Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: ZzieOBjNwjWy9GNkk9zh3wQ44ZezQdq8LGB+0gNttQ0=
Subject key identifier: 12:CB:7C:47:D2:59:E5:98:C4:FF:15:00:D7:E1:12:0D:A4:22:DC:8B
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 01967679E6FD8ED98478273EE8DCF9BBA8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 0E45
Signing time: Sun 27 Apr 2025 09:00:22 +0000
Manifest this update: Sun 27 Apr 2025 09:00:22 +0000
Manifest next update: Mon 28 Apr 2025 09:00:22 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: yzYCgC4YA5w5CgTbz+Q/zYigQtcYjENo7Z4Rz0OnvQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e6:fd:8e:d9:84:78:27:3e:e8:dc:f9:bb:a8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Apr 27 09:00:22 2025 GMT
Not After : Apr 28 09:00:22 2025 GMT
Subject: CN=12cb7c47d259e598c4ff1500d7e1120da422dc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:7a:57:fe:92:51:7a:c6:c4:46:d5:59:c9:
cc:ce:89:3b:2d:8b:e6:86:db:09:dc:8d:ca:91:94:
65:32:79:3a:bc:34:9e:a4:55:3a:17:89:bd:dd:f1:
55:a3:bb:89:89:a8:3f:e1:37:87:98:69:74:db:7f:
6b:aa:cc:16:7b:c9:a3:fa:90:35:2a:4d:ee:25:bc:
7e:8a:91:ef:59:3e:ef:6d:c6:21:df:10:98:07:2d:
28:4b:36:a6:aa:7b:76:d0:65:ef:9c:96:ff:c1:2b:
62:a0:3e:de:d9:fe:51:b3:6c:9d:36:55:5b:1d:4d:
94:09:0d:a2:0f:db:cf:74:b0:84:ee:0a:42:87:8c:
e4:92:9e:69:4e:ea:cc:2b:42:ae:8c:eb:67:49:2a:
04:58:78:e1:23:87:a7:f7:7b:86:66:dd:5b:76:ca:
cc:9e:92:dd:2c:53:1b:25:dc:f7:ed:af:76:52:17:
ed:af:26:e6:16:74:10:72:3b:97:4b:2d:c0:a7:5d:
a2:2b:b5:c2:41:ca:2f:c8:b1:db:bc:9d:81:9b:b1:
47:bc:94:af:b6:35:39:5f:32:48:42:70:d2:bb:9e:
0f:84:b1:56:85:b3:be:5d:2a:68:80:e2:98:37:2b:
94:dc:54:33:ae:1d:ff:3f:c7:bf:4e:4a:b4:15:32:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:7C:47:D2:59:E5:98:C4:FF:15:00:D7:E1:12:0D:A4:22:DC:8B
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:bd:6c:82:fd:67:21:cb:e6:7e:c4:87:f4:ed:0d:15:76:
c1:55:35:ab:1b:fe:89:d3:01:da:5d:8c:12:e8:c0:fb:2f:73:
38:42:ee:5c:91:35:c5:90:b8:20:a5:e5:12:31:43:b5:d1:42:
f4:60:78:26:21:ab:e1:7a:d0:a2:82:88:01:b5:ba:c4:71:b1:
c2:ae:bd:c6:f1:cb:b8:21:82:e7:22:28:88:11:df:61:3d:19:
6d:b1:99:24:c4:e6:d5:36:38:0b:ef:71:87:24:06:fb:b2:34:
ac:4a:05:94:9a:fa:b0:bb:db:93:74:6c:bc:1d:af:cb:3c:7b:
10:67:36:34:24:3d:12:ec:1c:5e:64:a0:f7:f6:00:48:c5:12:
70:fb:cc:ac:c4:17:65:66:91:a6:ae:1e:14:2c:f9:39:de:3b:
b0:d5:00:4b:02:55:7b:00:30:21:2c:9a:d1:30:c4:8d:e9:a8:
1b:52:ae:4c:02:eb:86:39:4c:7d:a7:72:9d:c4:b7:c9:fe:5d:
ee:1b:c3:5b:f4:29:b4:b8:24:0f:23:25:92:80:8a:f2:15:47:
fa:50:4b:76:01:84:1e:65:78:37:c5:06:e5:27:25:60:e4:9d:
78:5d:cd:2a:c3:94:5f:04:a0:81:a1:7f:50:77:82:96:ff:ba:
9c:f2:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:07:30 2025 by rpki-client