Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: u5oc/uHO5hXxZ+UKy4BXYr7muwNICSObqhvdr53SJfM=
Subject key identifier: 9D:61:4F:12:A0:C9:D2:DF:79:DF:63:20:8C:C4:AC:A6:63:09:48:8C
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 0196876DB97F212913202F7CBD680B235770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 06C3
Signing time: Wed 30 Apr 2025 16:00:37 +0000
Manifest this update: Wed 30 Apr 2025 16:00:37 +0000
Manifest next update: Thu 01 May 2025 16:00:37 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: hd9OqrCpr2k69rGqtXsMJrPiUuXqe4ui7uWKLUI0GBY=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:b9:7f:21:29:13:20:2f:7c:bd:68:0b:23:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Apr 30 16:00:37 2025 GMT
Not After : May 1 16:00:37 2025 GMT
Subject: CN=9d614f12a0c9d2df79df63208cc4aca66309488c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:89:70:7e:80:78:e6:ee:ee:b2:3d:f9:a2:
d3:68:ac:2c:07:31:80:85:9d:01:e8:ba:f5:01:20:
09:4c:4c:e3:38:0d:b3:01:68:2a:29:25:eb:6b:d4:
b4:f6:e0:03:01:cf:ed:4c:2f:6c:53:3c:16:61:1f:
e1:57:d3:8f:d0:86:91:37:9f:f6:d9:5f:a6:e2:a3:
4a:60:7d:03:19:3f:02:dc:d8:cf:8a:8b:e1:a5:99:
7e:9f:73:bb:1d:14:10:3a:ea:9b:b3:dd:02:5e:ca:
6b:41:82:a8:0f:05:f5:ee:b8:b4:5a:79:56:04:8a:
fa:87:8a:aa:5f:e8:37:80:32:7f:14:4c:61:1b:4c:
86:70:c5:f5:09:48:79:39:72:b5:25:f9:b1:8d:2b:
75:1c:56:b5:04:b4:ac:e8:29:bb:93:25:71:55:b6:
67:af:26:ca:d5:17:5b:66:e6:a2:34:2a:81:09:c3:
ee:4f:ff:95:de:78:a8:e1:10:f0:a5:dd:8a:41:26:
7f:96:91:e5:c1:e8:67:27:f1:01:c8:1e:8f:29:b9:
38:d3:99:da:a7:2c:29:84:75:3e:f1:3e:c7:8c:2f:
ca:d0:0c:af:50:91:b2:72:c9:f2:3b:79:2a:d8:5c:
6b:dd:52:84:88:6b:ce:e6:d4:f8:33:17:5e:68:c6:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:61:4F:12:A0:C9:D2:DF:79:DF:63:20:8C:C4:AC:A6:63:09:48:8C
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:7d:89:d5:46:6c:c8:70:cc:9a:3b:93:90:d1:a9:ab:a1:
40:26:fe:69:d3:09:e3:b1:67:d3:36:a0:d5:40:7a:8f:4a:ae:
06:71:7d:b6:1b:68:28:3b:ab:8e:fc:83:9d:d4:fa:79:4a:5a:
2b:bd:1f:d6:b2:7d:62:ec:bd:e5:ae:28:9d:bb:a7:e7:e7:13:
ca:24:d3:ae:83:ea:0c:b2:0a:29:e1:53:01:2c:bf:d1:32:d7:
58:2a:0f:07:b1:db:2c:e2:48:53:43:77:52:41:f7:27:7e:3f:
ae:8f:63:f7:95:ff:2b:1c:dc:2f:bb:05:da:e5:ca:92:5f:97:
12:b3:54:a4:05:e3:6b:e2:2c:a0:00:cc:31:0b:64:8f:bb:5a:
d8:3a:11:50:8d:6b:39:7b:53:ec:52:61:fd:b3:23:c8:2a:8c:
e4:76:93:95:c0:9f:8c:0d:9f:6d:10:ea:b9:5a:53:1d:7f:05:
3a:31:8f:44:07:2d:eb:eb:35:83:10:8c:4b:4e:f0:8d:68:5f:
91:c8:34:27:e6:38:52:85:c3:75:77:79:db:0f:34:69:b9:c6:
bc:90:69:f1:03:0a:f8:e6:d2:a2:ab:54:3c:ed:e3:89:8c:c4:
bf:04:2f:f8:33:d6:76:b0:da:5a:52:12:da:86:5a:93:f8:f7:
af:6f:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:23:27 2025 by rpki-client