Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: nGhuVoAuPJewIf9I8rswh1XGhOaEcY4SVUmhPF2jXSY=
Subject key identifier: B0:4E:07:4E:43:C9:63:D5:79:09:DA:EA:1D:00:86:00:98:71:39:12
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01960FB2D6E60962DBF06FF5E206D9B463E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 14E1
Signing time: Mon 07 Apr 2025 10:01:40 +0000
Manifest this update: Mon 07 Apr 2025 10:01:40 +0000
Manifest next update: Tue 08 Apr 2025 10:01:40 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: XTYzDFklwTI9/njVC8TMSa+cRoNLY8UN6o/gVCnoyBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:d6:e6:09:62:db:f0:6f:f5:e2:06:d9:b4:63:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Apr 7 10:01:40 2025 GMT
Not After : Apr 8 10:01:40 2025 GMT
Subject: CN=b04e074e43c963d57909daea1d00860098713912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:1f:c2:af:32:74:a6:9c:36:6d:e6:85:71:
d4:f4:a2:4c:56:4c:23:05:3e:06:e5:80:93:37:85:
b3:fe:b5:a6:a5:b6:85:08:c8:7c:f8:4e:54:d9:9a:
b5:ad:9b:1c:6c:74:41:e7:5d:d6:e1:f5:bf:2a:88:
cd:39:12:51:1b:b9:b3:17:bb:52:f9:ae:96:bd:1c:
01:6a:bf:bc:84:9a:be:92:42:b4:c5:75:53:07:d9:
ae:5b:48:d1:d0:4b:87:36:23:38:25:3f:1f:c5:15:
89:9b:1e:a7:8b:0a:52:9a:d7:c0:b0:2c:93:7c:17:
26:ef:09:96:14:05:28:f2:11:6b:6a:49:21:17:07:
cc:80:ea:20:64:7a:43:37:ce:35:e7:6a:d0:9c:1f:
7d:8a:03:03:84:ed:73:ef:fa:d8:db:6e:37:94:90:
0f:1e:ea:e9:cd:c2:4c:1f:21:e9:d0:1e:87:13:d5:
aa:97:ee:f6:bb:3c:f5:ca:0b:74:e0:8c:b3:41:0c:
c1:de:ca:c6:be:a9:a5:9d:35:07:63:e6:04:c4:ff:
58:0a:64:92:84:ef:56:b9:bd:07:c2:13:c5:20:22:
22:c9:5f:24:40:30:7e:11:df:6c:c7:71:23:2d:9e:
c8:68:0c:96:fe:21:ed:98:ef:79:88:cf:5f:b3:3d:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:07:4E:43:C9:63:D5:79:09:DA:EA:1D:00:86:00:98:71:39:12
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:d1:4d:5a:bc:2b:de:e8:23:5d:b1:5b:3c:2e:23:83:31:
66:0e:eb:a5:ec:a3:ec:c5:59:55:ab:05:60:c9:14:7d:8b:38:
92:f3:95:7f:89:31:ca:ea:03:93:04:50:57:39:a7:01:e1:9a:
a1:dc:a8:db:cb:20:e2:d8:84:68:27:55:09:6b:e7:1b:6b:98:
47:df:1a:16:48:d0:36:29:5a:9b:84:e1:d7:de:63:af:63:0d:
0a:13:53:8b:7e:53:e9:cb:e8:b1:ab:56:de:83:bf:c1:92:bb:
80:7f:dc:a9:58:fd:a3:34:a1:34:5d:83:5d:34:44:8e:42:1c:
ea:f1:a0:4e:7d:b3:e0:0f:98:26:61:92:40:6f:10:0f:26:a8:
29:7e:e5:ef:31:f5:c9:d5:0f:4a:6a:66:a1:3d:bb:f6:f3:db:
b5:a1:a0:62:2c:c7:32:e3:52:9a:6b:0a:0c:6b:71:9f:c6:14:
b3:5a:ce:a7:19:08:97:38:46:a6:f7:a7:3b:62:4c:45:70:e4:
22:d1:c1:4c:81:68:13:81:d0:0b:8a:d2:39:d2:57:d9:93:9f:
0d:41:83:c1:f9:37:91:a8:43:47:d8:fb:f7:98:4f:7a:1a:9d:
15:ff:d8:87:88:82:d0:d7:4e:e6:69:15:b3:76:f9:89:63:fc:
92:f5:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:57 2025 by rpki-client