Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: ZvHovAqCAY5OLQQhtu3lsop4GDLWfDjvdloaX4U+zQA=
Subject key identifier: 77:CF:01:4A:BD:2E:83:65:E2:36:49:1A:F9:E3:5F:3A:60:1B:58:21
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019683232DD559A06CBFCD9DDA23829921F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0A78
Signing time: Tue 29 Apr 2025 20:00:42 +0000
Manifest this update: Tue 29 Apr 2025 20:00:42 +0000
Manifest next update: Wed 30 Apr 2025 20:00:42 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: emgG6cIYdqzOlB3hqgC08j05BYM90aCpbRnQnzIQ61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:2d:d5:59:a0:6c:bf:cd:9d:da:23:82:99:21:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Apr 29 20:00:42 2025 GMT
Not After : Apr 30 20:00:42 2025 GMT
Subject: CN=77cf014abd2e8365e236491af9e35f3a601b5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:cd:54:da:03:05:4f:f3:70:27:3b:2c:ad:
c1:7c:3c:2a:7f:e3:a1:4c:58:2d:64:db:4c:96:00:
6c:7d:fc:e6:35:30:87:18:e0:34:58:4a:55:f7:5b:
62:fd:05:81:e6:97:04:4e:9b:92:c1:d4:11:07:62:
11:63:7d:9b:31:a9:05:3a:a7:a3:7e:49:cf:9c:30:
6b:09:79:42:74:32:c6:21:b7:2e:9a:f6:2c:a3:6d:
6a:52:ec:0b:1e:44:1f:07:16:5d:66:b6:f7:23:fe:
f2:17:8e:29:b9:f9:fe:60:85:9d:aa:75:8b:94:7e:
eb:92:8f:70:fe:8f:95:13:5a:70:0d:66:79:42:1b:
82:4f:62:d9:9d:58:d4:6b:8f:b3:1b:27:54:6b:3b:
b8:2a:0a:a5:6f:ea:4d:66:72:f8:b5:b4:79:93:0d:
70:6d:1c:67:13:ac:20:9c:2c:ce:94:3d:38:7a:9c:
ca:ed:e2:7b:7d:5c:e1:d7:01:07:68:0e:f4:d5:0c:
5c:27:5a:6a:83:65:e6:26:20:cc:81:57:cb:b8:6a:
6f:d0:6b:d5:f4:e8:94:d2:b3:b8:9b:5d:13:71:0f:
6d:1b:b8:9c:04:21:b2:8d:98:5b:fa:20:06:ca:a8:
16:38:0e:db:ba:e6:c5:a6:8e:d1:25:a3:b8:07:8c:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CF:01:4A:BD:2E:83:65:E2:36:49:1A:F9:E3:5F:3A:60:1B:58:21
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bf:cf:2d:1e:35:d4:14:0e:ad:24:e6:93:e6:af:2d:32:5f:
7a:af:15:6d:a1:31:1b:85:6b:ac:d1:58:28:62:7a:07:11:36:
2d:cd:41:ab:39:57:71:ca:9f:03:d7:9b:73:01:de:1a:46:c1:
75:49:76:f6:a6:51:d3:cb:0c:fa:4e:38:7e:24:03:ed:91:51:
ec:8a:f8:e4:61:37:60:00:32:b7:5c:36:70:7e:1d:fe:25:16:
f7:f7:99:92:2d:33:6f:14:04:59:16:e3:3f:b4:ce:ff:66:ca:
74:18:2a:e2:83:ba:f3:bb:33:b4:5f:c8:bf:f2:23:99:4a:93:
b7:b0:c9:e5:a7:32:d4:f3:b5:36:a5:6a:f9:8b:b2:4a:80:61:
3a:bd:cb:05:9c:91:97:f0:23:f1:50:5e:7b:4d:fe:ac:64:b5:
aa:23:ca:b2:48:0c:4d:39:85:02:35:b4:a0:7a:6e:ab:37:ea:
cf:a9:a2:ca:9e:4a:b7:24:9c:27:69:b5:0e:89:5e:be:95:b2:
72:61:5a:bf:a0:ff:35:91:6f:28:0e:90:5e:19:d0:65:26:1a:
8d:7c:04:4b:49:ad:71:4a:d4:a9:7f:c5:54:f3:3f:6b:f8:62:
34:09:22:71:13:e1:b2:02:24:ca:8a:5f:23:fa:87:ae:97:87:
b6:b4:68:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:41 2025 by rpki-client