Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: E+Ew9ZGmNbE9v+6P4yHBKl7dSU0FgW39Hf1LjYNISmk=
Subject key identifier: 8C:4C:B7:38:59:85:E9:33:49:7D:FD:B1:FB:3C:EE:EE:F6:42:93:02
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019646A04211993DAEE2204D826219D1CEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0434
Signing time: Fri 18 Apr 2025 02:00:29 +0000
Manifest this update: Fri 18 Apr 2025 02:00:29 +0000
Manifest next update: Sat 19 Apr 2025 02:00:29 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: UannmXFGbP32YIZ5jWm/jZy2IS5gEiVZ/Epm3RHg4mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:42:11:99:3d:ae:e2:20:4d:82:62:19:d1:ce:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: Apr 18 02:00:29 2025 GMT
Not After : Apr 19 02:00:29 2025 GMT
Subject: CN=8c4cb7385985e933497dfdb1fb3ceeeef6429302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:5a:31:f6:13:28:73:13:e7:24:b0:cf:fc:
f1:d9:51:81:16:4c:2a:7a:0e:98:0f:43:f8:05:c3:
7c:29:fd:40:07:35:3f:ef:2e:9e:95:62:dd:ab:0f:
f7:7b:d0:b9:6c:1a:30:01:22:9f:a7:b1:d0:4b:0e:
bc:91:70:d6:37:fa:33:bb:e6:b1:a6:61:90:a1:ac:
ca:9a:0e:d6:57:3b:e3:f9:3e:f0:f2:56:57:ea:65:
a4:80:c5:cc:73:fb:ff:dd:24:69:05:d8:2a:ae:e5:
fc:cd:e8:9b:48:2b:02:0b:73:84:b1:17:56:cb:b1:
ce:6b:9a:68:6c:a4:92:7f:2f:1f:3a:2e:8f:9a:1b:
b7:1b:41:19:43:67:41:9f:ad:74:fe:0d:0e:8f:ea:
61:fe:f5:a4:d3:0e:d3:ad:e4:83:3b:af:18:b9:45:
b1:c1:7b:16:05:2f:3c:52:75:8f:03:fa:00:ad:88:
e1:0f:01:9a:32:68:db:3d:e8:ac:9d:00:a9:6c:af:
8a:d8:b6:c0:b5:cf:94:b2:ee:d8:cb:d7:87:2c:3a:
ec:95:41:ba:9c:a2:19:7e:74:4a:c7:c2:27:db:c3:
b2:20:57:98:43:56:62:56:fb:8f:21:f2:23:a8:be:
38:57:e2:90:02:2b:00:a9:8f:dc:a6:d9:4b:77:5d:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4C:B7:38:59:85:E9:33:49:7D:FD:B1:FB:3C:EE:EE:F6:42:93:02
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:5a:a6:bb:bc:4d:cb:f8:71:d2:7d:bc:3b:f8:8f:08:03:
44:b1:34:d5:00:95:f2:8f:7e:d0:38:54:13:49:d2:b4:80:4a:
a2:6f:36:34:89:1a:83:4e:9c:0a:1b:83:7c:d3:ce:d1:e9:e2:
8b:d2:2a:64:34:1f:be:0c:1c:7e:df:b6:1a:9d:78:8a:9b:52:
b1:9f:ed:10:94:41:a5:f7:40:44:f7:f6:67:76:d4:b7:94:ef:
6d:ec:88:ef:78:d4:0a:67:7a:13:02:1b:fa:70:87:92:db:ab:
83:ab:0e:b5:3b:c4:4c:94:14:e8:0d:dc:89:84:c5:a7:91:7d:
5a:5d:e8:68:51:ef:29:f1:f1:e8:29:5a:1e:15:d9:cb:64:3e:
ec:af:31:03:12:55:b6:59:2b:25:e1:0f:79:b3:51:a9:e8:2d:
fe:c9:ad:95:83:15:8d:3f:87:86:10:9d:34:54:76:e7:e4:95:
9e:06:3e:fb:b6:5a:db:6a:7a:25:89:b5:5d:ba:f4:ff:47:7a:
03:17:81:13:c1:85:64:f0:0c:ae:fd:e3:f2:3b:99:df:25:e5:
26:ea:b7:7c:86:dd:59:81:21:43:b7:db:73:8e:50:af:dd:75:
4e:42:3f:77:10:dd:cd:6b:9e:64:ca:b3:ae:0e:5e:61:e0:87:
f6:40:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:52 2025 by rpki-client