Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json)
Hash identifier: Rn1lZUMXYCsyGnOczS8HUmvZZKEhswFAku+73vD6K4I=
Subject key identifier: 54:A7:0B:41:14:05:4D:05:55:AA:C7:25:A6:2B:39:6D:D9:9D:80:5A
Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Certificate serial: 01965C4C78237C16AEECB609B02339040CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
Manifest number: 1202
Signing time: Tue 22 Apr 2025 07:00:37 +0000
Manifest this update: Tue 22 Apr 2025 07:00:37 +0000
Manifest next update: Wed 23 Apr 2025 07:00:37 +0000
Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=)
2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: dar90zZj0opsNAs9arNSQl09ZhrbCPEGSPhTK/nGxoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:78:23:7c:16:ae:ec:b6:09:b0:23:39:04:0c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b
Validity
Not Before: Apr 22 07:00:37 2025 GMT
Not After : Apr 23 07:00:37 2025 GMT
Subject: CN=54a70b4114054d0555aac725a62b396dd99d805a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:09:44:66:63:80:67:fb:f6:59:17:fa:6d:
18:8c:6d:53:01:d8:7c:0c:77:65:da:c1:1a:42:f2:
06:73:70:86:2e:2e:73:26:47:9a:d1:09:58:5d:82:
dc:2e:b6:2d:7b:e6:e2:5b:5b:76:c0:b3:11:eb:ca:
5c:ea:ed:5f:82:52:ce:68:dc:dd:5e:ce:ff:e9:ae:
47:b0:34:35:70:52:a7:d9:42:34:92:a2:16:65:9f:
0e:04:b5:33:68:aa:6d:2b:f3:8f:0d:59:1f:ce:39:
60:35:6a:45:18:3c:2f:bc:bc:4d:30:f7:e1:c8:c9:
cf:d4:34:bd:73:98:0a:c3:e4:f3:dd:09:d6:85:a3:
26:df:98:e8:10:0e:0c:ee:fa:45:5c:e7:56:81:8a:
35:da:f5:62:99:39:4c:1e:7b:f7:c3:02:5c:38:6e:
37:33:1b:88:1b:99:73:f1:2f:6e:f7:70:69:44:3d:
83:4a:2a:cf:fd:de:72:8f:69:b4:8d:6b:5e:33:19:
40:53:ac:5c:2b:8d:f1:17:a9:c7:ea:81:3f:c9:77:
f0:8d:2a:47:ca:52:03:3e:11:7c:e4:34:4b:23:65:
df:37:13:bf:6c:a1:6e:08:1c:03:2b:d8:57:2c:d2:
3b:6a:fe:56:ec:03:4e:5c:52:b7:e1:e4:76:d3:ac:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:0B:41:14:05:4D:05:55:AA:C7:25:A6:2B:39:6D:D9:9D:80:5A
X509v3 Authority Key Identifier:
keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:f1:50:7b:e3:c6:ca:dc:a5:84:dc:5f:3d:55:96:50:55:
66:f4:7f:62:82:9f:03:23:fa:fa:45:55:fc:26:ba:cf:dc:f2:
a1:f8:b4:df:dc:bc:a3:84:75:54:ff:92:5c:e8:a2:be:d9:09:
a2:db:78:74:35:e2:81:04:3a:3f:cb:41:a9:c0:eb:00:19:0b:
30:55:54:b8:ec:1e:70:7f:75:c8:5c:13:e3:d8:d3:03:49:2f:
82:4f:0b:cb:ed:92:90:d6:87:98:dc:c6:66:c9:7b:ff:53:ea:
66:e4:57:1d:fd:df:c8:86:96:4d:a3:e7:f5:20:da:b6:f2:a8:
48:59:fe:b1:89:b9:f7:64:50:d3:5c:18:07:5c:be:03:20:e8:
6d:ec:d6:ea:b7:48:05:94:3b:4a:18:67:e3:5d:f9:57:6b:25:
49:fc:44:0e:b2:57:51:a4:c0:ed:a3:b8:28:dc:3a:9a:ad:58:
f2:20:60:d9:25:3c:29:fe:db:f2:a3:b3:46:9b:29:c8:6c:89:
25:a2:be:74:24:1b:d9:8c:27:34:67:fa:ca:11:8f:e3:a9:44:
26:62:60:35:80:82:5f:1d:12:b9:45:00:fe:19:8f:0f:1a:d8:
84:4a:b2:37:bd:e6:3c:75:54:d8:d3:ff:23:73:ca:19:2e:1a:
b4:25:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:33:18 2025 by rpki-client