Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 7IS51a5sZR7vbqkKLHHaoTQYKLEN7RQG+D/vTd7QEp0=
Subject key identifier: 26:06:07:DB:81:D7:A7:CC:B8:A0:F3:66:7A:47:1C:97:10:9C:F0:FC
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 0196767A508D1B5269943AF6AF040C9478FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 09:00:49 +0000
Manifest this update: Sun 27 Apr 2025 09:00:49 +0000
Manifest next update: Mon 28 Apr 2025 09:00:49 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: iYhy+QTrrf4CW37di74uoUwUNXKrf1nHW2KxYSIOHyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:50:8d:1b:52:69:94:3a:f6:af:04:0c:94:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Apr 27 09:00:49 2025 GMT
Not After : Apr 28 09:00:49 2025 GMT
Subject: CN=260607db81d7a7ccb8a0f3667a471c97109cf0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:24:b9:ba:cb:ee:30:cd:45:ab:3c:f8:26:2b:
98:9f:02:1d:e8:3b:68:76:4e:41:10:01:eb:08:81:
df:b3:ec:df:fc:71:2b:80:62:9c:23:4c:8f:08:ab:
7e:50:31:f3:b5:57:76:03:49:81:eb:dc:db:0d:4c:
92:06:2f:be:af:8f:c3:47:a2:6e:b9:57:53:ff:ce:
40:d2:5f:39:0c:f3:bf:31:79:34:95:91:4b:27:5e:
fc:ad:25:b9:96:89:74:63:43:fb:20:e9:d4:1f:35:
52:2e:9b:2e:cc:c3:e1:e9:e8:92:60:9b:9e:a5:57:
b8:84:b6:b5:dd:f9:b0:92:f6:44:eb:7e:79:51:f1:
10:98:7a:43:c6:7a:d4:d9:9b:fb:8c:50:9a:a1:ea:
7d:3b:c4:81:ef:cd:ad:56:5b:fa:e2:d2:a1:4c:9f:
f3:b3:d6:ce:c9:6a:e3:03:c2:60:ac:46:40:fc:df:
77:23:fc:46:45:bc:fa:92:e4:63:f4:16:81:f1:e2:
3b:9e:d9:77:67:c6:1c:d2:e0:6e:88:9f:be:95:d0:
22:7b:96:7b:ab:46:b3:fd:27:c9:b5:68:ed:b7:6a:
a3:b3:40:8a:94:a0:92:4c:bf:ca:02:a1:51:5a:24:
96:db:b6:05:bc:95:1c:8a:51:44:56:23:46:ab:37:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:07:DB:81:D7:A7:CC:B8:A0:F3:66:7A:47:1C:97:10:9C:F0:FC
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2c:96:4f:3d:5a:7d:c6:56:84:41:6e:56:18:ab:38:fa:4c:
b7:16:80:48:96:36:0b:d1:74:e7:25:23:82:6c:d1:74:49:f9:
2c:72:65:fb:2c:57:ea:de:04:22:d3:c9:56:c5:61:86:33:fd:
b3:2f:5f:51:1d:c3:aa:4d:db:e2:f1:75:7e:18:bc:b3:37:81:
f7:9d:ad:e8:cd:67:e1:57:09:92:ee:ae:f4:e4:a4:b5:af:9d:
5a:8a:83:2b:1c:99:5a:39:50:86:02:8b:ca:b5:66:43:48:e7:
57:9f:91:28:86:6b:d0:ff:af:d4:d4:0b:cb:39:ab:7c:ee:64:
ca:27:3d:30:98:34:1f:f1:36:89:30:c5:df:90:8e:f7:45:aa:
49:3f:64:24:3f:15:d8:6c:b9:ac:60:d6:0f:9e:e3:3f:52:13:
36:60:30:f3:12:bd:e8:4d:97:dc:af:f4:48:37:fa:da:66:92:
df:3a:7f:70:f4:d8:90:5b:bf:65:b5:41:3f:2f:18:4c:d4:c7:
44:2a:f6:29:cc:c7:2c:c0:68:67:8c:05:53:ee:99:cd:ab:af:
ef:dd:c1:58:83:e7:73:db:26:3e:ad:10:eb:d2:d2:41:b2:f9:
84:bd:60:41:a8:d0:14:2f:d1:6b:0d:4a:1f:f8:0b:30:7e:c8:
07:ae:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:37 2025 by rpki-client