Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: uDnFG8L6DIr2r1WAao3/jy9tjsJTMkUAxTZ9+0BC/QI=
Subject key identifier: 60:C3:C2:5A:D3:1E:33:4F:90:98:5F:E5:88:B3:ED:F6:22:4B:02:81
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 0196771E96C7C1E5CEC0779968C07974B804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 14E0
Signing time: Sun 27 Apr 2025 12:00:15 +0000
Manifest this update: Sun 27 Apr 2025 12:00:15 +0000
Manifest next update: Mon 28 Apr 2025 12:00:15 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: ay64hiJ0d//e1sYK/oPF2YusYw3WQJlHWZ5B63YQzzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:96:c7:c1:e5:ce:c0:77:99:68:c0:79:74:b8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Apr 27 12:00:15 2025 GMT
Not After : Apr 28 12:00:15 2025 GMT
Subject: CN=60c3c25ad31e334f90985fe588b3edf6224b0281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f9:68:57:f5:b8:6a:41:e8:38:bd:9a:61:eb:
12:ea:36:a8:cf:f5:af:a0:ea:53:cc:40:de:86:26:
05:c3:dd:e1:2b:9b:32:11:84:b1:69:15:05:97:03:
d7:75:a8:1b:94:f3:29:5c:af:3d:2e:36:4c:63:e8:
b7:f5:c6:fe:76:e3:b2:75:58:d0:4f:28:af:0b:87:
ad:1e:16:e8:06:4f:58:14:11:f4:e2:41:f5:6d:58:
58:49:4c:b5:71:33:a4:7e:bd:3c:60:22:ac:eb:14:
ab:5a:a2:e5:95:80:54:d9:0d:74:22:f4:8f:5e:5f:
73:ee:fc:5f:3a:b3:62:d7:d8:64:73:46:67:98:ab:
5f:21:ad:ec:ab:9f:1b:fc:f4:b5:12:05:8b:2b:ae:
55:33:a6:0c:d3:27:68:03:2c:de:f5:91:db:f7:72:
9d:15:65:2f:f4:fc:eb:59:eb:2a:1f:c8:ae:6a:f7:
b6:bc:2d:c1:a2:6b:ec:90:86:01:00:05:29:8c:22:
55:67:df:0b:b3:42:45:ca:7e:c8:20:2a:a1:31:47:
38:6d:06:30:37:e8:a3:2d:d3:08:84:24:c7:21:30:
16:91:08:da:2b:09:ef:0c:a9:d9:cf:ff:30:bd:8b:
3e:7b:a9:25:05:d0:12:3a:99:8f:7f:d9:a5:e4:f6:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:C2:5A:D3:1E:33:4F:90:98:5F:E5:88:B3:ED:F6:22:4B:02:81
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:39:ab:bf:3b:29:a3:1d:1d:a5:26:a0:19:1b:db:62:64:
2f:fd:4c:18:ed:1b:ff:24:33:43:fb:11:65:4e:2b:d4:e4:b2:
d6:7d:27:b6:94:86:58:d5:0d:64:77:2c:3e:56:c7:98:3e:60:
91:7e:90:2d:d4:6f:36:54:9a:54:cc:4c:e8:68:3b:4b:ac:78:
6b:3b:75:3c:a5:96:59:4c:1c:70:6d:e7:4b:3a:57:3c:cc:48:
5e:24:92:69:f9:be:f1:6f:97:15:fe:8e:94:13:37:d6:1b:0d:
38:e9:96:07:37:85:a4:65:8a:e6:b4:71:4a:a8:47:41:5d:10:
18:dc:7f:6e:e9:f8:93:e3:7a:2b:46:2d:15:f5:69:ea:37:77:
c1:90:c5:9c:7b:b7:cd:49:e5:69:e7:e0:3a:38:c2:82:f9:92:
08:30:f4:ee:fb:ea:6e:13:b7:50:a4:49:dc:cb:47:0f:21:42:
03:ce:ad:81:4f:77:36:0e:73:43:ae:d4:f8:a5:1d:4d:2e:b4:
bf:28:c8:81:b3:81:5f:6c:0f:63:5a:b9:04:f8:c5:2d:13:ea:
e7:d6:84:e8:4c:76:ba:2b:12:09:9b:00:33:5a:5b:90:26:c8:
79:87:a2:7f:e0:f0:a3:b6:0b:31:8a:85:69:10:6e:b4:40:f1:
d6:7c:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:48 2025 by rpki-client