Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: 76VtRgHao6Dg3aX1bOYwJfi8YnsnO3HxGFf3gtMPAQ0=
Subject key identifier: 7B:2B:5E:DD:DB:B8:05:74:A6:C4:DE:EC:85:0B:06:34:1D:FA:38:6B
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 01968390C552B49A4F229C51553ACE7304E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 22:00:25 +0000
Manifest this update: Tue 29 Apr 2025 22:00:25 +0000
Manifest next update: Wed 30 Apr 2025 22:00:25 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: qL6wOtiV0hczIzOkSQNFYWZehn3ORJHHuSpRJ51ZJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:c5:52:b4:9a:4f:22:9c:51:55:3a:ce:73:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Apr 29 22:00:25 2025 GMT
Not After : Apr 30 22:00:25 2025 GMT
Subject: CN=7b2b5edddbb80574a6c4deec850b06341dfa386b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:e6:73:76:9a:3e:2f:b1:eb:de:00:ea:cf:
84:51:53:e7:bc:ff:a1:15:f4:91:82:a5:39:15:89:
b0:98:67:2c:f5:11:f4:9e:36:10:87:32:70:d6:e0:
e1:d4:04:bb:c5:57:1b:86:63:41:8a:63:34:73:68:
67:c6:c1:1d:80:17:ae:fa:9f:29:68:fa:96:80:e6:
af:d8:ed:45:36:2c:f7:69:a9:d4:cd:eb:aa:4b:99:
7a:ee:65:7d:c3:2c:d4:5c:72:00:4a:09:8d:62:eb:
64:28:7f:00:5c:bf:68:2f:78:d5:f3:42:62:75:97:
c8:ff:e2:77:0b:24:bc:84:2e:16:9f:c2:9e:b7:5c:
7a:db:ec:57:f8:ad:ca:9b:2f:21:11:2e:b4:79:d0:
51:ff:87:33:57:9c:13:5d:96:72:51:b4:f7:d3:79:
79:85:f7:13:90:b6:46:be:78:ed:a5:24:d2:22:6b:
96:1d:30:b8:be:4a:48:ae:59:ef:8c:06:f0:f0:d7:
79:55:0f:6c:69:2b:93:f6:6c:45:4b:1a:8e:01:fe:
03:13:07:03:5c:22:0b:fa:d0:b4:73:52:6b:ab:ab:
d4:cb:26:9b:7b:a7:54:21:e3:37:ca:0f:90:c5:2b:
e8:c5:8d:3a:7c:0c:54:5a:df:86:70:9a:9e:d2:79:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:5E:DD:DB:B8:05:74:A6:C4:DE:EC:85:0B:06:34:1D:FA:38:6B
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:14:ef:ab:33:c8:74:34:0d:7c:7d:f4:c8:57:a7:11:65:87:
5d:7e:45:dd:08:5e:9e:31:10:27:66:d4:f8:b7:0c:7d:f4:4c:
08:f7:bd:de:8b:98:ac:f8:0e:84:34:a8:90:a3:5d:5a:fa:16:
b9:54:9e:f3:b8:e6:a3:5d:b2:38:7e:4e:14:38:e6:c1:30:70:
fa:95:4f:aa:c6:0d:60:16:24:e5:0d:9f:2c:df:53:02:ae:ea:
f1:56:d0:7e:26:fb:3f:cb:d1:33:7c:6f:a8:10:c3:5a:dd:86:
90:cc:61:ce:bc:54:4b:75:7d:c9:fb:b0:59:4b:41:89:90:20:
09:f4:a7:26:78:6a:d9:33:b7:96:00:b2:88:b9:16:c3:ec:f5:
89:4d:e8:0a:ef:d0:75:35:99:b0:0e:e8:45:ae:c4:37:85:b8:
65:f4:5c:3a:18:bc:91:94:c9:48:43:2b:ba:a8:75:a1:20:4b:
f3:10:cf:7e:93:73:89:7d:03:2c:b9:bd:36:70:13:63:79:9b:
fb:db:cc:5c:b6:74:c7:e9:83:85:61:3d:30:83:43:61:49:6a:
8b:dd:7f:23:fd:a8:b0:62:f3:ce:22:bd:1c:44:1c:1d:05:17:
01:00:4a:eb:b5:90:d4:4b:11:de:80:28:9c:36:07:b5:bd:c5:
24:c7:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:36 2025 by rpki-client