Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: /FqkfKq3utslgTc3isNc2Lol4E+O+ZfKxvTyhJ/jZfA=
Subject key identifier: 61:B7:89:31:B0:F1:77:71:8D:C6:82:6F:36:1F:89:30:0E:E6:70:3A
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01968134874962DF46058671C3AC8144719B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 151D
Signing time: Tue 29 Apr 2025 11:00:25 +0000
Manifest this update: Tue 29 Apr 2025 11:00:25 +0000
Manifest next update: Wed 30 Apr 2025 11:00:25 +0000
Files and hashes: 1: 95gfeORrzFU1baOm9FNRF4z-Awc.roa (hash: yu0lodJztF5C/Epqr7ypdXxVzEpgYNXlQQQ9uDXoMnU=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: 6ESoqMDatMp7uRe1YQ0SV5vyJGhEVFimOUeb7AaN7wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:87:49:62:df:46:05:86:71:c3:ac:81:44:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Apr 29 11:00:25 2025 GMT
Not After : Apr 30 11:00:25 2025 GMT
Subject: CN=61b78931b0f177718dc6826f361f89300ee6703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:59:ff:d0:98:36:a0:2c:17:d4:a4:90:37:
18:e4:98:5b:c4:7b:c3:81:3d:a5:ad:59:86:cc:9c:
66:db:bb:eb:1e:ab:52:de:60:c0:60:cf:92:6b:d3:
62:81:23:c8:aa:99:29:0b:bb:08:af:5a:01:4c:f2:
e3:06:b8:e2:58:cb:ff:cf:24:93:1b:ba:6c:33:2b:
78:7d:7c:c7:c0:f6:fc:2c:fe:40:06:27:bb:0f:ac:
c9:15:86:e0:af:f9:fd:fd:08:b7:79:82:1a:26:34:
50:e7:91:6b:ab:11:ca:16:16:b6:6b:4b:c2:3c:ba:
ce:7f:96:d7:5e:ff:29:b1:e5:0c:a6:d8:49:50:ce:
32:5f:39:0a:0f:c3:23:c3:ff:bb:28:88:39:55:98:
65:22:9b:00:38:ae:28:3a:5a:cb:90:47:58:e9:9f:
43:a6:4f:5a:b6:f6:25:c5:2f:fe:83:cc:04:b9:4f:
70:c5:0e:66:48:32:3b:f9:68:a8:9a:60:d7:1d:69:
61:d7:85:8c:cf:04:b3:62:10:22:7e:79:26:df:a5:
91:ea:5d:13:9d:6d:7e:29:72:bc:11:80:e9:b2:8d:
b2:5c:32:ed:c3:56:a2:dd:50:22:90:f5:27:06:d9:
9e:b8:ec:20:ba:8f:b5:1f:86:b3:3e:6d:93:32:ac:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:89:31:B0:F1:77:71:8D:C6:82:6F:36:1F:89:30:0E:E6:70:3A
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d2:e4:d8:11:40:09:f6:9f:90:1e:d9:0c:8a:80:f7:e2:ec:
f5:2d:36:aa:f3:21:be:ad:57:1e:db:78:95:18:cc:b7:5e:5b:
91:95:f2:7f:e7:6b:2f:03:4f:a9:d4:83:dc:a8:02:94:2a:0f:
29:13:04:24:2a:cd:ff:05:11:27:0d:f9:32:11:06:3c:ae:3a:
ee:4d:bd:ff:79:a4:fa:68:e0:20:b0:cc:1c:08:23:30:fe:96:
11:ed:ab:80:8b:ac:8b:1c:cd:d1:22:44:d4:1b:f4:70:ae:47:
21:3b:1d:eb:12:16:2e:6e:db:d4:f3:4b:da:e2:18:fa:43:23:
de:c4:fc:32:f2:89:75:08:c9:88:39:bd:7b:28:86:b9:7a:c9:
38:c8:18:57:d6:36:87:8b:ab:d9:0c:a1:a0:03:d3:2e:c5:d2:
2e:ee:47:41:d7:ef:06:35:af:d5:6f:da:5e:0e:c7:d5:64:cc:
eb:c4:c7:b4:69:a3:8c:28:f3:be:4b:c7:b7:84:a0:b3:c7:b3:
b0:a4:f7:4e:5a:44:6d:a0:05:33:6b:77:00:72:1e:b0:34:48:
d1:95:7d:ab:70:fb:2a:66:31:29:41:b9:a2:7d:2d:31:82:c4:
f4:60:c1:89:80:64:86:8f:8c:bd:ba:5d:5d:93:4d:74:af:0f:
3d:28:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:53:31 2025 by rpki-client