Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: ytWERMtTaJTLzzWIAEwqTmDbwMvhLTPz1tjb1Zotk54=
Subject key identifier: D1:52:1A:39:14:CF:B8:24:3C:FF:13:FA:E3:D5:47:2B:E2:4E:63:21
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 019674F9F7D762019AFCEF83D501B6B0F64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 02:01:01 +0000
Manifest this update: Sun 27 Apr 2025 02:01:01 +0000
Manifest next update: Mon 28 Apr 2025 02:01:01 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: 5uSLqu/Ri/CdWgCfVRBISHFgF6RKHWAUUt0xx8VS0w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:f7:d7:62:01:9a:fc:ef:83:d5:01:b6:b0:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Apr 27 02:01:01 2025 GMT
Not After : Apr 28 02:01:01 2025 GMT
Subject: CN=d1521a3914cfb8243cff13fae3d5472be24e6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:18:55:2e:33:1b:0c:2f:05:75:75:91:c1:
9b:b4:f3:e0:43:0c:49:27:e1:a8:ef:d5:6b:5a:23:
f4:68:01:bb:35:5b:6b:5c:3e:97:44:cc:9f:4d:4c:
f2:00:9a:08:f7:28:e8:e7:3f:e7:d3:3a:ac:87:26:
b2:ab:f0:c6:41:78:f5:1a:24:00:10:32:86:ad:49:
f9:9c:4e:c8:76:b6:53:d3:37:a0:8e:44:a1:fc:ae:
1d:e8:55:82:37:b1:1b:7d:6d:32:30:e2:25:d1:52:
71:9c:ce:76:cf:a7:a6:c7:be:bf:71:65:c8:45:59:
e2:31:c5:bc:46:c5:e7:a5:8d:65:8d:fa:e2:35:d6:
c0:3a:f0:de:4d:38:b4:af:ba:d4:83:b5:18:a9:45:
0a:11:a2:5a:59:ad:9e:1e:09:79:a0:d8:da:3d:48:
fd:6c:96:be:68:79:84:37:10:f8:96:7f:ec:f6:65:
65:58:0b:42:6d:ad:92:7c:6e:f8:59:af:a6:13:82:
19:1f:56:ab:6e:62:0c:c5:10:38:11:40:52:71:eb:
71:d0:e7:c6:35:94:7d:93:62:11:16:f5:d1:08:92:
8f:7d:a7:99:a7:a4:71:9c:07:93:a2:c5:c1:ca:27:
13:3f:6c:88:5f:9d:7c:0c:29:fb:03:45:75:2d:32:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:52:1A:39:14:CF:B8:24:3C:FF:13:FA:E3:D5:47:2B:E2:4E:63:21
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:80:31:86:b2:a6:f8:15:06:be:4f:bc:21:54:27:fa:88:
a3:02:31:ea:f1:0d:1d:94:b4:ca:2d:38:7c:cf:f3:2a:7c:ff:
57:ff:cc:35:ab:1b:f8:51:94:df:93:24:79:e9:5b:61:98:9c:
32:02:d3:6b:2a:20:b2:fb:e7:16:f6:e1:d3:83:27:9a:2a:5d:
47:ad:03:71:4e:30:50:a0:23:f1:54:08:08:dd:52:45:a5:4d:
5c:67:03:4b:34:83:14:39:d2:b5:ef:5e:29:22:4f:2a:5f:5d:
95:2e:e8:c6:69:51:c9:2d:b0:9d:04:ad:66:16:98:cd:45:1a:
dc:2d:29:90:77:63:99:46:aa:95:2a:fe:d2:ef:36:10:59:70:
fa:93:73:03:f4:d3:ed:8f:6a:18:d8:c9:e4:27:2b:f7:e3:5a:
e9:26:23:1d:e9:08:c3:c1:27:4a:fe:e0:ca:5f:e8:8d:e7:4f:
f1:df:c2:c2:49:bc:fc:b7:8b:dd:b2:2b:26:c4:28:f8:11:96:
06:af:26:10:c6:12:70:62:47:16:89:57:66:84:86:1c:43:0d:
85:03:0f:17:70:c3:d3:3b:c4:59:9f:fb:98:a3:ce:2c:75:f0:
cb:05:d6:c4:86:b4:d1:af:6f:4b:9a:2f:33:65:33:0f:2a:65:
cf:46:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:53 2025 by rpki-client