Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: VCZV7wKiA5HAscmhL9VJrLCgjFg/zNqlP0hGjI7q/Sg=
Subject key identifier: 5C:0B:38:F1:A2:5F:51:6B:17:74:10:A4:50:0C:19:90:24:83:49:24
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 0196741D9A1FC190A1925D190A9F8190FB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 22:00:19 +0000
Manifest this update: Sat 26 Apr 2025 22:00:19 +0000
Manifest next update: Sun 27 Apr 2025 22:00:19 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: d4QrRGVd9RiAsNo5b3t1WSYzSvPjJjZVTkaknqO5a8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:9a:1f:c1:90:a1:92:5d:19:0a:9f:81:90:fb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Apr 26 22:00:19 2025 GMT
Not After : Apr 27 22:00:19 2025 GMT
Subject: CN=5c0b38f1a25f516b177410a4500c199024834924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:e5:f3:98:ec:8d:29:97:e4:e0:ef:e0:3e:
c9:9b:9a:14:fd:b3:f2:18:97:d0:04:c7:ac:e4:f8:
43:db:a6:58:d7:91:bd:f3:9b:ed:89:51:bd:12:f5:
30:56:ea:83:8d:9c:13:95:6d:f4:d7:cc:fa:c3:40:
ab:39:44:73:a5:b5:15:58:c1:42:4b:02:31:ff:d1:
f7:7c:97:02:66:51:e2:5b:f8:f8:8a:16:71:b3:c2:
ce:79:d1:f6:b8:01:c1:76:13:3e:61:57:b4:6d:66:
dc:34:86:d6:6a:7b:c3:4a:df:22:20:37:dd:ca:05:
41:18:83:73:cd:94:cf:cb:08:83:96:52:b0:7f:d1:
77:32:b0:0e:0f:d0:d1:e5:c7:8b:2e:9e:17:0f:59:
cf:cf:5f:03:8c:f3:ae:78:83:ea:9c:32:26:df:12:
b4:6b:fd:1d:ff:c3:ca:d8:56:ca:17:33:8b:fd:86:
26:15:86:ff:e8:14:c0:ea:f8:fc:ac:31:68:ae:93:
e0:1a:ae:cc:23:dd:05:48:65:33:52:92:ed:75:dc:
8e:0d:1b:37:7a:ed:c7:e2:9d:48:fa:9e:31:3a:c2:
21:62:c7:84:fd:77:2b:a2:ff:74:f6:d5:e8:b0:c8:
86:67:53:4e:b0:ec:83:6a:70:98:aa:95:2c:a4:47:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:38:F1:A2:5F:51:6B:17:74:10:A4:50:0C:19:90:24:83:49:24
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:65:71:ff:52:d3:f5:24:49:2e:ca:8c:ce:33:09:e7:4d:ce:
ad:e9:05:89:69:f6:e3:24:87:e9:c9:2c:a1:63:1d:99:04:1e:
b1:9d:57:72:75:2a:a9:85:41:7a:b9:23:e6:6c:5f:3f:41:22:
e6:3f:60:e8:58:8b:58:f8:a6:03:18:16:ad:2b:bd:83:c6:78:
76:6f:df:86:30:2c:cf:37:9d:27:10:c0:83:8b:5a:22:6c:a3:
ab:b2:be:af:11:74:26:13:4e:1e:5a:60:fc:7c:ae:3a:ab:6a:
1b:b6:a0:5c:e0:7a:af:cc:90:43:22:82:72:78:7f:17:2e:51:
fb:0b:92:f2:75:b8:db:60:78:df:66:60:62:05:a8:03:a6:6e:
18:ba:2a:cf:13:40:cc:b5:d0:de:aa:da:3a:7d:ba:cd:58:f1:
fc:63:e6:da:d4:f4:fe:4b:23:50:7d:d2:ce:74:c3:ab:f3:79:
5a:43:c3:6e:55:ee:4e:96:a8:61:12:ce:80:2a:ab:f0:bc:4a:
17:02:c5:bf:4b:42:eb:f8:1b:e8:d1:67:d2:07:84:ae:cc:1e:
c9:d2:6e:85:93:70:01:04:54:8d:55:b4:66:b9:e1:bb:97:cc:
1c:f5:3b:9d:4e:9c:81:53:c5:55:a5:72:12:88:aa:9c:bc:07:
9c:f1:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:11 2025 by rpki-client