Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: PO1nD5lHsTny4KdxjyMM0AuVz4wn+zdSmQG4ecaepwo=
Subject key identifier: 30:D0:3D:2E:4E:0D:51:53:45:4B:62:8E:67:28:BE:19:40:20:05:4C
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 01963DD3D31A644D753999AF8C1068D725C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0D5D
Signing time: Wed 16 Apr 2025 09:00:14 +0000
Manifest this update: Wed 16 Apr 2025 09:00:14 +0000
Manifest next update: Thu 17 Apr 2025 09:00:14 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: wYdSrAQtlQSSUbj0aT50UovnglIPMJbY9iv6sssSjxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d3:d3:1a:64:4d:75:39:99:af:8c:10:68:d7:25:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: Apr 16 09:00:14 2025 GMT
Not After : Apr 17 09:00:14 2025 GMT
Subject: CN=30d03d2e4e0d5153454b628e6728be194020054c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:a4:02:15:cf:b7:ce:31:01:70:a6:72:7e:
3e:37:24:cd:c2:e4:c4:06:ea:08:82:83:a4:c7:12:
1d:8f:23:b8:cc:68:4c:87:59:a9:5c:22:17:9f:d4:
3f:ff:45:ba:d6:08:f2:66:0d:b2:20:9b:ee:26:5a:
2a:42:d6:65:89:13:46:1d:ce:49:1f:c0:f9:be:d3:
b2:d2:73:0b:5d:0e:7d:31:b0:a3:dc:0c:44:3c:a1:
03:4c:77:a1:06:e0:28:2a:09:c4:73:ac:fb:d2:38:
b6:54:d3:df:b6:cc:2e:34:81:b2:1e:45:2f:96:71:
ba:58:f3:f9:b8:f9:31:b6:7f:59:c8:07:d9:fa:42:
fe:de:ac:bb:57:78:a4:24:cc:2b:5d:d8:e7:09:97:
f3:85:24:f8:72:c1:f2:20:85:87:19:9c:2b:45:d1:
51:04:71:fb:98:4c:66:f1:fd:fe:96:c4:cc:38:33:
88:b8:0e:ef:ba:b5:a3:50:bb:11:12:6d:15:af:24:
84:63:62:cd:74:e6:4c:7b:d4:a1:ed:1a:d7:73:2d:
f2:7f:de:2a:7c:87:e7:2f:14:0b:85:42:84:f9:59:
31:9f:cd:23:d4:41:3b:6d:01:ee:b1:9a:3c:99:00:
ab:ea:a5:9e:68:4c:19:39:f2:e8:d5:26:b8:5c:a4:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D0:3D:2E:4E:0D:51:53:45:4B:62:8E:67:28:BE:19:40:20:05:4C
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1c:73:02:29:9c:a9:21:f2:7c:71:6b:41:4e:d0:2f:ae:72:
38:92:4c:2a:bf:3c:15:08:5e:7f:7a:b7:b7:65:59:a3:d4:9a:
b2:19:44:90:4b:76:df:d3:2f:cc:a2:e5:6b:06:ca:a9:62:a7:
9e:5d:f2:14:22:e1:1f:36:ca:9d:1e:bf:09:a6:d1:b4:80:d1:
f6:cf:85:e3:0a:43:ef:bb:92:a5:12:96:a8:d0:02:da:45:e7:
96:5f:fc:f3:f5:0a:29:51:e3:e8:11:7e:5a:f6:00:d1:ad:b9:
d9:1c:15:13:6d:63:f1:e1:0c:bc:5e:a8:14:a0:0d:e2:44:5a:
a6:6c:aa:3a:e2:2c:b1:f7:9a:21:2c:c4:d9:10:72:98:ee:55:
62:b1:50:7a:99:ee:d7:57:5c:95:25:d5:45:8f:6d:f6:36:77:
ad:6a:1d:07:2c:47:b7:66:87:f9:ca:6a:c7:a0:86:39:b8:3d:
77:ab:30:94:da:bd:fc:ad:74:88:e0:8f:66:a3:9e:a9:ae:3f:
e0:92:92:fb:09:32:ce:d1:6d:f1:77:75:7a:32:04:17:3f:f0:
33:72:31:bb:5e:80:74:ca:c7:d4:98:c8:0b:f8:3d:29:cd:cb:
49:fe:e4:23:52:e0:38:e0:98:f6:85:72:c1:c6:58:f7:6c:ab:
21:eb:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:16:02 2025 by rpki-client