Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: F4/TS3zSUBkHtaMN/zaA4wMa6yuPb9r2Q2+l1YOnCk4=
Subject key identifier: 95:CD:BC:8C:4E:25:6C:04:6B:64:E1:56:01:30:28:F7:81:EC:E0:86
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 0196447B00B4417B8CD061DF2E4A6DA6A186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 16:00:33 +0000
Manifest this update: Thu 17 Apr 2025 16:00:33 +0000
Manifest next update: Fri 18 Apr 2025 16:00:33 +0000
Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: XnxOX36if5DnPtnY/0IG1L422/mcrGDw/jKGaj+xdd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7b:00:b4:41:7b:8c:d0:61:df:2e:4a:6d:a6:a1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Apr 17 16:00:33 2025 GMT
Not After : Apr 18 16:00:33 2025 GMT
Subject: CN=95cdbc8c4e256c046b64e156013028f781ece086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:8c:41:5b:22:06:74:8f:50:ff:ef:18:60:
c1:4f:d3:2c:87:c4:75:78:3e:65:c3:45:7a:33:58:
1a:4a:35:2d:b2:a5:5a:7a:4a:66:d4:1d:18:be:a6:
5b:8f:37:17:e2:38:52:b9:cc:8e:7a:5b:8c:1a:d4:
a0:12:e7:fb:1d:f4:62:b5:8f:e4:77:af:27:cb:8b:
5f:d3:66:d5:46:8c:d8:b7:b8:6d:d4:4e:15:db:65:
9d:0c:ec:25:a7:97:31:24:4d:84:4e:8d:ab:b5:f4:
2d:06:29:df:a8:a2:f7:fd:60:dd:05:59:62:db:26:
50:f5:a2:62:d8:9b:84:f8:de:31:22:dd:e2:22:de:
dc:7b:be:de:f4:cb:2e:25:1e:80:f6:12:0d:70:71:
93:bc:53:90:b3:2f:5d:29:58:1d:de:02:c5:19:c9:
48:5e:8a:5f:4a:b1:24:a8:65:53:96:0a:0d:50:5c:
27:90:b4:9a:95:c0:94:65:37:18:43:63:f4:75:fc:
d5:0b:54:d1:ff:1d:3e:73:6c:89:03:8e:b3:f2:1a:
1b:b5:30:f1:30:b3:02:4b:3f:69:ad:0c:82:4d:ee:
01:18:5a:e0:bf:26:7e:d4:19:1a:af:99:75:05:c2:
f3:ab:86:d3:d6:90:24:32:7e:62:ea:18:1f:55:cf:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:BC:8C:4E:25:6C:04:6B:64:E1:56:01:30:28:F7:81:EC:E0:86
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:69:17:6f:40:76:b1:ed:c6:bb:b6:88:a0:6c:57:0d:1b:ab:
a1:6a:e5:65:9e:27:dc:bc:b6:f4:4b:1b:15:20:b7:53:3f:27:
30:4f:17:bc:d5:c4:90:90:2f:0a:93:fa:f6:98:ec:c4:5f:ed:
cd:55:a1:ee:75:b1:dd:2c:6c:71:51:6c:e6:55:34:13:2c:6b:
31:8c:68:27:da:ba:4b:fe:07:14:bd:19:c9:ea:f9:98:48:31:
52:b6:65:bc:d5:a0:c0:77:d2:7e:54:05:0b:1d:bb:b0:84:f6:
b6:a7:a8:7a:eb:f4:92:5a:0d:fe:cd:74:c5:3f:9f:fc:ca:65:
72:72:55:51:21:8e:a3:47:a3:16:c4:84:29:57:53:3e:38:b0:
70:5a:50:08:19:68:ba:04:8e:7c:69:e0:60:65:13:f6:a5:6f:
0a:9c:93:52:30:78:e0:08:45:a1:93:8b:0d:06:62:b2:b2:fa:
71:16:f1:e7:a6:66:0b:bb:7d:2a:dc:1b:e9:f9:a7:03:53:e7:
cf:db:c0:c0:13:0a:f5:a4:28:27:9b:41:eb:01:ff:ff:ce:54:
0c:26:33:cd:5a:08:e8:ca:52:0f:e1:42:8c:e1:96:b9:54:dc:
33:22:06:b9:98:fc:fc:d9:ec:a1:0e:31:0f:b3:fc:c5:2b:e8:
68:4b:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:38 2025 by rpki-client