Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: T+TKdTxNovTfpGMjybqJvHwVE18XLbshYYTXuE4tdDI=
Subject key identifier: 4C:EE:74:58:90:08:77:30:D2:19:25:7B:98:B6:A3:19:4B:0C:EB:87
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 01965CF173FCB5B2F6FA39AAB21D5372ED28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 10:00:49 +0000
Manifest this update: Tue 22 Apr 2025 10:00:49 +0000
Manifest next update: Wed 23 Apr 2025 10:00:49 +0000
Files and hashes: 1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: AmP5OCXhdlJmd8/LT2Rk9OVECOwBszZXS8qsiI8wP+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:73:fc:b5:b2:f6:fa:39:aa:b2:1d:53:72:ed:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Apr 22 10:00:49 2025 GMT
Not After : Apr 23 10:00:49 2025 GMT
Subject: CN=4cee745890087730d219257b98b6a3194b0ceb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:fa:76:64:db:6b:8f:81:3b:7a:64:74:90:
cb:97:4c:9d:6e:d6:20:76:08:ca:7d:d9:4f:48:84:
3c:03:e7:90:e2:9c:a0:46:9f:b8:21:86:e4:7a:ae:
5b:a5:df:3f:6d:19:17:90:49:ca:e8:89:e5:8a:2d:
2c:37:5b:b8:c6:bd:4d:1b:94:61:11:8b:94:a5:42:
20:3c:29:67:2a:17:80:c8:99:8b:d0:e4:9a:b6:3e:
a7:4f:7f:b2:9c:ef:52:49:c0:7e:58:43:21:a4:1e:
4a:62:0b:7c:63:b8:35:01:1d:2d:12:5d:86:93:78:
f7:03:3e:54:eb:17:59:d3:90:de:f9:b1:9a:85:ac:
17:f7:9d:3e:66:63:0f:d9:61:ef:95:b1:d4:b6:ae:
ed:6f:f5:65:5b:e0:d7:da:2e:8a:cc:ca:db:e1:7a:
07:54:34:50:b0:2d:31:2e:e0:04:43:50:58:ce:41:
bf:ae:90:ae:a8:45:4e:34:14:de:64:52:d9:4b:cf:
cd:e0:67:36:c1:ce:73:7b:1a:ea:65:08:1f:71:ad:
f3:85:7a:69:14:9d:bf:00:27:c9:02:02:f0:59:db:
94:48:3c:b7:8c:21:6f:0b:ee:d1:55:38:8c:d7:00:
b4:1a:ca:2a:5e:4d:31:b8:be:3e:53:e8:9b:b7:eb:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:74:58:90:08:77:30:D2:19:25:7B:98:B6:A3:19:4B:0C:EB:87
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:2a:39:c0:95:3b:e6:1c:ad:77:8b:61:53:de:65:75:82:
02:c6:37:33:36:a4:83:95:67:a6:2c:42:3c:c3:89:a5:68:a4:
75:07:f2:cb:fe:d6:42:04:6b:5e:26:91:13:7f:b7:2c:52:6c:
2a:e4:5a:49:67:ac:37:d1:d4:3c:b3:59:5c:e2:c5:47:43:7b:
55:fb:b0:ef:68:58:81:85:ec:1c:77:61:14:be:d6:0a:3a:56:
93:05:c6:9b:4f:9d:63:5d:aa:47:43:f9:24:cd:0c:0e:4d:b8:
af:d9:88:1c:f8:51:11:33:ea:84:cb:7e:39:3f:de:93:cd:88:
ba:83:80:10:d4:1d:43:b1:3f:31:28:3f:d4:6d:c1:06:0a:cc:
e2:4c:19:ac:07:d7:a1:ad:1b:1f:6d:7e:a8:00:1a:30:07:55:
58:6a:f3:10:d9:8f:81:23:c7:53:d4:fe:f5:ed:56:4d:05:e0:
42:0b:60:c5:ab:9a:fa:60:6b:0d:c0:6d:02:c8:e0:98:40:56:
20:1a:89:e6:47:d4:bb:96:0f:bf:39:81:e4:2a:3e:d9:c0:16:
0c:8f:ee:e5:bb:5e:80:54:10:7a:16:34:66:45:09:d5:a1:f1:
93:b6:c9:8c:fa:7d:e4:23:5f:7d:f7:c6:49:56:43:8c:2d:b8:
6e:29:9e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:56:48 2025 by rpki-client