Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: vshG1sAgpG4OpNety7hZ5f2w9y99ir1WFEvnkpAKQNk=
Subject key identifier: 4F:1D:47:35:E9:7C:67:82:1E:D3:8E:D5:60:5E:13:13:BD:DE:E2:2F
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019653807926DA9FCA190FE37A082C0F4D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 14:00:50 +0000
Manifest this update: Sun 20 Apr 2025 14:00:50 +0000
Manifest next update: Mon 21 Apr 2025 14:00:50 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: FJ1LtWg2EPcTpBhfDEsCkOIGAz8HtzG9JtDcAWS4Vao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:79:26:da:9f:ca:19:0f:e3:7a:08:2c:0f:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Apr 20 14:00:50 2025 GMT
Not After : Apr 21 14:00:50 2025 GMT
Subject: CN=4f1d4735e97c67821ed38ed5605e1313bddee22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:2d:f2:73:de:0d:68:14:48:51:7e:31:c3:
7a:8a:00:42:36:aa:c5:93:bb:53:fd:8f:de:a9:1f:
49:b8:c6:70:69:f5:ae:79:f1:ef:53:27:85:d0:2b:
9d:57:4e:0b:61:ae:b8:8c:6c:28:c0:f0:ce:3f:31:
15:80:3a:48:90:49:83:93:a1:e3:91:72:15:37:e4:
97:b7:0d:33:d3:2f:5b:b0:ed:a5:e6:82:ca:7f:93:
d5:26:69:56:e9:9a:c2:4b:96:93:32:01:5b:5a:15:
02:a8:d7:a4:28:9b:29:62:d0:8a:ea:35:56:2e:15:
3d:7c:16:9d:23:86:11:e2:cf:ba:55:b6:02:7b:0c:
70:e0:cf:91:9a:b4:f1:8c:49:ae:f5:49:70:18:40:
e2:07:5f:88:60:e6:4b:47:54:f0:74:90:34:56:2b:
e1:cc:7f:48:b4:a4:31:d2:36:47:ec:25:b3:c1:ed:
91:5a:be:a3:54:5d:b1:e1:ac:14:e7:31:b2:91:2b:
3d:0a:0d:2f:e9:c6:fb:b1:19:8d:06:72:40:ef:8c:
64:f1:4f:62:fc:06:d8:13:e4:e7:31:db:26:3f:bd:
2f:fa:54:b8:84:08:ac:79:ee:bf:0d:b4:9e:6f:83:
d1:65:b3:f0:36:c2:ea:33:0c:ee:48:22:4a:23:6a:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:47:35:E9:7C:67:82:1E:D3:8E:D5:60:5E:13:13:BD:DE:E2:2F
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f4:eb:51:e2:4f:50:55:bc:ad:33:3e:92:e7:2f:9a:08:18:
a7:76:c3:d7:5a:96:53:11:6f:88:3a:9e:25:5a:8c:c8:2b:a1:
c7:9f:0c:26:86:dd:02:19:00:10:e3:19:68:f8:cf:aa:d4:e6:
bb:7e:b1:c9:ff:11:1e:81:99:70:aa:b7:23:2b:63:57:d0:b7:
52:f8:c0:a5:d3:99:ea:09:50:c8:3c:fb:8e:d3:4f:02:98:ea:
96:27:ac:d8:57:b1:cd:55:ed:bb:79:82:a8:b0:09:a9:f2:21:
91:78:47:3f:a0:2f:f5:2a:91:7a:f2:66:45:e8:8e:d5:c2:f0:
dc:ab:73:b1:16:9e:8f:52:6a:14:8b:a9:4c:94:8e:82:27:13:
c7:08:11:0a:ea:c3:a7:b7:d8:fe:7e:0d:a9:49:f7:50:63:6a:
df:a6:eb:3e:71:21:c6:6a:f8:68:c6:44:9c:d8:43:ce:9c:2a:
85:10:52:ea:c1:1a:40:97:c0:f5:9d:af:5a:ae:85:53:c4:15:
79:af:06:55:b9:06:a6:0c:d3:47:de:7d:11:df:d5:e8:dc:dc:
11:03:0f:96:49:5d:93:e5:1f:c8:39:ab:2d:13:8a:57:e3:0d:
ca:3b:f4:58:ea:9e:90:90:3d:30:09:70:d1:9f:4b:f6:8d:90:
99:5e:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:38 2025 by rpki-client