Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json)
Hash identifier: Gq+RGnmrD+FVZSrUhPcTI6a6HPbivRdiJq8KCLfVkNI=
Subject key identifier: D0:9E:D4:6B:EA:E9:D6:7C:94:89:3D:00:6C:BD:63:0E:78:4A:7A:66
Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b
Certificate serial: 0196549328022B96654782C1326B16A15674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
Manifest number: 04EA
Signing time: Sun 20 Apr 2025 19:00:52 +0000
Manifest this update: Sun 20 Apr 2025 19:00:52 +0000
Manifest next update: Mon 21 Apr 2025 19:00:52 +0000
Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=)
2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: WQH58HOyf0QBXoiuVZM/c2P3ZfAoR7j/xDnbJq7z9jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:28:02:2b:96:65:47:82:c1:32:6b:16:a1:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b
Validity
Not Before: Apr 20 19:00:52 2025 GMT
Not After : Apr 21 19:00:52 2025 GMT
Subject: CN=d09ed46beae9d67c94893d006cbd630e784a7a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:7b:e1:f4:6c:e7:fa:92:b5:af:47:0b:4b:
4c:9a:e5:40:9a:4c:17:28:f7:16:56:89:99:ce:f1:
d0:f9:8e:0e:69:8e:43:c2:f3:ad:01:83:fb:5c:13:
88:75:42:9c:9a:57:4a:64:33:3c:b7:84:0a:41:52:
6a:5b:0d:9f:2e:b6:cb:12:97:32:37:10:12:ca:44:
ad:28:59:90:3d:52:cb:73:58:ba:af:e2:7e:82:36:
fe:b8:7b:83:83:63:ef:8f:eb:c8:e7:1b:9a:ba:c1:
e3:57:e8:4c:23:f0:0c:cc:df:95:d8:f6:9f:e5:e8:
58:70:99:09:b8:0b:c5:07:05:09:c5:3d:71:b2:88:
11:31:46:5b:74:58:6f:5b:3b:1c:69:f9:36:91:0e:
c0:17:89:13:4e:ef:6b:d7:ed:ef:d2:d1:cd:18:b5:
c2:3e:79:21:dd:a2:72:e5:eb:99:e3:dc:1c:2d:5e:
ed:d9:99:e5:a7:30:01:44:be:52:8a:3d:ad:fe:da:
d3:0d:ef:17:3d:64:4b:31:30:10:93:fa:66:96:cf:
cd:54:78:26:eb:d8:6f:fd:3a:1c:e5:e7:c2:56:ef:
84:32:9b:92:6c:09:91:28:55:12:bf:53:c3:f3:bb:
ae:19:0e:a6:95:47:eb:6e:2f:f6:34:6f:ff:71:f0:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:D4:6B:EA:E9:D6:7C:94:89:3D:00:6C:BD:63:0E:78:4A:7A:66
X509v3 Authority Key Identifier:
keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8d:a3:ec:0b:10:9e:f8:e6:0e:97:a3:f2:99:9d:92:a6:7c:
39:d3:a6:75:ff:37:6b:0b:57:b1:b6:8e:6e:4a:9a:70:2b:14:
e3:40:32:4d:05:15:7e:77:52:7e:37:06:09:f3:58:bc:1c:7f:
f5:d4:87:ea:ff:d4:73:76:6a:a1:13:9c:54:3d:09:2c:98:3f:
26:8b:5e:2d:d2:d6:0e:c6:5c:11:cf:28:cf:23:8f:7a:71:da:
7e:aa:12:04:03:62:ef:e6:5f:0c:c2:46:1e:86:d0:45:af:a7:
db:68:1f:d5:12:aa:07:91:15:79:b3:12:2e:b2:ae:dd:c9:ea:
29:ee:1e:a3:1d:4e:d9:e8:0b:dc:17:f0:c8:2d:7f:be:17:22:
4e:a7:65:a9:2c:4f:0f:de:58:80:e5:bd:87:40:b4:04:c7:f1:
9b:bb:a3:d8:79:b5:aa:23:93:cf:c5:ba:7a:9e:55:a3:5c:e7:
81:14:a2:70:93:ae:e5:a1:61:10:dc:89:89:9c:8a:d0:d2:62:
75:b8:0b:23:8e:58:67:9f:84:03:54:63:17:0d:0a:54:7d:88:
10:bf:cf:78:e9:36:57:d5:f7:88:22:47:4e:bb:74:b8:19:3f:
56:d4:38:d9:50:6d:c7:7d:ac:25:9e:22:4e:17:5c:2f:df:e2:
ea:37:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:49:04 2025 by rpki-client