Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: 3IaRzWhM9S+Emb+HZQsIzV6dAYyW5R5SbmTS1Gbnhgc=
Subject key identifier: F8:FF:3A:D0:9C:FF:3B:7B:D4:E7:B9:13:18:88:8F:33:F8:BD:1E:F0
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0196575CE1285195809C69F44CBF2FFA7758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 0312
Signing time: Mon 21 Apr 2025 08:00:26 +0000
Manifest this update: Mon 21 Apr 2025 08:00:26 +0000
Manifest next update: Tue 22 Apr 2025 08:00:26 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: 1uNN2mAChAIe7ohrZpdk/kFUr1qfIvyT85z07j1hA9c=)
2: devZOEgryptZR-bT6KNMpTw3Mfc.roa (hash: u3HbxNlq49urjWUiGXoyu0fcegzQ7OgqdK+RiiJSzRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:e1:28:51:95:80:9c:69:f4:4c:bf:2f:fa:77:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Apr 21 08:00:26 2025 GMT
Not After : Apr 22 08:00:26 2025 GMT
Subject: CN=f8ff3ad09cff3b7bd4e7b91318888f33f8bd1ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:4c:7a:3d:2e:6c:f8:7d:f7:3c:20:46:ba:
44:b4:74:bd:d1:6a:c8:d9:c8:03:e2:05:90:2d:9e:
d0:96:db:8b:89:b8:09:b1:3a:27:33:d3:67:97:8b:
c4:e1:ca:cd:5a:9a:b2:c3:2e:df:84:5d:19:93:0f:
19:58:f0:f2:14:a3:91:13:4d:65:47:3c:11:ea:87:
be:e6:b9:83:97:d8:db:76:38:46:62:b2:25:47:7e:
da:63:62:0f:ef:a3:ec:75:24:c3:3d:8f:cf:f9:99:
44:d4:85:71:9e:68:21:30:56:49:3a:44:a7:a3:2f:
29:f4:50:16:c8:da:b9:ae:2e:ec:02:0a:fe:f8:84:
32:2c:32:17:f4:f8:eb:f9:48:93:37:ec:01:9c:38:
a5:32:25:56:6a:a9:27:f6:99:1b:91:4d:f7:d4:0b:
ff:48:3b:cf:c2:db:a0:4e:66:38:c5:1b:de:6b:1d:
69:16:7b:a1:05:de:f2:11:ce:63:16:44:38:52:bb:
fb:28:f3:d1:34:41:2f:45:12:c8:9f:14:75:d8:cb:
13:69:42:3f:02:ae:e9:b0:70:b9:ce:cc:95:7a:54:
99:1c:bd:f4:91:fe:94:c1:1d:9a:36:df:94:73:cc:
fa:a2:7c:d4:e1:18:56:39:03:1b:30:64:12:96:7e:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:3A:D0:9C:FF:3B:7B:D4:E7:B9:13:18:88:8F:33:F8:BD:1E:F0
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:14:64:2a:12:7e:3c:f8:ec:6c:3f:98:63:16:89:84:dd:
52:7e:49:67:89:d6:ca:13:d4:1c:e2:89:dc:46:ec:09:cc:8e:
e6:12:e3:c3:ff:8b:d5:18:d4:a9:f1:7d:4b:0e:4b:4b:7f:cd:
02:db:68:e2:aa:87:2b:2c:b0:0b:f3:d5:8d:15:11:f3:4d:03:
67:a3:60:03:dc:35:b1:01:c7:8d:fa:5a:0a:bf:17:77:1d:fd:
81:5a:21:93:4f:0d:4b:82:ae:b9:16:1f:16:42:4e:f5:3f:37:
22:2c:5f:a1:01:22:92:b0:6e:60:33:36:ce:c2:f1:40:3d:d5:
29:e8:6e:30:8f:a3:3a:5f:a2:8f:95:7b:99:70:98:3b:69:39:
8e:84:ec:f5:a1:f9:2c:1e:0b:74:b1:3c:a0:46:10:88:e5:e0:
d1:ad:ba:03:2e:42:49:f6:8c:b0:2c:45:c2:32:3e:3d:49:5a:
ad:73:68:2d:20:4e:76:b1:33:b7:3b:51:34:28:07:29:73:79:
ef:54:09:a7:de:20:ac:d7:ec:7b:18:87:93:70:38:93:0a:7d:
b4:5b:7c:62:82:f3:5b:d4:57:c6:c9:cc:1a:31:42:16:03:c7:
3e:7a:87:32:8d:42:32:1f:e5:e4:46:71:af:94:06:88:7a:d2:
c4:af:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:05:44 2025 by rpki-client