Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: MWXV6r+QclHiPIEjr8b/xi8xk22ZbJgBshctYx311qA=
Subject key identifier: BB:91:F1:94:DD:AE:3F:E0:08:D4:1A:14:3A:AB:E2:D6:C7:DF:20:4F
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 019653EE8A95AB9E514718A5971C99EB7B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 16:01:03 +0000
Manifest this update: Sun 20 Apr 2025 16:01:03 +0000
Manifest next update: Mon 21 Apr 2025 16:01:03 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: 7XlZCdBuFFrFTZt3zhV7knsv/IzqDQEneluK18jeNLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8a:95:ab:9e:51:47:18:a5:97:1c:99:eb:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Apr 20 16:01:03 2025 GMT
Not After : Apr 21 16:01:03 2025 GMT
Subject: CN=bb91f194ddae3fe008d41a143aabe2d6c7df204f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:a7:cf:86:1d:b7:58:d9:41:8a:c3:a4:a6:
24:42:c3:95:32:cb:48:d1:db:09:93:8f:b9:d5:0d:
e7:04:01:47:3b:a9:eb:96:49:dc:a3:ae:07:1e:e8:
48:04:08:03:e2:21:7a:84:ad:fc:d4:43:0f:cb:a5:
00:29:d2:fa:92:78:9f:cc:7e:ea:06:19:ac:b7:29:
2d:6d:db:aa:3f:b1:1b:95:2b:5c:0e:07:85:f4:b4:
bc:d3:81:d2:85:b4:54:24:39:02:a1:d8:7b:5f:85:
d3:55:1a:52:1a:b3:1f:73:10:6e:b8:38:e4:5b:f6:
80:86:e6:ca:0d:27:88:54:a9:11:be:67:1b:7b:4b:
0d:3b:d9:8c:e3:80:b6:a2:3e:d1:f6:7f:3b:91:e3:
b5:56:4b:61:46:21:00:eb:b8:8a:11:fe:f6:05:f0:
4f:ae:f9:d5:09:0a:4b:9c:89:f2:cc:08:65:a1:65:
30:c8:80:87:c9:34:96:7e:ea:81:49:4e:74:89:b7:
b7:f8:66:b2:aa:74:1a:be:71:20:90:4d:0e:7c:15:
e4:a0:d1:5e:73:7a:39:f4:a4:3e:2d:f3:0b:81:ee:
e6:e9:d4:de:fb:a1:d9:32:06:ff:57:1b:34:b8:59:
eb:f2:79:15:70:eb:2d:b0:9f:92:3a:66:1c:d5:71:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:F1:94:DD:AE:3F:E0:08:D4:1A:14:3A:AB:E2:D6:C7:DF:20:4F
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:58:ae:4d:c8:16:16:ad:0f:3a:20:26:50:a2:18:79:84:d2:
68:48:ba:d6:03:2e:18:13:ba:88:82:ee:da:67:b1:0c:f4:e9:
34:91:0b:d1:c1:64:a8:f7:17:3a:eb:9b:8a:9c:2d:69:2f:a2:
eb:77:39:db:ef:a9:80:f8:24:21:a1:55:a2:51:8d:98:4f:3c:
fc:e9:6c:1b:bb:ef:62:9b:fd:d4:47:17:6b:59:82:ca:ef:53:
df:dd:c2:43:45:15:69:69:c0:46:87:4e:af:cc:ee:d3:99:b7:
02:bd:65:31:f7:c6:79:49:32:81:29:f5:28:b3:f9:0f:ec:ee:
b4:15:4c:ff:ea:cd:a8:a3:de:97:25:46:da:74:13:34:58:0f:
46:33:c3:ca:d8:0b:33:64:aa:1b:92:16:51:dd:82:29:9d:b3:
94:8f:4a:44:5a:0c:74:8e:9d:c9:5f:76:a4:ec:89:47:ae:b9:
61:73:21:29:74:f3:76:93:71:ca:30:05:e4:e5:40:e7:70:81:
2c:f6:0c:08:47:0f:41:5e:23:27:3a:f2:e5:ae:fb:49:47:59:
8e:a3:70:64:96:f2:e9:ba:8f:1c:7c:f6:30:a2:90:cb:25:16:
01:cc:6e:77:81:68:a0:84:8f:e9:74:b7:c1:2d:fd:a3:7c:ca:
7a:1d:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:10 2025 by rpki-client