Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: mf8smEShR+uRuCSBZUxxirabunOirk33MGrNenbDZCQ=
Subject key identifier: D0:A7:BB:EB:02:40:E7:6F:C0:D0:DA:BD:3D:53:2A:A9:B9:61:4B:95
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 01964E5A4ECA2697570B8CEB1B96A400043A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 07D7
Signing time: Sat 19 Apr 2025 14:01:03 +0000
Manifest this update: Sat 19 Apr 2025 14:01:03 +0000
Manifest next update: Sun 20 Apr 2025 14:01:03 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: BDvEymDUswdWpjCVyji5PlG+yoTdJXaLNTQbsYX61XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:4e:ca:26:97:57:0b:8c:eb:1b:96:a4:00:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Apr 19 14:01:03 2025 GMT
Not After : Apr 20 14:01:03 2025 GMT
Subject: CN=d0a7bbeb0240e76fc0d0dabd3d532aa9b9614b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:fd:8f:9b:2f:0f:2a:96:a2:ea:fa:b1:a8:
eb:02:cf:61:d5:fa:f3:fa:5d:14:00:b1:3e:fc:1b:
b5:f3:c2:57:a8:c3:46:f9:f6:5a:88:3a:00:e2:5a:
2a:37:e7:31:3e:94:0b:c8:78:c8:fc:c1:11:9b:14:
ed:f0:ad:a5:85:55:03:49:28:3a:da:f4:6c:32:bd:
41:84:49:e7:a8:0f:d2:d0:d1:33:0c:d8:19:15:00:
8d:df:67:d9:a8:7e:16:a5:7d:c1:19:84:5d:99:9b:
88:52:9d:36:22:75:a9:83:ed:76:cf:18:7d:74:05:
8c:47:98:41:ec:3e:59:9f:54:32:67:26:01:82:e2:
be:86:19:ba:5e:6a:da:34:2d:3e:b3:60:5f:be:64:
84:07:2c:94:7e:f9:4b:c9:ea:95:8d:9d:3f:df:9e:
e9:78:93:17:90:b9:94:b6:cd:d8:12:3e:e4:a0:d4:
d1:a9:f6:22:5e:df:c8:8e:cb:ac:c8:ae:c3:a9:c0:
28:2f:95:ea:d4:19:9b:d6:f5:78:49:a0:a6:0c:17:
00:0e:33:03:29:75:c0:d8:5a:3a:64:8d:22:ec:96:
a1:95:a9:c6:84:08:f5:cf:0c:39:00:63:16:cd:ee:
35:30:c0:5e:96:ec:49:5f:84:2b:42:83:7e:05:9a:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:BB:EB:02:40:E7:6F:C0:D0:DA:BD:3D:53:2A:A9:B9:61:4B:95
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5f:71:0e:f9:4e:02:79:0b:4f:ec:50:44:6b:58:48:a0:88:
42:62:c6:72:9a:01:e6:20:f6:74:bf:02:a8:5e:53:96:af:3a:
76:e7:a4:06:5b:18:37:04:72:ca:ad:41:64:ae:22:19:24:85:
b6:51:5d:65:67:23:35:04:b3:fe:40:2c:e6:d6:dc:ef:b0:ea:
da:4e:08:b5:51:e6:0a:41:64:69:e8:13:73:ef:6c:22:ee:52:
a6:38:e7:62:64:76:7b:fa:2c:a7:26:07:8e:57:2c:12:11:2c:
cb:84:ad:aa:6f:b4:28:dc:c6:21:46:60:e1:b1:73:22:2b:54:
2a:79:71:e1:9d:14:de:0a:88:ad:31:0c:6f:84:e8:e5:c1:45:
c0:72:17:bb:a4:6d:a3:04:8b:c4:9a:97:16:f0:0e:b9:e8:cd:
da:12:17:9d:d3:00:6f:9f:9c:35:51:70:0a:b8:34:fa:24:94:
ac:55:17:2b:45:d7:6b:ae:41:cd:91:85:15:11:04:a1:ee:32:
87:72:30:6c:77:12:bf:30:17:33:29:18:bd:41:d6:71:32:6c:
32:01:0e:6a:5a:49:9f:a8:9a:ce:65:48:c9:2f:62:58:37:73:
e8:c0:66:3c:40:e8:37:64:cc:04:e2:c3:cd:83:32:f9:f5:4b:
8d:50:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:24 2025 by rpki-client