Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: 2vd766jc/NlmHSEeOq7EvmX+VZp7S3FS79pskCHE5Ws=
Subject key identifier: 2B:E9:4B:E8:BC:3F:69:E0:9A:6B:BC:42:6A:EF:93:3D:5F:C1:F2:DD
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0196526D3F8A0915A9E071B0B704FE42C10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1499
Signing time: Sun 20 Apr 2025 09:00:13 +0000
Manifest this update: Sun 20 Apr 2025 09:00:13 +0000
Manifest next update: Mon 21 Apr 2025 09:00:13 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: TJuJGVmI4Y0br/u9r0WiyfoUs8OVPIB9L/CEkT+WGmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:3f:8a:09:15:a9:e0:71:b0:b7:04:fe:42:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Apr 20 09:00:13 2025 GMT
Not After : Apr 21 09:00:13 2025 GMT
Subject: CN=2be94be8bc3f69e09a6bbc426aef933d5fc1f2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:2d:a0:f2:c2:06:df:4e:2f:fd:34:dd:9c:
32:f5:74:9b:0f:d3:02:13:17:8f:0d:eb:98:45:25:
0c:91:3c:2a:e4:fc:a2:b0:34:f4:2e:12:1c:1d:09:
9b:4b:5c:da:41:53:7c:70:ae:01:9f:6c:1e:ab:cf:
fe:bc:b6:5c:cc:99:ec:9e:59:59:0d:d7:c5:c7:a2:
8d:62:0a:d4:8f:a7:0b:22:7e:82:88:ee:23:fc:7d:
f4:1e:7a:a1:b5:c2:77:90:97:f5:33:ad:8e:ab:00:
01:e7:a2:91:34:8b:f6:c3:41:f5:e5:09:92:b4:2c:
52:e6:86:b3:13:aa:ad:41:8c:82:68:4f:34:01:0c:
ca:e3:47:dd:38:d6:34:56:bb:2b:a8:20:17:eb:7e:
a1:71:03:4f:22:2c:ce:07:c5:ab:19:c4:ed:bb:7e:
e8:aa:20:48:17:8c:10:b0:b0:26:1e:d4:b5:82:3c:
a2:ae:8c:ad:0b:e8:45:37:eb:d4:c5:97:6a:8c:32:
44:0f:50:75:2d:c0:b9:27:41:90:a3:83:1a:f7:14:
54:db:29:a4:59:da:23:41:28:f7:90:46:97:a1:2f:
31:f6:10:c3:c6:b6:f0:37:b5:68:b0:61:f2:c7:bb:
b1:12:74:6c:0f:e6:e8:72:a9:7f:ae:be:cf:9b:12:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:4B:E8:BC:3F:69:E0:9A:6B:BC:42:6A:EF:93:3D:5F:C1:F2:DD
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:de:00:6e:2f:2b:3d:26:2c:eb:5c:81:90:f4:d8:82:6d:
4d:40:bb:6b:4e:a1:14:b3:ea:16:a8:88:ea:8d:97:ad:8f:f5:
64:b8:34:02:d0:71:07:f9:ea:40:f9:32:8d:ee:8e:78:04:bd:
5f:aa:50:9d:3f:11:15:e8:13:94:84:2b:8e:7e:d0:88:b1:41:
ee:d9:5b:03:8b:d8:be:36:08:11:0c:55:fc:b0:57:15:54:3e:
c6:24:c4:fd:1d:7a:32:f0:a5:08:de:f9:8d:21:a5:28:6c:ce:
91:7e:7a:48:43:be:d3:8e:91:9f:2d:7f:19:83:b9:52:65:ef:
75:dc:93:e4:38:cc:63:fc:71:9f:7f:72:ea:e8:98:dd:09:c0:
09:23:2d:43:de:01:1d:12:ee:f1:ad:32:60:60:8d:1c:d8:48:
61:85:6e:71:f8:e4:47:31:05:ed:eb:79:24:5c:d2:ad:b6:f6:
cb:0d:42:63:94:b1:30:ec:2d:0a:08:b8:87:82:70:e7:12:f1:
94:03:f5:7e:83:21:25:96:62:48:c4:67:e3:c5:e1:69:0c:aa:
40:f8:b4:69:5b:78:1c:d5:d6:c6:41:c0:be:66:9c:55:51:2b:
d5:17:14:6b:33:3b:4d:c3:a6:48:6a:15:64:7c:c6:1c:8d:67:
57:5a:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:58:59 2025 by rpki-client