Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: ZqpqXrsQs+ftj7sV6uiIjJb3B6KRO6xB8ERPJW77g1w=
Subject key identifier: C8:41:B0:8A:14:8F:28:92:1E:96:E7:DF:93:36:E3:FB:2B:3F:24:33
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01965191E335B3937AD30E2E79785B815956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1503
Signing time: Sun 20 Apr 2025 05:00:37 +0000
Manifest this update: Sun 20 Apr 2025 05:00:37 +0000
Manifest next update: Mon 21 Apr 2025 05:00:37 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: 4wCI/fN6Nq6CiCuVBpvoEjtW0Q8JLT3J+Evm51wqFR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:e3:35:b3:93:7a:d3:0e:2e:79:78:5b:81:59:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Apr 20 05:00:37 2025 GMT
Not After : Apr 21 05:00:37 2025 GMT
Subject: CN=c841b08a148f28921e96e7df9336e3fb2b3f2433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:8f:24:b7:4c:aa:8b:80:11:b1:e2:7e:10:
13:13:fb:a7:c6:31:ac:82:1e:d2:a2:be:39:3d:8f:
57:31:ac:d1:cb:af:b2:7d:79:16:70:3c:27:7f:90:
42:ab:5e:9b:0d:de:46:8b:45:9c:e2:8f:60:d2:7d:
4f:5f:1d:52:20:89:01:b4:2d:01:3b:90:9c:0a:28:
77:e9:02:4c:76:06:98:dc:d2:86:65:10:c7:6d:77:
4a:44:71:5b:ae:f6:b4:b7:23:00:dc:bc:e2:26:71:
a3:b8:65:3e:30:96:f3:c1:0f:6a:8d:cb:a6:5e:24:
3d:a9:4f:42:70:9e:8a:de:1a:17:f8:30:2b:0d:fd:
48:93:f2:1a:6c:cf:fe:8e:44:0d:b0:35:14:0d:42:
4a:00:64:29:4d:e1:62:97:38:43:5d:fe:59:40:b5:
3c:10:e9:3e:91:97:ad:39:2f:49:f2:d6:9c:6a:82:
42:30:ac:89:ba:66:5b:26:eb:90:7c:2e:37:8c:38:
34:03:61:67:16:43:11:33:6f:84:58:13:db:85:a4:
5e:89:f9:e4:86:f9:bf:fd:21:a9:63:f0:69:3c:6e:
94:93:4a:35:b1:7e:6e:4e:ee:7c:93:79:b0:74:98:
63:90:c9:fd:9e:ce:34:53:57:28:bb:e4:0c:86:3e:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:B0:8A:14:8F:28:92:1E:96:E7:DF:93:36:E3:FB:2B:3F:24:33
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:f7:e5:22:5b:f0:c9:04:ca:b2:6f:38:87:f5:d0:b8:b6:
32:f6:78:31:81:22:ab:0e:06:65:ec:88:df:c2:15:67:97:66:
a5:24:86:e1:14:19:01:ca:e3:3d:2d:f9:e8:6f:1c:0b:a8:39:
82:81:98:42:f4:cc:a0:83:6e:db:35:4a:b3:fe:3c:06:71:16:
e7:ec:cf:20:2a:e6:53:40:23:91:39:23:92:5b:51:0b:33:d9:
94:e0:5b:e4:66:d2:91:2b:ea:7a:95:54:48:43:35:82:18:83:
89:2e:8a:c5:44:7b:cc:6b:a3:c1:0d:ec:f9:27:d6:e5:e5:cd:
e8:01:b9:d7:c2:21:86:05:fb:25:5c:ed:3f:e7:7b:32:39:cf:
33:57:91:eb:c4:fc:cd:0e:a8:86:f9:39:4e:28:81:e8:43:1b:
b9:82:0b:c3:5d:55:73:37:e2:a8:bd:3a:38:8a:0e:e8:26:65:
11:80:c3:c8:8d:e9:4e:16:1c:f0:34:52:39:1f:6b:ab:3a:8a:
a5:5b:14:9e:08:e8:43:06:6f:41:ea:3b:0a:5a:60:14:ac:a8:
09:af:d7:26:6d:cb:95:8b:3f:ec:ae:5e:6a:56:28:73:1b:d5:
45:94:7a:6b:d8:f8:aa:e0:f3:fa:b6:95:12:0c:84:cd:04:5d:
a5:1c:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:52 2025 by rpki-client