Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: Nzuk55z84D64CY50O6Bbm6Vv9m6SXzdFfPY9EfORH/E=
Subject key identifier: 99:5A:36:11:D0:CC:78:09:D2:60:34:B3:65:9E:31:86:62:0B:20:0E
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 019649D83F0FC906A6E96EAF581CFCF67E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 125B
Signing time: Fri 18 Apr 2025 17:00:30 +0000
Manifest this update: Fri 18 Apr 2025 17:00:30 +0000
Manifest next update: Sat 19 Apr 2025 17:00:30 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: VUmLh36pprVsqUylQNpsddIKb/z3zaqCb068KkHcYsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:3f:0f:c9:06:a6:e9:6e:af:58:1c:fc:f6:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Apr 18 17:00:30 2025 GMT
Not After : Apr 19 17:00:30 2025 GMT
Subject: CN=995a3611d0cc7809d26034b3659e3186620b200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:94:d2:ce:cb:40:23:b3:bb:35:f7:10:8b:
04:a4:c6:e0:d8:0d:13:23:cb:a4:13:af:97:ff:1b:
38:fb:cd:38:1e:04:b1:77:90:a4:58:5c:3e:09:a8:
53:0d:9c:4a:d5:21:36:57:3f:0e:1c:83:3f:a9:ad:
3c:a2:8d:17:3f:11:e3:d2:4f:51:89:0a:f3:03:94:
5f:e7:3d:05:f1:63:35:84:84:0b:c7:49:82:a4:0e:
3c:f1:1e:56:fd:bc:a7:74:2b:4e:dd:f4:ea:7e:d2:
f1:4f:b9:99:ab:65:8a:1b:86:f8:9d:8a:ff:e3:a4:
37:23:48:55:42:a7:cd:17:cb:e0:69:f2:5f:15:d7:
a8:0d:ab:da:ee:a5:46:c1:5a:f6:b1:7b:2c:c7:82:
77:ae:36:0d:43:09:fc:47:26:a6:dc:d8:5a:34:b8:
b8:8d:a7:50:ce:ad:09:74:f1:8f:8d:cd:d6:16:fe:
5e:ed:89:00:6e:57:a0:ae:80:7e:e9:30:a3:dc:42:
2e:d6:ff:ec:25:44:e6:74:42:c5:be:89:35:97:8e:
fb:c8:05:00:fd:63:2c:e8:46:0e:64:d1:f4:a5:d3:
36:bd:d8:39:ab:c1:70:4c:bd:a2:b6:c9:8e:f4:70:
b7:b1:8c:7d:37:9c:dc:3b:48:fe:94:1f:8f:3d:94:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:36:11:D0:CC:78:09:D2:60:34:B3:65:9E:31:86:62:0B:20:0E
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3e:30:48:28:d9:28:38:e7:ee:1a:86:81:55:fe:8b:03:ce:
44:dd:71:d2:24:07:62:2d:8b:57:a7:bb:4f:94:be:d5:2a:1e:
18:76:4d:2f:b7:3f:e1:83:db:3d:74:a2:78:65:55:e0:9b:48:
84:05:6d:9b:0c:ca:3b:b6:78:f5:97:2a:97:43:06:53:dc:67:
e8:8c:a2:ca:ff:a5:69:4c:f2:c2:ba:63:33:69:db:c7:90:bb:
3b:9f:6c:35:d9:4d:8d:00:12:fa:52:84:82:71:b7:ae:1c:0d:
64:04:e2:a3:93:07:1c:ca:ed:0c:cf:b9:69:c5:0b:57:57:69:
50:56:ce:89:b0:ee:b3:92:b7:20:ae:e8:34:44:33:b9:d6:60:
62:b0:08:23:82:33:ca:5f:82:c0:4c:39:e9:a8:78:da:b9:9d:
e8:e7:3b:65:68:e9:99:87:b3:af:75:5d:08:8a:4e:0f:8f:15:
07:61:d1:10:61:87:83:78:42:4e:c2:57:6b:ff:7a:90:ea:91:
ea:72:55:e5:d9:57:50:52:a0:43:4f:c1:1d:1a:28:f1:26:2a:
0f:5c:5f:9e:67:c6:a1:36:79:27:27:97:5f:04:37:42:7c:d0:
64:08:f6:08:99:e9:af:86:b8:03:00:9f:d4:54:52:fd:8c:37:
1d:7d:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:21 2025 by rpki-client