Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: USrWEmn5RS4iHNM5bBN7CGfstj+2ANt5mWqMATMDIdM=
Subject key identifier: 15:78:13:BE:66:DA:18:4B:45:2D:F3:FB:3C:8F:DA:0F:B2:2C:19:2E
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 0196496A692B07B20477ABCBC97B9C40A7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1506
Signing time: Fri 18 Apr 2025 15:00:32 +0000
Manifest this update: Fri 18 Apr 2025 15:00:32 +0000
Manifest next update: Sat 19 Apr 2025 15:00:32 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: U66mGG3Y8A4sBRmpQym2qej1efo.roa (hash: TlVlbRHV8GRl2ttGfufATtjwAKcckCzgbeG9Ag3deSU=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: kxKYwUY2+mk2AZoYoYt1Qv4Ad3ySb8iGfSXBrduJ74M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:69:2b:07:b2:04:77:ab:cb:c9:7b:9c:40:a7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Apr 18 15:00:32 2025 GMT
Not After : Apr 19 15:00:32 2025 GMT
Subject: CN=157813be66da184b452df3fb3c8fda0fb22c192e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:32:d1:43:36:59:5f:dd:6d:03:12:df:bf:
fd:db:ee:af:a1:24:16:de:cb:9c:af:ee:d6:3c:3b:
10:44:d0:a8:5e:1b:b4:91:17:ce:38:da:4a:e8:93:
15:37:1d:09:65:b3:e6:a2:6a:68:26:5d:25:61:1e:
02:39:d4:9a:c2:e8:3c:ef:ae:2b:5b:cd:ca:3a:88:
91:0c:dd:a1:dd:79:9b:e8:72:27:64:79:65:ee:8d:
af:19:e1:79:ce:91:73:92:cc:20:a0:c2:36:10:a9:
19:6b:86:9b:2a:a7:44:80:e6:ff:d7:a6:20:cd:7e:
b9:63:08:2c:4a:bc:59:95:1c:a9:ad:6d:76:e6:dc:
8c:0e:fd:2b:55:86:2d:0f:8d:86:9a:df:1a:de:f4:
0b:96:68:ca:a7:94:40:77:d7:bb:56:34:8e:0a:84:
96:4a:a8:73:cb:7e:ca:3c:92:43:16:82:d6:10:c0:
c8:56:69:40:8e:eb:b3:02:0c:5e:d0:56:99:aa:6b:
f5:d2:b0:8c:2d:b6:88:95:d0:e1:88:b7:11:d9:fb:
00:15:7e:03:18:f6:0e:92:57:c6:8e:3a:d6:0e:ee:
37:2a:7f:71:2b:f2:5f:67:4d:dd:bc:2c:3d:62:20:
eb:8e:96:4c:5b:e4:0c:5f:17:26:fb:aa:64:f1:bb:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:13:BE:66:DA:18:4B:45:2D:F3:FB:3C:8F:DA:0F:B2:2C:19:2E
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8e:ec:b7:b2:87:be:17:d7:9c:f5:9c:4f:0e:0f:fe:3e:21:
e6:83:ca:4a:52:28:fb:1e:23:4b:4e:bb:01:0f:0d:04:d4:76:
ac:9e:a0:5e:48:53:95:0e:28:6f:79:cd:3d:59:51:b3:37:84:
aa:3d:61:59:05:a6:e2:1d:d9:7d:7a:32:19:4d:e5:9e:17:fa:
22:f4:5c:c4:fb:fc:97:68:87:c8:cb:64:e1:f2:f7:ca:c7:d0:
22:c5:a1:27:2f:c1:2e:8c:97:f3:64:02:17:f7:23:b7:18:ba:
27:64:c6:d3:0e:ae:70:13:dc:7a:b6:02:d6:01:c6:2a:cd:7e:
32:c8:c5:26:e0:51:1b:31:f2:9b:1d:be:7e:47:ab:19:8f:10:
33:9c:98:69:92:f2:56:01:b6:ca:9f:81:f6:96:cb:b4:ac:3d:
81:9d:1f:d6:25:23:71:b1:f9:ea:2a:9a:f0:12:70:19:7f:54:
68:3f:0b:5c:5b:4d:52:40:88:b0:72:41:5a:85:fa:4f:6b:04:
36:43:02:0b:3e:85:60:cd:9f:90:8e:48:44:45:ef:bb:6d:4e:
bb:37:78:e3:f7:f8:89:d8:07:37:3b:c0:7d:3d:7d:4b:5c:83:
d7:38:25:e1:61:1a:a5:3b:33:52:c8:1c:eb:fc:00:bd:54:cc:
bb:eb:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:12 2025 by rpki-client