Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: qmsrbur5fup539Wcphpnq9CZs7znrxDF4hbsdCUB3po=
Subject key identifier: 78:39:C7:74:CE:94:4C:59:D1:97:82:0E:C6:48:CB:2B:3E:89:81:93
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019687DB5D1A2EAE38C6308DC9AFB549945A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 18:00:22 +0000
Manifest this update: Wed 30 Apr 2025 18:00:22 +0000
Manifest next update: Thu 01 May 2025 18:00:22 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: dM8ReA+ai6y+OlUl3krz2onP12TdGOU9QsDGpRc2rys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:5d:1a:2e:ae:38:c6:30:8d:c9:af:b5:49:94:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Apr 30 18:00:22 2025 GMT
Not After : May 1 18:00:22 2025 GMT
Subject: CN=7839c774ce944c59d197820ec648cb2b3e898193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:d7:e9:62:ed:2e:53:af:05:da:74:9c:f0:
fe:08:c7:b7:1c:38:d0:d0:92:83:06:d6:7b:f6:75:
89:b1:54:5c:f7:0c:7f:90:03:61:f6:20:16:25:55:
f2:42:f9:01:e0:36:57:3c:53:c1:22:cc:08:35:09:
ae:df:49:ba:0a:1e:d8:fa:d9:26:72:a3:8c:fc:ae:
4e:f3:4f:e4:44:85:0f:17:81:39:e6:f0:58:e9:58:
a2:34:be:09:3b:31:58:f3:68:25:b4:b2:f6:13:3d:
a5:6a:f8:dc:1d:ce:9c:87:fc:9c:4a:e8:00:87:07:
ee:d2:96:10:ba:3d:46:ad:3b:75:99:2d:46:32:43:
84:71:49:25:b6:70:97:eb:46:eb:d5:17:67:bf:a4:
00:46:8c:a3:ee:66:90:0a:f3:9e:93:67:84:37:8f:
11:f5:8f:a3:a7:bc:f3:cc:55:bf:af:9a:e1:c1:21:
be:4a:55:6d:09:eb:8b:ba:23:13:d8:0c:63:93:3f:
0d:8e:da:45:2f:93:6c:b2:e6:cd:7a:29:f4:9a:67:
e0:4f:29:4f:ab:dc:db:9f:40:99:56:a7:b8:3f:77:
ab:fb:2b:2d:fa:2d:e6:fd:61:4d:86:e9:4e:81:d3:
8c:99:18:4d:5a:02:0b:d5:9c:9f:9c:9f:4f:8b:8d:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:C7:74:CE:94:4C:59:D1:97:82:0E:C6:48:CB:2B:3E:89:81:93
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:c2:70:c6:90:d5:3b:ff:ba:7c:34:c2:95:0c:96:22:06:
97:b8:c0:79:be:df:05:f8:63:9a:f5:97:08:ac:42:77:ce:5e:
50:2b:44:69:e6:de:94:d0:64:1d:3b:b0:bb:73:94:43:4c:0b:
dc:fb:62:4b:cc:df:e2:6f:ae:95:36:c5:ee:34:6e:61:1e:5c:
a0:e1:40:16:d3:d8:5a:dc:be:db:4a:9c:75:f7:89:0d:82:63:
f3:74:e8:07:27:93:59:d6:2d:d3:c3:a7:54:fa:1e:3b:cc:9b:
1b:0f:94:49:6f:1c:8d:a9:48:f2:31:f4:db:5c:00:af:c4:00:
a0:65:4e:4a:47:d8:51:8f:1e:ec:6c:cf:34:a7:76:55:71:ce:
85:d6:18:f3:0d:90:6c:a9:56:0b:29:47:a0:2f:b8:a4:ec:5a:
78:04:d0:f7:3d:68:be:84:c5:99:c4:07:76:86:73:72:46:5c:
c0:ae:91:fd:27:c7:ec:2b:a3:e0:d5:aa:70:85:22:e0:30:b0:
d1:63:d9:e4:4a:a7:26:ad:b6:16:51:f8:40:a6:d0:22:7c:95:
19:b8:35:eb:75:ae:33:75:95:4a:07:bb:60:22:a3:85:8b:59:
d3:2b:32:3d:a9:d9:3c:92:fb:23:76:37:6d:c7:5a:38:16:80:
b0:e6:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:49 2025 by rpki-client