Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: E+eYFvqeB9GCPyyWRqKyr2w3S5U8PPi5oWAXsH0A+iQ=
Subject key identifier: B1:89:36:B4:7B:88:00:E4:CC:98:64:96:9F:D3:D7:E2:1A:DC:5F:85
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019651C91F1979C035E6BF4676AF92047744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0A70
Signing time: Sun 20 Apr 2025 06:00:57 +0000
Manifest this update: Sun 20 Apr 2025 06:00:57 +0000
Manifest next update: Mon 21 Apr 2025 06:00:57 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: MB1jjGDGrGzWYUEPv60yLHw4yJ3F1Y1Fcjqz26U661E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:1f:19:79:c0:35:e6:bf:46:76:af:92:04:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Apr 20 06:00:57 2025 GMT
Not After : Apr 21 06:00:57 2025 GMT
Subject: CN=b18936b47b8800e4cc9864969fd3d7e21adc5f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:a5:be:f7:86:12:5a:72:9f:8f:fc:2e:84:
79:5c:4e:9d:ec:50:0b:51:d5:d3:61:3b:65:49:db:
df:04:e6:1c:9d:55:64:6c:73:57:1c:85:a5:ef:91:
83:bc:8c:d0:34:6d:9a:a8:ec:95:7b:0e:3f:a4:3a:
2b:26:35:6d:6f:2a:71:6a:ad:b0:7c:42:3f:6c:1f:
88:a1:cf:29:88:f6:3c:a4:65:a7:9d:2d:ad:df:83:
6a:b0:94:96:d5:27:f7:9f:43:3b:cc:d8:f4:13:e2:
67:8f:b1:ec:da:08:76:41:d2:78:07:ff:ee:c0:ce:
0f:7c:4f:1e:c6:69:20:b6:89:a1:7c:5e:01:87:d1:
53:ab:e4:5e:23:64:83:8e:77:18:28:7f:11:95:fd:
13:9b:30:84:86:63:ab:cf:01:4b:c8:51:a8:95:d7:
eb:99:55:ca:d9:bc:8c:5a:cc:05:c1:29:16:04:5f:
8b:a8:8b:7e:c9:f3:a9:26:63:33:61:13:3f:dd:17:
ed:01:33:8a:d0:63:3d:b6:e4:35:17:65:0e:b3:d5:
95:21:b1:f5:ae:a7:a1:ef:64:74:82:ad:9d:d1:b2:
d0:14:1d:89:2d:c0:31:4b:6d:1d:c5:a8:ff:d5:3f:
d4:9b:1f:2a:43:d6:aa:f9:66:99:22:6c:d8:3a:86:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:36:B4:7B:88:00:E4:CC:98:64:96:9F:D3:D7:E2:1A:DC:5F:85
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d5:8a:90:a3:1d:31:6f:06:17:93:42:fe:c5:15:e6:9a:c3:
1f:f9:1c:eb:23:22:1f:e7:3e:66:f0:21:60:ca:00:f4:55:57:
b2:33:78:3d:83:e0:1f:5d:53:e1:99:1d:e4:58:c3:eb:ba:c3:
75:e0:8e:6b:07:d2:ce:58:83:66:6c:c2:f6:f5:78:b8:a7:11:
08:d1:ac:82:50:91:9b:f9:1a:61:a5:b3:54:eb:fc:30:7e:35:
ba:e4:b9:ea:ea:31:e6:a8:4b:7a:cd:94:56:5c:a6:82:42:17:
5f:23:dd:08:52:1b:47:24:8c:60:69:19:d7:02:65:1c:fc:45:
2e:47:e0:1a:7e:47:b5:ce:d8:7e:03:c6:d7:6e:2f:f1:b6:4b:
ef:50:31:9f:23:20:f3:ba:84:4d:79:69:72:eb:b8:2d:e4:72:
bf:21:ab:72:9c:66:2b:74:5e:bf:d7:11:a4:3d:6d:65:f9:f4:
b8:18:d2:d5:01:e9:d3:be:0d:06:9e:04:34:4a:6d:06:e9:ca:
23:f7:32:86:5f:bb:09:b7:c1:c4:92:bf:57:73:71:a3:bb:77:
b8:10:ba:28:32:6c:4f:fd:af:d8:63:af:6c:00:a1:63:75:c7:
11:c1:48:68:ac:43:5c:1b:f1:bd:56:69:f4:6e:68:00:dd:54:
91:5d:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:21:04 2025 by rpki-client