Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: YwuibPzIaLGCXTYlf8cZA1dqHTQoaLg0Mn8etSMMr78=
Subject key identifier: 7B:C7:BD:A8:1A:9F:0B:5D:03:F4:81:14:B0:E0:DE:67:6B:3B:F7:56
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0196553850B9CDC72BBDB9B0938AC6931AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 10BC
Signing time: Sun 20 Apr 2025 22:01:16 +0000
Manifest this update: Sun 20 Apr 2025 22:01:16 +0000
Manifest next update: Mon 21 Apr 2025 22:01:16 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: Axku+DAakMfCeLcJRv0JTLU03kxnOnE3bOigQ677mcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:50:b9:cd:c7:2b:bd:b9:b0:93:8a:c6:93:1a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Apr 20 22:01:16 2025 GMT
Not After : Apr 21 22:01:16 2025 GMT
Subject: CN=7bc7bda81a9f0b5d03f48114b0e0de676b3bf756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:e6:e9:09:29:5c:8b:b6:bb:20:f9:88:2f:
8c:0f:56:96:28:bf:aa:ff:7f:b0:d2:a9:d0:e3:cf:
17:66:73:a3:b5:5f:35:16:81:fd:12:5c:71:78:b4:
34:cd:be:6e:6f:19:f9:b7:fd:31:df:43:0c:98:8e:
bb:e5:15:c2:9d:d5:72:a8:14:4e:8c:d2:f6:be:72:
6f:a3:58:9c:04:a6:f3:1c:59:bc:d1:6e:bf:3f:ba:
ed:8e:c3:b8:da:4a:75:39:c8:fc:e7:fe:42:4d:fc:
56:af:ac:6f:cc:01:64:b8:3c:16:11:20:c1:2b:17:
74:bb:28:10:51:c0:5d:c5:cb:d4:51:e2:13:b8:11:
fd:f2:2f:8d:d6:98:42:b1:84:28:21:0d:21:8d:a3:
67:f1:bc:94:6a:ed:b7:1b:7f:71:24:ee:b3:ab:66:
71:eb:1f:02:31:39:9e:5e:c5:8a:8f:75:f9:93:ac:
a2:14:fe:3e:cb:80:0d:d6:3f:32:67:62:23:7a:4d:
96:9b:b0:f3:51:ff:f3:bc:04:97:de:92:35:e3:d2:
94:b7:bb:28:0f:34:0e:e6:85:a1:0b:3a:c8:be:23:
0d:66:a3:26:12:22:45:d1:4a:71:60:06:64:3b:ad:
a9:2d:ca:e7:1b:cf:71:4b:37:b7:23:91:60:d5:c6:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C7:BD:A8:1A:9F:0B:5D:03:F4:81:14:B0:E0:DE:67:6B:3B:F7:56
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:da:45:bf:da:cd:00:35:fc:04:75:68:63:0b:cd:ef:b9:30:
f0:2e:d5:bc:9e:07:4c:2e:93:1c:e0:f3:57:88:27:4a:7b:8f:
f3:38:11:4f:40:dd:30:5b:99:48:b5:b0:18:5f:07:d3:b3:a3:
9b:89:1b:0d:43:52:63:e1:4b:61:06:7d:84:cf:5e:ab:70:39:
c3:87:6c:a9:5b:42:f7:6a:05:43:f6:de:d3:4b:6a:f7:ab:96:
fe:e1:59:5a:92:3a:48:ff:6f:ee:6d:dd:22:3d:b9:aa:1f:e2:
b4:b2:bf:fe:53:19:cd:08:cf:9d:5e:b6:de:51:7a:bd:45:3b:
d0:eb:1b:f0:2f:94:f0:da:0e:b5:fa:6b:0c:6e:18:43:8e:d0:
c6:69:87:b6:2b:bd:2c:70:94:89:1d:9b:7b:0f:c2:f7:e5:f0:
30:e9:58:26:dc:9e:b0:54:1b:f3:75:69:04:c7:fc:a8:88:6b:
9b:aa:f3:ef:b4:c8:c3:8d:ff:33:14:13:fd:97:6a:4b:48:6e:
79:6f:96:dd:14:76:b4:02:94:34:96:f4:ba:d2:f9:3b:89:96:
39:a6:f1:a1:e9:5a:6e:45:16:72:da:b9:88:8a:83:ad:0f:44:
0f:f8:2a:de:3d:4e:a0:01:a0:24:44:46:d0:ed:67:f4:85:d6:
c9:38:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:29:03 2025 by rpki-client