Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: 3D7X0qYNA/t6jlHyhPCHt4IHgWrpv9S8YTUR1zc0lCM=
Subject key identifier: A6:4C:BD:85:0C:5F:C3:8D:36:D5:90:5E:96:38:CB:D5:0F:34:F2:7C
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0196748BA3E203F6A0EEFF0A7148131BFB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 1251
Signing time: Sun 27 Apr 2025 00:00:30 +0000
Manifest this update: Sun 27 Apr 2025 00:00:30 +0000
Manifest next update: Mon 28 Apr 2025 00:00:30 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: ls5RQ8kFGyzr1t80eQRGpKc6+6xD+dZgQFw3fakIzp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a3:e2:03:f6:a0:ee:ff:0a:71:48:13:1b:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Apr 27 00:00:30 2025 GMT
Not After : Apr 28 00:00:30 2025 GMT
Subject: CN=a64cbd850c5fc38d36d5905e9638cbd50f34f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:97:c3:f7:b8:07:b2:1c:24:ea:95:28:f5:
6b:ce:69:8b:46:5b:1d:41:e9:70:d1:0f:8a:02:20:
b3:2a:18:aa:89:39:cc:73:d1:f9:9b:4b:0c:b9:d1:
e4:38:ea:a1:7e:43:16:df:8f:9b:7c:fd:49:18:22:
fb:de:c3:b6:1d:41:09:1f:e1:b3:60:a0:16:8c:11:
d3:d4:aa:dc:fc:06:4b:05:e5:98:e9:fb:63:70:88:
d5:00:d8:e4:29:f8:30:69:eb:92:a4:fa:a5:e7:52:
d2:60:1e:60:8e:80:b5:32:66:83:fd:da:c0:58:dd:
f3:3c:e0:2c:2a:50:d7:f5:53:ea:a3:1b:9f:16:5c:
34:7c:fb:1f:2b:7e:df:f0:4d:44:57:9a:12:2c:b8:
13:9c:60:6b:53:96:20:23:07:7d:fa:e9:c8:70:51:
d1:4e:a3:5c:29:ba:bb:59:c8:43:34:af:21:f6:6b:
ac:35:75:80:25:27:dd:6b:67:bf:1f:94:ee:84:3e:
84:70:76:08:99:ea:08:ad:25:ce:d4:a6:8e:90:2d:
d9:87:1c:68:f3:9d:26:bb:90:65:3b:5b:02:6a:02:
aa:5b:b6:fa:7c:a7:0a:25:fc:1f:c7:30:c7:d6:bd:
11:f9:47:0b:9e:31:63:e5:04:bc:c5:5c:a5:ef:7b:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:BD:85:0C:5F:C3:8D:36:D5:90:5E:96:38:CB:D5:0F:34:F2:7C
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:23:76:0b:63:2f:82:70:71:a7:22:7c:9a:12:1e:86:23:
f2:a1:ea:72:67:de:e9:29:0b:15:c9:74:a0:dc:84:f2:59:cb:
1c:4d:13:20:50:93:8d:0e:ee:8d:a0:40:29:58:2b:24:55:a5:
df:12:11:fe:d4:75:ba:7e:74:95:52:39:59:32:35:61:35:6c:
40:44:ab:b4:c7:24:cc:41:9c:c2:3c:df:21:63:bd:fc:1e:e9:
87:2e:7c:00:7a:a4:33:0f:d0:5c:6c:b9:e9:b2:70:b4:b4:c6:
c4:b1:73:cd:0c:cb:01:94:7e:da:73:65:9b:5e:14:99:ff:80:
09:8a:b7:fc:a7:9e:66:69:11:dd:d0:be:ae:88:80:74:19:18:
46:eb:6e:7a:d4:82:a9:8a:9f:ee:25:27:d7:84:7d:d1:e2:50:
ba:13:a1:00:e4:21:1f:0f:28:2f:75:41:4e:26:79:a4:2d:ea:
37:0f:f8:64:57:32:10:c0:4c:7a:85:de:91:e6:35:83:a8:da:
88:ce:86:35:a7:d8:b8:26:03:51:dd:14:4f:5b:cb:ee:0e:d7:
52:f9:a1:59:97:de:2f:8a:88:f4:03:f2:76:89:fd:a5:98:c2:
23:f1:1c:d6:2e:71:f8:0a:9d:8a:c2:8c:30:69:1b:f5:b9:eb:
0f:c2:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:30 2025 by rpki-client