Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json)
Hash identifier: s8qaVZnGOev9EUcmiWKnOFAe0V26dPwVDYxGsoZaSGc=
Subject key identifier: BB:A7:69:CD:1B:81:BD:AC:AF:7D:BE:34:F1:E4:D1:1B:E3:14:39:B0
Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Certificate serial: 01964E5A36B859F0DD3ED01E6E86A05E5417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
Manifest number: 02C1
Signing time: Sat 19 Apr 2025 14:00:57 +0000
Manifest this update: Sat 19 Apr 2025 14:00:57 +0000
Manifest next update: Sun 20 Apr 2025 14:00:57 +0000
Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=)
2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: sm+MNrC9pZla0d2pG5MkJYPEUMoyMtYDBbHyJ9yPnAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:36:b8:59:f0:dd:3e:d0:1e:6e:86:a0:5e:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19
Validity
Not Before: Apr 19 14:00:57 2025 GMT
Not After : Apr 20 14:00:57 2025 GMT
Subject: CN=bba769cd1b81bdacaf7dbe34f1e4d11be31439b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:ee:c6:79:54:36:1b:3b:b1:cf:cd:0d:d8:
47:b6:b1:fd:84:bc:cd:be:ce:9e:21:5b:28:de:75:
56:46:64:bc:5c:a4:e7:a2:b0:a6:56:a5:28:42:5b:
ef:f7:4a:df:fd:1e:5c:6c:4b:db:4a:fd:37:91:38:
6d:2d:c8:5c:71:b1:8f:03:cb:26:69:8a:4d:1a:4e:
5c:2b:0e:82:3f:c3:85:1b:ce:ab:b6:50:f0:ea:c7:
b7:7b:a8:38:40:85:99:72:aa:11:4d:77:62:be:6e:
15:dd:b7:8f:21:0c:e0:15:e0:f2:72:71:bf:8d:bf:
60:2c:50:66:cc:10:2b:73:9f:0b:cf:db:22:83:bf:
dc:d6:5d:44:dd:22:5a:46:8f:14:98:1b:37:3b:d7:
a6:23:b4:f3:92:30:b9:56:6c:28:20:d4:b6:06:d6:
10:2a:a8:8e:dd:6a:67:6c:c1:2b:40:a2:af:a5:5a:
9c:0e:5e:77:37:04:7e:a4:30:20:cc:c7:8a:29:c2:
4b:76:69:8a:bd:ec:60:cc:1a:24:58:04:12:ee:75:
64:6f:cd:32:0c:74:79:17:ed:aa:81:39:c4:4d:59:
3f:08:70:ec:35:4f:01:16:6f:a7:f5:f4:49:01:ab:
83:c8:a0:c6:0a:90:96:98:de:92:04:92:12:ae:4f:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:69:CD:1B:81:BD:AC:AF:7D:BE:34:F1:E4:D1:1B:E3:14:39:B0
X509v3 Authority Key Identifier:
keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:07:41:f8:78:a3:4e:f6:43:d1:66:71:51:49:0f:a1:23:42:
32:17:36:e4:94:18:43:85:95:70:d3:c3:b6:1b:fe:60:b9:f1:
c4:03:8c:48:72:1c:aa:14:0c:c9:fe:c7:74:ca:3e:c1:70:95:
08:9c:71:e9:20:13:e6:2a:e2:f2:87:96:3c:64:d7:8e:1c:c1:
30:a3:26:f4:df:b3:48:5c:1c:a5:ae:b3:e3:7d:dd:47:33:b5:
4a:42:da:a7:12:41:f2:5c:3d:e4:03:f9:ef:5d:36:86:8f:4d:
66:2f:f3:3b:75:02:02:d0:63:5f:90:91:46:81:31:5d:7d:9d:
9f:63:73:17:55:5d:70:0e:e7:76:e4:ae:94:c0:15:7a:e1:5b:
8e:bf:e9:53:8f:25:ac:38:24:db:ca:6e:15:42:d2:fb:f5:c9:
d6:07:f2:cd:42:8b:b3:ef:48:2d:59:18:e8:17:7b:23:69:a2:
c4:41:85:08:82:9e:88:c8:08:b2:b7:c7:e1:2d:71:d5:17:f5:
e4:0a:49:4f:2d:a1:31:22:7f:96:15:e5:0a:eb:bd:ca:98:31:
ca:1f:44:c8:65:0c:cd:d4:85:34:d8:e9:c1:19:c3:ed:b4:5a:
7e:c9:b6:39:59:98:eb:5e:0c:85:4c:cd:70:73:55:97:f9:39:
6f:1e:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:18:29 2025 by rpki-client