Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: HKx/uoJg0/4yI5AKuTBbTpWico2fcvgiH8jbxq83TYk=
Subject key identifier: 10:42:10:42:F7:2C:12:E2:8E:50:97:AB:29:20:52:52:CA:72:F2:49
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019644B1A3C0B9F0C8705987E03F69214F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 14F9
Signing time: Thu 17 Apr 2025 17:00:14 +0000
Manifest this update: Thu 17 Apr 2025 17:00:14 +0000
Manifest next update: Fri 18 Apr 2025 17:00:14 +0000
Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: 9STjxWHbWZzxXZuxoM7soBY626ZdcaQ4EG1/zmoX308=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:a3:c0:b9:f0:c8:70:59:87:e0:3f:69:21:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Apr 17 17:00:14 2025 GMT
Not After : Apr 18 17:00:14 2025 GMT
Subject: CN=10421042f72c12e28e5097ab29205252ca72f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:80:6a:a9:1b:5a:ff:48:ec:38:7a:d8:95:
59:5c:66:50:78:a1:18:7d:1b:29:c9:04:6b:68:6c:
a3:f3:09:13:d5:ad:eb:5e:79:15:72:f3:e8:06:bc:
bc:c8:30:76:17:a3:53:12:2e:75:b9:a2:83:8c:96:
05:67:a0:6f:d1:56:9c:77:32:02:fe:c4:f6:94:19:
7e:a5:7a:67:34:95:91:b9:d7:20:a5:26:6a:5b:86:
3f:7e:75:31:df:91:e1:18:d4:99:30:c5:cd:ad:c8:
26:40:6c:4d:44:72:e1:d5:43:0b:f6:9a:85:14:27:
fb:fa:61:df:11:23:1f:07:aa:63:d1:cd:bf:76:2b:
78:85:85:99:ac:34:ad:66:34:d2:b8:46:9e:f3:e1:
98:c7:90:45:1e:be:68:60:f1:db:67:bb:2f:91:cd:
0b:09:fe:01:7e:4c:78:ef:6f:2f:41:6d:b3:c1:a5:
cd:e1:ed:79:3f:35:9f:88:22:63:c0:4d:c4:bc:9b:
d4:c4:da:16:79:01:ba:75:55:3a:25:bc:ae:27:9d:
11:56:83:b6:5c:89:d1:c2:79:30:61:db:d6:78:5a:
bb:49:01:d7:c0:1d:e4:07:71:2d:dd:cf:8c:7c:09:
27:af:99:7b:3e:bb:a2:05:e2:11:78:43:ea:7d:af:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:10:42:F7:2C:12:E2:8E:50:97:AB:29:20:52:52:CA:72:F2:49
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5e:b2:3f:49:fb:20:08:af:00:c5:40:76:bd:92:c9:2e:e3:
f9:2c:1d:d0:24:6e:f8:45:df:8d:87:63:c0:0e:58:11:aa:6a:
bf:ac:53:d6:72:8d:5a:71:a7:7d:9d:49:c7:f8:c1:90:8d:e1:
1f:61:c5:e5:57:2a:94:59:75:1e:1e:5a:c9:7a:0e:f1:9e:1b:
65:35:f9:f6:66:fd:d6:3b:b6:57:ce:fb:2c:d8:23:af:48:f3:
99:75:f6:07:75:a1:fd:4d:d0:c0:17:d3:d6:da:4d:3c:a7:39:
a9:45:d4:08:8c:50:56:94:92:61:a7:ce:62:ad:9e:24:cc:13:
72:4c:65:6f:c6:da:f3:6e:0b:85:7c:dc:51:8e:22:0b:0c:34:
a1:ec:9b:3d:ab:ed:d1:f5:17:8a:10:64:9d:e3:27:1a:11:db:
f4:3b:ce:8c:41:d9:53:df:00:02:e0:e9:03:2c:ac:a3:0e:ce:
bd:2e:1d:8e:22:f4:82:b2:e9:7a:11:ff:b6:92:44:4d:55:d9:
7a:d5:c2:a4:0d:db:f9:8e:34:3d:9f:0b:14:35:85:bd:1e:c5:
41:2a:a8:5d:81:69:8a:c3:e8:5b:51:29:f0:1f:ae:7e:20:26:
22:75:69:25:cc:7c:84:93:0d:83:cb:d4:f7:cb:cf:30:ed:97:
f7:88:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:52 2025 by rpki-client