Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: wlJZUIATWXPbx58Ydj6XpQS0uWhyw0MRFD+pOtYvyvw=
Subject key identifier: B5:CB:82:76:4E:55:46:F1:2F:A5:39:4B:17:6F:C6:F4:5C:01:1A:21
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 0196759E8A57D52039038E45E55E2C19BC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 05:00:46 +0000
Manifest this update: Sun 27 Apr 2025 05:00:46 +0000
Manifest next update: Mon 28 Apr 2025 05:00:46 +0000
Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: ODeOL0Vy60B3Op60mFtoUiitTMmvcZOMPPPGyDcRWNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8a:57:d5:20:39:03:8e:45:e5:5e:2c:19:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Apr 27 05:00:46 2025 GMT
Not After : Apr 28 05:00:46 2025 GMT
Subject: CN=b5cb82764e5546f12fa5394b176fc6f45c011a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:5b:8c:d3:ba:c3:2a:29:44:b6:38:af:88:
58:cc:c6:16:41:51:43:5d:52:41:4f:78:0d:77:40:
97:ce:00:64:a4:46:7f:23:f3:52:f0:55:4a:16:5f:
75:a9:a3:c7:d4:89:16:72:1e:2f:94:b3:7c:ff:29:
d6:6e:de:7c:a2:df:02:ac:b8:11:60:9a:70:ba:35:
d1:ac:e5:8b:64:70:ac:ae:70:0f:8b:f2:df:ee:24:
6f:11:7f:25:f4:5c:4a:65:d9:bf:13:35:ec:06:2c:
ce:d1:46:4c:19:15:e9:91:54:3f:42:1a:94:b0:3e:
c2:84:59:36:7f:db:05:3b:3b:69:13:f7:4b:d2:61:
9b:ea:07:58:0c:cf:d2:dd:2c:50:f0:94:13:ee:2d:
a1:65:0c:ee:36:31:4f:fa:58:14:59:bb:a2:c9:a2:
f8:a0:f7:4b:32:b8:1f:4c:1d:ed:6c:53:f4:7e:6f:
ef:4f:6f:3a:7c:43:89:11:0a:34:1f:b5:c7:3c:a3:
7b:67:db:b7:da:bc:b5:15:eb:cd:af:5c:35:af:a6:
d1:b5:8e:0e:cd:51:d5:79:e4:e5:bf:a5:10:f0:53:
53:5b:e0:f3:27:aa:96:22:65:19:a4:43:e8:9b:bf:
3a:13:4a:8e:a7:cc:03:11:b4:fd:55:56:60:43:e0:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:82:76:4E:55:46:F1:2F:A5:39:4B:17:6F:C6:F4:5C:01:1A:21
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bd:5e:bd:64:10:5d:58:43:bb:7e:3e:ff:32:f9:24:1a:9e:
e5:02:9f:b2:c4:89:4c:43:cc:9f:00:a3:1b:7e:c6:5d:e2:53:
39:ac:bd:84:8c:58:77:b9:ae:80:83:a4:76:4a:32:10:3f:34:
a8:27:56:87:2c:4a:be:a6:b9:54:27:cc:75:46:33:fb:1f:8b:
00:f3:0c:b8:e4:d1:64:a5:aa:68:84:ed:2d:98:07:53:44:44:
fc:2c:8a:93:de:92:83:05:28:60:53:fd:26:7f:2d:e7:71:f0:
ae:c5:0f:10:40:dd:61:6b:d2:04:1c:60:9c:ff:41:07:07:02:
3e:f7:97:1e:04:ef:e8:19:75:02:39:4d:3f:2d:38:67:ed:21:
ec:72:ec:33:03:aa:74:28:a0:74:76:0d:09:e5:58:a8:af:45:
a6:3e:6a:f1:26:4a:03:b8:f6:a5:f2:8f:93:dd:35:7b:91:75:
b5:d8:3b:2e:c7:16:cc:a1:87:6e:74:76:e7:0f:c0:34:21:b8:
cb:87:a5:f1:6c:0f:47:f0:28:04:e7:d3:0e:ba:76:c3:11:27:
93:e3:5c:f4:03:0b:83:55:b5:d7:0f:0d:0a:91:78:94:a0:26:
e6:43:59:7b:2d:db:e1:09:88:d9:ca:31:b9:94:ac:66:10:79:
3d:6b:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:31 2025 by rpki-client