Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: sIikJJr3OL9eUXxqTkWEjb8C6yp5FTA307Wj2K1NjSc=
Subject key identifier: 7F:94:6E:B9:AE:1A:64:11:24:80:7C:6F:32:72:15:82:7D:15:FA:B9
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 0196A24037051F4E98494D6285539CDAD495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 21:00:39 +0000
Manifest this update: Mon 05 May 2025 21:00:39 +0000
Manifest next update: Tue 06 May 2025 21:00:39 +0000
Files and hashes: 1: 58adO5UB1FKlEoStUB0aT9zK1OU.roa (hash: VcDtIG0g4QLm3R4L3wJoUxzRN4qEZkuyhBUiyX4ea8Q=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: X45jF88VFe9wY716cJ4BErauJ9BRjQIJ7JNILdW1RFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:37:05:1f:4e:98:49:4d:62:85:53:9c:da:d4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: May 5 21:00:39 2025 GMT
Not After : May 6 21:00:39 2025 GMT
Subject: CN=7f946eb9ae1a641124807c6f327215827d15fab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:98:47:4b:8d:29:c6:cd:60:54:ed:d2:83:a3:
fa:47:b8:93:4a:83:96:97:6e:22:63:4d:d3:6c:f4:
1c:38:56:21:54:74:1d:20:26:5e:55:29:d8:4b:8f:
4d:40:a5:ba:8f:d5:3e:02:45:f9:df:39:56:46:1e:
36:6e:72:7d:74:6d:9a:df:3c:4e:58:d5:f0:f1:ff:
f8:4d:b2:d5:f7:6f:46:55:ce:72:1c:95:b5:27:fc:
71:2b:a2:fc:76:75:85:ee:53:24:15:10:54:22:3f:
42:99:21:17:b4:5f:0f:2b:29:35:63:ae:fe:6a:7e:
a1:36:48:aa:97:1e:e9:03:86:9c:ac:19:2c:cf:ea:
4c:98:d4:11:a6:3e:9c:01:e1:53:13:2d:4b:16:75:
5c:2c:27:e3:4d:c9:9c:99:4c:44:f5:b0:05:87:93:
75:24:e7:fd:00:fa:b0:40:b5:09:22:0e:18:b6:a0:
d0:0d:7a:7f:73:35:50:2f:4e:cf:d5:a4:5f:0d:b6:
b3:69:c7:da:43:78:3d:e9:65:77:08:51:9c:cb:b2:
cd:5f:ee:d2:50:02:36:ae:e0:a0:6f:79:1e:2a:a3:
72:d7:b0:af:e3:4a:72:02:b4:b4:16:94:50:03:a6:
10:bb:cf:8e:9a:bd:de:af:c7:7f:10:98:b0:58:21:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:6E:B9:AE:1A:64:11:24:80:7C:6F:32:72:15:82:7D:15:FA:B9
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:db:e9:96:0d:14:22:1f:17:42:50:66:ee:3b:b2:3e:cf:34:
7c:5a:d4:f0:53:96:e3:61:f8:f9:88:b6:39:7e:12:b7:86:4f:
cc:4b:fe:3b:3b:73:90:49:d5:f0:4b:bd:e5:ff:fc:8d:cb:ea:
90:20:22:85:e5:8c:f2:75:41:54:9f:9b:9a:16:f3:9f:33:bb:
ca:8e:1e:da:46:11:9d:ea:a7:5e:17:c4:f7:6a:b5:17:e4:9b:
c7:c2:5f:61:81:23:aa:f4:31:62:7e:90:7d:27:29:56:30:01:
85:81:13:8a:44:be:2e:b4:14:1c:22:74:5b:54:0f:d5:29:a7:
94:ba:c9:04:66:b9:fc:00:db:27:cc:af:fb:40:d5:7f:f0:94:
29:4d:ed:a3:b8:f4:19:36:99:4f:0b:b2:6d:5c:d4:53:89:99:
91:cd:fb:b8:e0:85:f4:58:3c:40:33:c2:4f:4d:28:0a:86:3a:
64:fd:77:bd:41:95:fe:f8:60:83:9e:5f:3f:8a:b4:b5:8b:54:
c5:b4:0e:09:bb:41:02:2e:de:d7:b3:46:81:a2:99:23:3d:08:
b9:5b:04:f6:34:12:58:4f:bb:5d:ef:42:7d:27:ef:f3:98:be:
00:6e:48:81:22:14:ee:c9:f3:33:16:ff:72:2d:c5:2e:ba:be:
00:c3:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:04:44 2025 by rpki-client