Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: K817Rz3otxZcjEYrmXP4bohWomVd6yjcHCuNFDdFTO0=
Subject key identifier: 63:07:4A:F7:45:4C:CA:64:27:20:E8:37:0B:74:4C:87:9D:1C:A7:89
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 019659821DE86934402842011DA7F511DCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0B67
Signing time: Mon 21 Apr 2025 18:00:21 +0000
Manifest this update: Mon 21 Apr 2025 18:00:21 +0000
Manifest next update: Tue 22 Apr 2025 18:00:21 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: qe6R83p/dn306iiCVpVR2q5O/4QUpgjkfQLOibtd6ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:1d:e8:69:34:40:28:42:01:1d:a7:f5:11:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Apr 21 18:00:21 2025 GMT
Not After : Apr 22 18:00:21 2025 GMT
Subject: CN=63074af7454cca642720e8370b744c879d1ca789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:ca:11:30:74:2d:6d:7b:66:6d:49:91:75:
35:cf:07:a5:ee:32:01:9f:b1:a8:06:de:db:e6:f9:
12:47:8b:18:9b:1e:d7:40:33:16:39:9b:86:13:89:
c4:0c:87:c8:3e:2b:20:79:e1:b7:05:c8:5c:df:0e:
f4:6a:78:97:df:3e:c3:b5:63:93:9e:5b:04:86:48:
a5:be:6b:b0:86:b3:9b:7c:aa:9c:48:9b:7c:46:0b:
62:ed:b9:d2:4f:c2:dc:f4:c3:c8:60:52:45:08:03:
af:c2:55:b9:45:88:48:b4:8e:29:49:e4:32:aa:00:
94:06:4c:de:f7:a4:e3:e6:c0:c5:05:fe:e8:b4:cf:
e1:1c:14:65:26:28:f1:f6:7b:1e:17:bf:b4:62:cf:
9c:0a:46:a8:e9:e6:8e:b8:53:c2:b7:b0:f6:35:73:
25:ac:c5:4c:eb:aa:3d:e4:79:90:23:1a:b6:ac:5d:
00:86:00:7a:7a:41:00:d2:70:af:bf:2a:ff:94:96:
ee:f4:e3:ca:1a:55:73:91:ac:2b:e8:6b:f3:ad:cb:
2d:18:dc:5f:ae:28:66:5b:a6:55:38:09:63:fd:55:
2a:86:60:a2:cf:af:a6:c5:fb:c0:58:9e:ce:58:80:
9c:d5:40:b6:7f:1b:66:7e:93:57:85:78:c7:2f:a2:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:4A:F7:45:4C:CA:64:27:20:E8:37:0B:74:4C:87:9D:1C:A7:89
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:45:ba:20:33:f3:ac:e7:b2:33:29:aa:d0:62:00:61:63:34:
7b:b6:ab:95:15:0c:49:6a:99:3b:96:1f:71:a3:b8:f0:76:00:
99:03:56:ba:52:d5:5f:ff:c2:d8:e0:c1:90:a1:17:9b:84:d9:
53:7d:aa:57:4f:fb:40:f6:c1:71:26:c7:01:b7:3e:57:74:37:
42:52:dd:c4:a4:e7:b3:95:85:ff:07:d0:cf:72:db:ee:c5:b1:
dc:04:d5:b8:d8:7f:50:02:35:94:33:c5:ff:08:6d:6a:33:fd:
34:9e:45:78:81:a4:82:5a:e6:75:be:33:6a:24:45:67:6b:15:
29:87:79:12:9d:d3:5f:0f:3d:8b:d8:2b:78:d1:06:64:e6:23:
e5:80:c5:19:97:ae:7f:61:65:8f:2e:1a:c5:86:b1:c0:67:5b:
64:24:a3:b4:f6:d9:a2:59:d2:dc:52:29:61:0c:cf:e6:53:6a:
ed:85:69:67:0e:90:14:d1:06:73:1c:52:5f:9a:71:be:13:ea:
b3:a9:f2:aa:a5:51:6c:9d:15:0a:9b:a8:9f:09:6c:20:28:ca:
07:de:92:20:29:3a:81:f2:38:1c:f0:d4:56:7f:b8:25:11:c1:
4b:dd:b4:f7:b3:4d:4f:5c:83:c4:d9:2d:88:d6:ab:5e:76:91:
78:49:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:02 2025 by rpki-client