:45:43:76:66:4f:
f5:d5:cc:11:c6:5c:d6:b6:77:db:7b:da:39:d2:9f:fa:df:03:
f8:c3:96:b7:67:01:12:89:73:7c:c0:9f:b6:08:ac:81:a8:61:
71:7c:c5:49:ee:b5:48:33:5b:c9:f6:de:a6:a3:81:3d:2d:2f:
d3:10:31:18:ee:e6:09:b5:12:8a:07:12:f0:1d:f1:83:d6:07:
d5:31:40:f1:6d:d1:f1:fd:dc:b0:7e:93:07:7e:ef:2f:70:e4:
dd:16:a7:f8:9e:61:01:ca:2f:55:c2:85:18:b5:ba:cd:f1:7c:
27:00:52:19:61:83:b5:85:4c:c8:40:09:af:e6:0d:ce:10:fc:
96:8a:8b:0d:4d:cf:fc:38:3b:53:ce:7a:25:84:d1:04:87:aa:
ea:b1:e9:e0:37:ed:ff:53:56:c6:5c:83:da:86:7a:fb:27:ea:
d7:1e:ac:f3:98:c5:52:db:fb:92:80:4b:08:33:ac:9e:47:b4:
ea:14:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:14:53 2025 by rpki-client