Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: ABOZKLDD6BtzlrC0Bei3ExSLIzMhrkNriXRUB0tFlVs=
Subject key identifier: 0D:FE:1E:17:7E:E9:0B:6C:30:E7:EC:05:6C:B9:5F:68:BE:B0:71:DA
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 0196851183D228E4AD2BF72A1F672A2374C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 05:00:39 +0000
Manifest this update: Wed 30 Apr 2025 05:00:39 +0000
Manifest next update: Thu 01 May 2025 05:00:39 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: x1HRQ9IkFjZ7W4kGJYJOl0sI3cIVfuuHhMq72jD467A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:83:d2:28:e4:ad:2b:f7:2a:1f:67:2a:23:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Apr 30 05:00:39 2025 GMT
Not After : May 1 05:00:39 2025 GMT
Subject: CN=0dfe1e177ee90b6c30e7ec056cb95f68beb071da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:63:d2:79:25:ea:e9:fd:23:a4:be:0c:ea:
fe:95:0d:4f:32:fb:c5:5b:c4:7d:69:d0:2e:50:8f:
d3:20:13:29:22:57:a0:1c:95:6a:1e:97:65:15:b0:
76:b0:6e:f0:04:c4:2d:6f:3e:18:f1:68:6e:e0:0c:
f9:48:f4:03:3a:d6:aa:dd:88:3d:3b:cd:60:32:25:
37:8a:c0:b2:d4:75:61:e0:4e:9c:40:f6:3c:ba:4b:
73:de:d3:f1:95:a3:12:a4:16:49:78:ed:3c:12:a2:
24:67:b8:9c:a5:6f:ef:e4:5b:6c:6e:f4:da:6c:7e:
16:5c:74:c2:ff:af:02:ce:df:92:37:5a:7e:25:ca:
83:cb:0f:18:3f:89:2b:68:85:72:8b:b5:1a:af:51:
49:3d:3a:89:98:fa:53:d8:57:2c:11:0a:11:e2:5d:
f9:a0:5d:6a:ad:0c:dd:95:16:78:aa:78:8d:c5:c9:
0e:c4:b5:57:f0:71:d5:fc:85:02:20:36:55:df:16:
5a:3f:cc:0f:b6:8f:c0:0f:5c:98:12:63:f2:4d:ae:
1e:a6:a0:fd:ca:04:1e:0f:3f:e2:99:10:42:5b:dc:
58:bc:49:45:d6:b4:20:3b:94:9c:0f:4a:fb:ad:3a:
f5:02:72:97:3d:6a:18:f6:0e:f1:fd:e9:b7:61:06:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FE:1E:17:7E:E9:0B:6C:30:E7:EC:05:6C:B9:5F:68:BE:B0:71:DA
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:78:cf:f9:94:60:56:f4:36:bb:df:ae:2c:f4:59:92:24:3d:
16:f2:34:f8:51:7a:b0:22:74:90:2a:bf:f7:36:d0:b4:b6:d3:
85:a9:e9:92:73:48:08:79:32:0f:a1:3d:fa:8b:d4:25:f7:6d:
bb:e4:8e:23:61:b9:97:6c:96:c7:e1:c8:1a:24:99:1c:8e:10:
8e:35:95:ee:dc:9c:af:ad:22:f9:ae:ac:95:e4:23:22:98:5d:
f9:6a:19:1d:9e:3d:a5:f9:22:63:2a:8f:dd:bc:23:98:9d:72:
04:dd:3c:1e:bb:cd:6e:93:cf:31:75:32:61:6d:c1:95:fe:80:
5e:7c:7c:c8:96:5d:25:c7:2a:92:02:d1:32:8e:11:82:0a:c0:
ca:f8:83:b0:07:9b:a3:a2:61:c4:a9:f1:a1:12:71:33:e9:43:
7a:d5:14:67:bb:3c:b0:ed:e9:6a:f5:10:1e:ef:5e:91:f0:58:
52:29:f4:89:b6:74:8e:02:c3:1b:ca:93:fa:57:e4:83:07:62:
99:25:bb:92:a9:04:db:74:5e:28:0e:4b:b7:a4:03:1b:87:4e:
41:7e:cb:95:42:1f:53:af:34:ab:28:f8:e1:7b:9c:3c:35:40:
db:5f:60:c0:67:68:37:aa:ba:6d:2c:e6:23:b6:99:3f:d0:7d:
4c:35:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:25:32 2025 by rpki-client