Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: 1ijzJCFVBplbq8YV4Sx5zzJsniNvgdg+j++Cg1O12Ww=
Subject key identifier: 6E:77:1D:29:1F:A7:AE:A8:86:2F:E9:41:BD:05:AA:1E:72:F5:B1:53
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 01968B139F6E802A57AE53D0F7243129A91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0C2C
Signing time: Thu 01 May 2025 09:00:41 +0000
Manifest this update: Thu 01 May 2025 09:00:41 +0000
Manifest next update: Fri 02 May 2025 09:00:41 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: C5LUK+ODhE26ILr0ySqitFNuYHphb0ygGp5TB7Pjp20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:9f:6e:80:2a:57:ae:53:d0:f7:24:31:29:a9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: May 1 09:00:41 2025 GMT
Not After : May 2 09:00:41 2025 GMT
Subject: CN=6e771d291fa7aea8862fe941bd05aa1e72f5b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:3b:6b:d7:b2:06:4b:4c:8d:7f:1c:a0:79:
ae:76:04:4c:11:4b:df:53:25:02:38:88:d0:e1:5e:
58:fc:1a:08:4b:3b:e5:6f:47:f5:d2:b2:e7:cb:1d:
23:0d:25:d6:23:92:1c:24:5a:c7:6d:51:ff:7f:54:
19:e3:d5:48:0e:1b:0f:7d:b3:56:8f:09:ac:80:5b:
4d:94:b4:56:e4:74:8b:e5:3c:3c:c6:c4:38:ab:45:
1e:fa:26:62:30:06:e4:4a:73:7c:0f:41:97:77:8c:
bd:eb:82:bf:3f:9a:79:22:db:78:7b:07:d7:7f:72:
92:50:92:28:a9:76:d3:f9:9f:73:42:3d:25:73:6d:
c1:04:79:85:c2:4b:49:2b:70:c9:d0:d3:1a:05:7b:
f4:0f:0b:69:41:b6:23:b4:0a:00:81:5e:5d:6e:e6:
94:d5:92:0e:45:fa:4c:2d:b9:15:61:fb:1b:0f:80:
01:25:d8:43:2b:3d:c3:d9:0a:51:34:19:01:c3:5c:
4f:13:c0:0d:06:b3:be:74:8e:2e:fb:2f:93:42:c7:
f2:16:13:41:41:70:8c:07:a0:4b:33:b3:38:59:35:
2f:06:b3:e8:c1:a7:99:ce:60:a7:01:62:4c:97:ef:
56:e9:73:ad:06:dc:7f:52:e5:69:b8:2f:44:72:ce:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:1D:29:1F:A7:AE:A8:86:2F:E9:41:BD:05:AA:1E:72:F5:B1:53
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:ce:bb:c1:fa:af:2e:b4:f6:ba:52:84:23:c8:86:dc:9a:15:
a5:1b:1e:4a:bf:d4:59:da:f4:47:1d:f9:92:09:6d:c5:75:f0:
9a:f9:0b:99:66:1b:59:14:9d:d2:26:81:0e:13:7c:e1:82:b3:
ce:7c:d1:40:7d:4a:a5:8b:84:35:30:69:ee:3f:eb:7d:07:6e:
91:64:b6:de:f1:fd:39:73:94:2a:3a:a8:5d:55:cb:8c:1a:62:
e9:12:d0:c0:0c:d1:c9:21:48:a3:b0:8e:6c:ff:ca:81:de:d4:
a7:e4:64:83:71:54:db:54:e7:9a:8a:0c:58:6c:07:c9:2e:a4:
4f:39:2f:86:a9:84:46:5d:0d:64:f9:a1:ee:2b:bf:6d:a0:78:
33:cd:0c:8b:6e:44:0a:3b:28:fc:64:65:e2:7f:ad:c3:9b:d0:
16:47:f4:04:ff:33:70:11:c1:4c:2c:47:6f:4c:f5:91:a6:83:
b5:04:61:fb:bd:64:25:34:f7:b5:34:59:c9:0d:f3:6a:70:a0:
79:74:ee:c8:04:46:61:24:18:66:dd:28:a7:4e:15:f0:de:b1:
06:33:33:1d:69:5c:fa:4b:f5:e8:8c:9f:86:42:90:bf:86:a4:
ca:f2:82:91:48:99:6b:e5:24:3c:95:fc:40:84:ea:d7:12:7a:
34:ff:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:24:59 2025 by rpki-client