Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: YxTTFJM2VHheQdbRZvPTZg57eqVP8EAcblq+VHc5l8k=
Subject key identifier: 7F:7C:72:C3:E3:65:E1:81:C8:67:F6:9F:8D:6C:F3:79:47:F0:86:97
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 01958B4D629C4A1E75FA2F34DE7B8243B1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 0772
Signing time: Wed 12 Mar 2025 17:00:59 +0000
Manifest this update: Wed 12 Mar 2025 17:00:59 +0000
Manifest next update: Thu 13 Mar 2025 17:00:59 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: ew+P5mQVbn/iHR0fymFgwVWrYz5EVlbORS3vAfhwaX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:62:9c:4a:1e:75:fa:2f:34:de:7b:82:43:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Mar 12 17:00:59 2025 GMT
Not After : Mar 13 17:00:59 2025 GMT
Subject: CN=7f7c72c3e365e181c867f69f8d6cf37947f08697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:0a:d7:9b:ac:81:6c:73:56:20:a1:82:e0:
dd:8e:c7:ec:17:32:2f:a0:26:59:33:d8:ae:fd:49:
ef:0c:8a:b0:1f:0a:1a:41:52:3a:72:21:44:ff:61:
7c:9d:1d:75:02:31:ea:9a:16:4a:36:ce:af:7f:20:
81:ec:4c:6e:c8:75:6d:7f:0c:f4:0f:8a:bb:c0:33:
3b:2c:d1:f6:9c:a7:2d:f6:c8:98:26:53:d2:80:88:
0b:0b:c2:14:69:2f:27:8a:f8:f5:fe:af:dd:ca:78:
49:8b:45:e5:6d:c4:71:fe:56:a6:a5:b5:13:5b:e5:
76:1b:ac:e6:80:6d:a9:0b:74:fc:cb:60:f3:87:38:
96:f6:ff:8b:f7:f9:50:46:6b:d9:fb:ca:9c:b7:c9:
ff:eb:74:a1:35:8f:fa:06:17:20:6f:76:03:8b:fb:
40:28:ec:85:2c:44:d2:88:e2:78:78:48:67:08:2b:
c6:91:43:4c:c9:31:ce:9a:4f:67:d5:80:54:f8:ce:
27:6d:f2:84:f3:15:b9:3c:2e:e9:2e:3d:9d:b4:74:
d1:21:03:6b:d2:1d:68:75:47:0f:28:55:6c:44:f0:
d1:05:e4:58:a3:3a:22:21:d0:62:04:d6:86:fa:9e:
ca:43:d3:19:36:fb:47:09:9f:76:a6:64:43:a7:47:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7C:72:C3:E3:65:E1:81:C8:67:F6:9F:8D:6C:F3:79:47:F0:86:97
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:a8:32:ed:e2:93:2f:b4:2a:59:15:f0:92:33:21:3d:3c:
9f:f3:c9:ce:04:a7:92:1c:3c:5a:4e:ca:2a:d9:fe:a5:54:b8:
7e:8a:0e:78:6e:7b:c2:6b:c1:b4:f2:09:46:41:00:be:34:f7:
64:93:c2:40:1b:69:a9:53:20:2d:fe:25:34:ab:bd:ae:8b:31:
8d:31:ba:12:c9:ee:15:d7:87:a6:bf:00:53:a8:d5:b8:df:1d:
90:97:c3:84:14:a4:7a:62:d0:48:e8:15:53:b2:ce:b5:6c:88:
0c:01:9a:f5:cf:aa:82:06:d5:0c:77:62:54:dd:ff:e2:c8:ac:
57:1f:13:26:ba:b0:2f:81:22:15:03:5c:cf:1a:33:a5:ed:41:
a5:2e:87:7f:42:10:dc:34:af:65:87:f9:dc:2b:b5:e2:10:1c:
30:75:ab:c4:af:8d:40:60:33:54:a6:42:a0:e6:f4:53:55:3f:
52:7c:d6:7c:d0:55:e9:92:d1:46:04:ea:2b:dc:42:88:e6:a3:
7b:04:0a:38:27:d7:21:95:5f:7c:4e:97:ff:5d:f6:45:a1:46:
a4:7d:ca:f7:6f:50:42:e5:5d:b8:3c:df:ba:36:35:50:06:cb:
3d:5d:99:f4:56:ef:ad:4a:1d:36:82:f1:5c:98:5a:cd:ad:12:
cb:3a:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:40 2025 by rpki-client