Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
File: _XBhwg1PCXYTrAMTI3pt8rsstdw.mft (raw, json)
Hash identifier: UvtnNWvB4/Wl4RyMTz5prKlUABN1Nvea4Xhy3Ro7uPI=
Subject key identifier: A0:AC:0B:74:3D:5B:F2:6C:07:87:3B:F9:9E:C6:22:EE:E7:05:B1:7D
Authority key identifier: FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
Certificate issuer: /CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Certificate serial: 01965793E25C2D442B3A3C49859807ADD062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
Manifest number: 94
Signing time: Mon 21 Apr 2025 09:00:31 +0000
Manifest this update: Mon 21 Apr 2025 09:00:31 +0000
Manifest next update: Tue 22 Apr 2025 09:00:31 +0000
Files and hashes: 1: _XBhwg1PCXYTrAMTI3pt8rsstdw.crl (hash: NLIYNXOz/bhGwp0z3cVadeFq5SHN924tNLkVaYoTdyk=)
2: oenpcHzg8QPV-rJqJOxh7sUU4JM.roa (hash: pI8sI3HGC0XwZjUjUuA9QCNQ3HFZ2jSXO5rE2e12GoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:e2:5c:2d:44:2b:3a:3c:49:85:98:07:ad:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7061c20d4f097613ac0313237a6df2bb2cb5dc
Validity
Not Before: Apr 21 09:00:31 2025 GMT
Not After : Apr 22 09:00:31 2025 GMT
Subject: CN=a0ac0b743d5bf26c07873bf99ec622eee705b17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:40:b6:d7:02:90:ad:2d:b0:65:4e:c0:ca:
b7:62:5c:f4:2f:67:e7:08:e9:02:02:ab:9a:9f:a9:
4b:45:20:54:2f:48:55:52:79:81:14:ee:04:b2:bf:
40:4f:fb:0b:68:13:a9:a3:9f:a2:f6:9d:01:a5:cf:
2a:71:fe:35:56:f9:cf:3c:c5:f4:22:8a:9a:26:18:
ee:72:4b:62:c9:98:2a:c4:cd:63:9b:d8:a2:7d:69:
28:d1:07:0e:6e:63:65:92:ef:2c:89:00:ab:55:bc:
eb:fa:e5:22:00:db:31:3e:0c:bc:76:dd:48:49:cb:
d7:e9:9c:3a:09:0f:36:f6:41:46:0c:8e:9f:48:33:
94:7d:74:55:23:b4:85:dd:de:2e:e6:d9:e2:aa:5f:
0f:d5:5f:49:44:50:c9:19:88:dd:16:64:27:e5:06:
f1:b3:ac:7a:a7:9c:c1:11:58:7e:05:7b:2d:00:49:
f1:42:d0:8a:b2:6f:8d:62:7d:b3:e2:2c:8e:5e:53:
92:5e:b3:53:24:b1:3f:cf:87:0d:78:2a:ee:91:3d:
a8:17:ac:58:32:f2:10:30:10:42:f1:3b:0c:2d:0a:
a1:66:fd:f9:92:25:c9:a5:7a:d2:11:05:6b:53:d2:
ce:a6:c5:b3:a6:b8:bf:80:b3:a7:74:75:a6:55:90:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AC:0B:74:3D:5B:F2:6C:07:87:3B:F9:9E:C6:22:EE:E7:05:B1:7D
X509v3 Authority Key Identifier:
keyid:FD:70:61:C2:0D:4F:09:76:13:AC:03:13:23:7A:6D:F2:BB:2C:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XBhwg1PCXYTrAMTI3pt8rsstdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/32e3d3-9a8d-4653-94fa-a2019988330f/1/_XBhwg1PCXYTrAMTI3pt8rsstdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:88:76:b2:91:fc:ad:27:37:bb:71:8e:c2:34:37:a5:54:97:
57:fa:4f:ee:e9:15:a8:e7:de:88:44:56:1f:e1:cf:ef:7e:aa:
fa:41:27:45:e1:7d:87:a1:cd:84:40:af:ca:87:20:b2:86:14:
e9:16:ee:f7:45:cd:08:14:80:ae:78:0d:17:56:ff:30:a4:77:
0f:66:ed:a5:8e:46:95:38:54:e1:cb:1e:26:5b:ff:47:86:f5:
52:a1:13:23:e6:8a:f9:01:87:41:13:2b:6a:20:b3:2a:a9:7a:
0b:3a:71:dc:63:7d:3f:60:82:5e:c3:cc:88:c0:c0:8a:d1:48:
4e:20:e3:e4:06:ce:ca:c7:90:11:f2:ef:6d:a6:3e:5c:20:2c:
d7:fb:74:3c:f1:0a:5c:41:47:64:c3:b1:57:58:b3:b3:ac:5c:
a3:98:46:a0:5e:a6:86:1b:59:c1:3e:cb:76:50:06:fa:48:52:
c0:de:be:18:82:97:f5:49:bf:3b:8e:ef:e4:bc:fb:69:f2:0b:
47:96:47:29:f6:7e:36:07:98:17:b7:b2:ff:f8:5c:99:b1:47:
99:59:eb:53:a5:10:36:8f:7c:1c:31:e6:32:01:fa:09:d5:a3:
34:aa:eb:64:4d:0e:ab:76:db:51:ee:e4:31:e2:80:6b:f1:c5:
f6:27:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:08 2025 by rpki-client