Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: cDfvV1/OT3t40/JsPFFGdcA4g0xp4P7tKfv1gx5O9W4=
Subject key identifier: 91:7F:6D:28:27:20:5C:D4:B0:3B:87:09:44:C7:D6:52:B9:72:A7:A7
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 01963C5396A628ACB7C446B0C253EBDF9A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 02:00:32 +0000
Manifest this update: Wed 16 Apr 2025 02:00:32 +0000
Manifest next update: Thu 17 Apr 2025 02:00:32 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: R66IP8BNVclmCaKJpYhgp5ZYE/9VG55dEH5lMVUkS9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:96:a6:28:ac:b7:c4:46:b0:c2:53:eb:df:9a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Apr 16 02:00:32 2025 GMT
Not After : Apr 17 02:00:32 2025 GMT
Subject: CN=917f6d2827205cd4b03b870944c7d652b972a7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:aa:4d:e1:c3:94:8d:4f:76:b0:5b:30:f2:
eb:aa:9a:22:84:95:0f:40:3d:1e:00:9a:e6:3d:17:
3d:c2:0a:d5:6e:99:16:39:ee:05:f8:2b:a3:e8:89:
eb:ae:b2:6a:7b:ba:5b:02:a2:46:2c:78:c2:d4:82:
99:df:fb:32:93:83:84:99:d7:e0:e4:30:ac:8a:47:
5b:c2:33:fe:78:cc:ef:45:26:13:70:da:bd:8b:15:
08:cb:24:83:54:85:b2:74:d2:f9:41:29:8c:88:fd:
df:e3:2a:d7:a7:77:fb:96:eb:20:93:f7:8d:6a:4b:
4a:1f:86:19:59:7f:e8:0f:4d:cd:9d:0e:69:e2:28:
5b:6d:fe:3e:bd:a8:54:84:35:00:c1:b8:e7:a1:53:
7f:b5:d4:b9:0f:52:c4:16:d2:f4:00:32:49:1a:0b:
48:85:24:20:a9:0a:f3:ec:f7:dd:52:87:6e:85:a9:
10:6c:9a:b7:35:f2:b2:19:16:f0:2f:b6:97:d7:d8:
ca:0a:e4:aa:fc:0d:a3:d4:2c:dd:f2:29:6f:0b:8d:
c8:f0:1f:19:12:ff:e7:a0:81:bb:c7:cc:47:70:61:
7b:1b:ef:04:1b:4b:4b:d5:3f:c4:e0:d6:50:7e:87:
14:96:4b:93:fd:c7:37:67:75:ac:3a:14:6f:05:2e:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:6D:28:27:20:5C:D4:B0:3B:87:09:44:C7:D6:52:B9:72:A7:A7
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:01:15:1f:91:81:e7:52:5e:be:c1:1c:3a:64:17:a9:6c:c9:
f7:72:fb:e4:65:df:e6:61:e9:33:dd:90:24:f4:99:99:f1:85:
b8:f4:9c:06:84:9d:1c:bc:5b:da:b6:3c:b5:59:a3:ea:05:d5:
39:0a:eb:02:f4:25:b8:4b:3d:be:58:f5:7a:25:b2:3b:eb:9d:
cb:c6:93:fc:9c:5d:e6:80:98:9c:88:ef:fa:70:e6:20:a8:ae:
13:86:dc:d1:92:82:d4:ad:00:63:e1:54:4a:a9:00:66:25:a2:
5d:8f:68:54:b3:0c:16:3d:10:c2:d9:89:7c:48:0c:9e:31:29:
7c:6e:6d:6c:79:b3:a6:d3:ec:13:5e:6b:49:15:96:0d:85:1f:
4e:b2:04:da:88:d8:dd:ec:5e:db:4a:5a:08:cb:0c:47:8f:2e:
d2:2e:84:6a:8d:04:c9:f2:05:fb:54:97:fc:a3:0c:de:97:1c:
4b:d3:33:00:54:09:58:b2:a0:ad:ef:3c:d4:44:dd:d7:b6:67:
df:a6:fa:a7:4c:e8:ae:7a:83:be:f3:fb:ce:dc:54:5a:89:e6:
5f:4e:7d:6b:38:8c:95:0c:05:04:a1:15:f3:03:bf:2b:f3:13:
a8:52:f2:70:1e:81:95:7d:c7:6a:92:69:bc:8f:47:5f:17:69:
45:30:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:45 2025 by rpki-client