Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: 9jcmTq4H4grBVNCdiJYBhwEEwey0OiG5EXinpagIH8c=
Subject key identifier: 1F:D7:29:C9:C7:A3:F4:85:A3:2B:2B:D9:A9:56:ED:09:B1:86:6A:AC
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 019655A5B2E4B45C88053FF467AE4E222DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 1081
Signing time: Mon 21 Apr 2025 00:00:44 +0000
Manifest this update: Mon 21 Apr 2025 00:00:44 +0000
Manifest next update: Tue 22 Apr 2025 00:00:44 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: adIuoB356sTHbPH1i+jM5CQqgbl/Ibqz88+waEwJ8fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:b2:e4:b4:5c:88:05:3f:f4:67:ae:4e:22:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Apr 21 00:00:44 2025 GMT
Not After : Apr 22 00:00:44 2025 GMT
Subject: CN=1fd729c9c7a3f485a32b2bd9a956ed09b1866aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:69:76:cb:90:37:fe:c9:6c:25:66:e3:cd:
72:a0:0e:5c:94:e9:e5:ed:24:81:a8:92:fa:8c:44:
6b:c1:ad:e3:71:bd:41:f1:c3:ba:8c:34:ce:7d:50:
e7:0e:a4:c7:ea:db:fd:9c:7b:63:2f:d8:1b:ed:f6:
c4:76:f4:0c:55:d9:ae:c7:11:b1:13:89:70:99:23:
6c:d7:58:2f:2b:74:82:19:d7:66:c4:91:a0:6a:28:
13:df:d5:d5:50:83:89:86:3d:ad:61:23:8d:f7:6a:
1c:36:e1:aa:75:33:8e:ac:55:dd:92:56:28:e1:78:
f3:15:01:2e:0f:48:41:5e:93:70:c8:af:02:dd:bf:
d7:b4:60:9c:89:ad:28:05:c3:8d:a7:45:85:e8:9a:
ac:c4:52:b7:74:c0:7f:53:bd:8b:83:8a:24:1a:cf:
25:b5:9c:d1:7b:e1:a9:f7:26:2f:91:ce:a1:2c:43:
d7:90:1e:b5:04:6b:e9:bd:cc:ed:d1:36:c2:c2:1e:
cb:f4:99:92:c7:78:83:41:c1:98:86:3a:3b:47:ef:
aa:f8:c3:7e:f0:0e:70:be:27:cf:99:77:22:aa:f2:
81:32:18:d2:39:71:9d:6d:0b:c2:ea:4d:c6:b6:6c:
74:18:5d:63:7a:39:47:fc:d1:f6:d1:33:d8:99:1c:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:29:C9:C7:A3:F4:85:A3:2B:2B:D9:A9:56:ED:09:B1:86:6A:AC
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b6:71:ba:17:4a:04:93:40:e7:39:21:95:ac:45:56:1c:76:
24:db:9f:49:9d:f4:95:df:97:67:bc:5a:cc:4f:64:ac:38:bc:
09:76:8c:1f:31:93:8b:bc:05:f7:5c:0b:20:47:23:40:5f:9e:
10:16:e6:9e:36:00:7d:1e:32:00:69:61:d6:7f:1b:52:ea:f9:
7b:ff:d9:65:21:22:bb:51:22:a4:6d:9e:cc:e4:1d:19:bb:aa:
68:c5:ac:f4:89:82:0f:f2:d4:f9:01:5b:9c:51:df:70:d5:b1:
89:61:c6:59:9a:48:1e:90:3b:0b:58:b4:ee:c4:83:65:26:d8:
8e:cd:02:a5:70:f2:e9:41:73:8f:16:14:39:43:6f:5f:ad:56:
59:47:a9:f9:c3:1a:72:1f:64:15:37:54:3e:60:79:13:11:78:
4d:56:a7:c1:e6:60:9a:e6:25:20:26:20:17:37:2b:7d:4d:3e:
95:48:c1:94:d6:95:29:41:88:2c:98:11:a5:67:3a:cf:c6:b2:
9e:ad:d2:84:a9:ce:9a:55:da:da:52:1f:cd:27:7a:a8:6c:89:
1f:d7:16:7a:5f:65:7b:90:18:f6:93:71:b8:65:86:82:3b:53:
49:a6:99:29:44:bf:67:d3:93:3d:b8:0c:78:46:e9:10:43:40:
6c:b8:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:18 2025 by rpki-client