Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: d6jHVr8aupOAajFufrTZfJ1iVEoLn+S8zeTDIL14lLk=
Subject key identifier: 9E:A3:BC:42:B4:09:94:50:BD:A1:C2:63:64:FF:13:93:90:43:7F:93
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 01968DA6CE564CD63B7CF5729D427B15C33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 054A
Signing time: Thu 01 May 2025 21:00:41 +0000
Manifest this update: Thu 01 May 2025 21:00:41 +0000
Manifest next update: Fri 02 May 2025 21:00:41 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: I1e+urQUe/kshaBRPjh4UOPOAjT7U2YOK9MWS8z0o0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:ce:56:4c:d6:3b:7c:f5:72:9d:42:7b:15:c3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: May 1 21:00:41 2025 GMT
Not After : May 2 21:00:41 2025 GMT
Subject: CN=9ea3bc42b4099450bda1c26364ff139390437f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:23:9b:c0:1a:50:1c:f8:b4:10:9c:e0:4d:
54:b0:da:49:56:78:0b:fa:56:97:d5:d8:1d:da:46:
b1:e9:39:2d:24:21:e5:88:c8:66:3c:c1:f0:06:ea:
b3:d9:2d:2f:ed:9e:7e:65:30:14:84:e4:30:a0:17:
12:4b:27:05:27:d5:b5:62:ae:1b:1e:b9:31:2e:7c:
fe:ca:65:41:c1:12:af:48:47:d7:00:6c:7a:46:cb:
c5:24:36:0e:b3:5a:a9:5a:d8:33:f7:b4:5b:77:33:
8e:6c:59:56:00:65:9a:7d:4b:46:5a:86:fb:d9:46:
66:94:e1:92:3c:95:6f:80:c6:90:e2:d1:48:2f:35:
5a:2a:8d:8b:45:9a:e2:37:5c:da:96:9c:af:46:e9:
1e:cd:ef:ff:48:b6:0a:48:9a:07:b7:df:74:f0:7f:
53:ca:8d:25:2f:24:63:99:32:7d:3e:00:3e:74:2e:
5b:65:31:d4:5a:3e:5a:9f:2a:6b:a4:80:36:b0:70:
1f:10:f6:32:7d:a4:2d:8f:f8:89:13:e7:0e:8c:5a:
2e:70:3d:0c:f3:b3:4a:97:4f:75:cc:40:ff:2b:b1:
e1:a7:ef:19:a0:b4:b7:5a:c5:8a:e8:52:ba:94:3a:
db:cb:d8:a5:71:31:ec:10:e3:12:72:84:80:e5:9e:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:BC:42:B4:09:94:50:BD:A1:C2:63:64:FF:13:93:90:43:7F:93
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:b4:e7:5d:d6:68:72:11:94:fc:3a:bf:8b:c3:84:56:41:
54:00:1d:d7:fe:74:7a:c7:1e:97:9e:c7:1c:6b:ae:14:8d:37:
7c:5c:b0:75:9e:a4:b7:46:3a:c4:46:65:0b:dc:00:42:34:64:
4b:32:b3:f4:ad:ad:ca:d5:f0:4f:8b:be:12:68:84:a6:41:cf:
2a:c5:00:61:95:32:9d:2c:d9:55:92:f7:f4:d3:06:5a:ea:a8:
8f:54:8c:80:ac:2c:c8:fe:14:8c:62:fb:01:69:0c:00:86:ee:
33:76:03:73:cf:46:32:97:5e:82:e2:70:d4:53:19:e9:48:61:
8d:c3:81:ac:1c:47:25:69:60:63:03:a8:0c:42:e4:0b:72:e2:
16:76:b9:fe:a8:90:62:18:b9:a4:65:21:8c:e2:af:cb:45:57:
be:4c:a5:2c:01:10:f1:3d:0a:10:23:73:aa:2d:f5:b7:d5:e1:
7b:57:34:24:26:5a:d9:cf:3c:32:fa:c7:9e:bb:ba:3d:0b:1e:
6a:d3:f8:97:b5:0d:05:ed:f5:ec:56:ab:c2:f0:51:87:03:d4:
06:90:d3:90:55:4f:ca:97:4a:39:d1:81:05:cf:c8:64:a2:9e:
5e:44:80:e7:aa:9d:39:71:a6:00:46:b6:b0:f8:f4:74:d1:cc:
fc:1c:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:05:53 2025 by rpki-client