Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
File: xJkOwgER9C-2LzmoHHOSqSGVW_I.mft (raw, json)
Hash identifier: UD/SYh5AqM2B4Q5nKG/y5G2Rz/0c+HUE3Wnl1BydQPA=
Subject key identifier: 89:45:CD:10:DD:BC:42:7A:FE:67:2A:A5:D5:3C:B6:D7:48:23:76:CA
Authority key identifier: C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
Certificate issuer: /CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Certificate serial: 019655A59C50609A09227CDA1F8B109DAE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
Manifest number: 015F
Signing time: Mon 21 Apr 2025 00:00:38 +0000
Manifest this update: Mon 21 Apr 2025 00:00:38 +0000
Manifest next update: Tue 22 Apr 2025 00:00:38 +0000
Files and hashes: 1: S6SgkEKXXupg9NGyg85ew2MKuNo.roa (hash: Ccy6wkPiSmvGfzLUcrIC/arlCjWDtB/tLTVQ150opBk=)
2: xJkOwgER9C-2LzmoHHOSqSGVW_I.crl (hash: cNbU09rN/NvWLHhxMYLJJ4jt2mINzMrIVQzySgJrPks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:9c:50:60:9a:09:22:7c:da:1f:8b:10:9d:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4990ec20111f42fb62f39a81c7392a921955bf2
Validity
Not Before: Apr 21 00:00:38 2025 GMT
Not After : Apr 22 00:00:38 2025 GMT
Subject: CN=8945cd10ddbc427afe672aa5d53cb6d7482376ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:b9:03:43:50:d0:71:f6:50:1b:c6:23:58:
46:77:c3:e1:52:43:00:78:ad:2e:db:bc:45:54:10:
df:d6:7c:80:24:c4:51:03:80:16:61:c2:36:fe:76:
9b:04:7a:53:dd:b4:8f:69:bb:67:71:38:7d:35:49:
10:91:76:f1:4b:2c:9a:51:46:33:0c:e9:9b:bb:8c:
53:65:1f:9f:bc:8d:1c:67:db:b2:28:38:79:13:f1:
73:8e:24:50:3c:cf:11:08:fb:17:62:c9:b5:57:5a:
35:36:b2:0f:8c:42:35:09:65:a9:86:75:a3:0d:81:
e7:2b:e9:e8:b3:57:88:29:3e:b1:81:4a:26:e8:5d:
b2:64:39:3a:8b:21:6c:3a:ee:2b:1c:8a:f3:c6:75:
d1:32:af:3e:50:89:10:b6:e1:1e:7c:2d:d4:3c:3c:
16:3f:f4:5a:83:91:15:11:73:44:3e:1f:27:1a:a1:
c6:49:48:5d:55:40:98:f7:cb:65:fa:a4:af:fa:5a:
90:88:c8:27:b8:48:68:b7:54:00:35:82:18:b6:03:
9c:00:da:78:0e:c2:b0:60:15:d1:4b:04:b8:eb:1e:
f9:19:5a:35:e2:de:0f:0c:67:16:3e:e4:70:88:4c:
21:bb:2e:dd:ee:ce:e5:e6:2f:fa:e7:8f:aa:9e:7c:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:CD:10:DD:BC:42:7A:FE:67:2A:A5:D5:3C:B6:D7:48:23:76:CA
X509v3 Authority Key Identifier:
keyid:C4:99:0E:C2:01:11:F4:2F:B6:2F:39:A8:1C:73:92:A9:21:95:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJkOwgER9C-2LzmoHHOSqSGVW_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9c7ce4-2cd4-4854-8840-b0fe9221efb7/1/xJkOwgER9C-2LzmoHHOSqSGVW_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:db:9d:ca:03:f3:f4:09:d4:28:c4:bf:34:22:65:33:10:
ef:ac:a8:5f:59:d1:f3:b7:ac:12:ec:fc:d4:4c:7d:62:fb:0a:
58:72:a8:73:2c:2e:d8:36:19:77:2c:23:2d:b1:ee:95:b6:c2:
a7:12:be:ea:95:1d:28:c6:19:c3:37:44:b5:a1:16:88:13:75:
7e:8b:51:4b:68:7a:49:d3:c5:cd:44:d5:d2:da:20:5d:77:03:
ca:a1:40:bf:86:44:78:44:d9:10:ee:b3:09:dd:4a:50:45:6b:
97:bd:51:0b:d0:74:ad:54:2a:a3:93:c9:5b:b6:46:fe:69:2e:
b0:d6:3d:42:f9:9e:5d:83:a4:dd:c7:a6:27:db:9c:7c:da:77:
42:4e:e3:63:e2:ee:bd:57:66:71:6b:81:43:09:40:cd:96:02:
0c:03:68:77:22:05:67:4c:2c:a0:45:d4:7a:b6:9c:08:69:2e:
a4:bc:5b:72:aa:db:36:aa:ca:30:65:9e:73:ff:f4:8b:2b:2b:
fa:2d:44:8f:0e:44:f4:85:75:3d:71:57:2b:b1:11:0f:7c:4e:
e9:2f:52:fe:44:ed:89:de:b8:a9:33:ec:85:3b:8d:c7:c9:63:
72:cf:df:a7:80:68:6b:40:d0:f0:40:d0:b2:22:4c:ed:17:f3:
74:bc:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:17 2025 by rpki-client