Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: zdsq0HfG4vLur07kD/ibZzCX7N5TmmLNsAYq2235m1Y=
Subject key identifier: A6:6F:23:16:EF:01:A5:D0:5D:39:8E:47:C6:78:82:03:D9:6B:CE:01
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01964B220C1B5D98EC0D6891A4FC1D3A70FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1501
Signing time: Fri 18 Apr 2025 23:00:44 +0000
Manifest this update: Fri 18 Apr 2025 23:00:44 +0000
Manifest next update: Sat 19 Apr 2025 23:00:44 +0000
Files and hashes: 1: 95gfeORrzFU1baOm9FNRF4z-Awc.roa (hash: yu0lodJztF5C/Epqr7ypdXxVzEpgYNXlQQQ9uDXoMnU=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: ICiKM1WVqOKnAHbiS3bFvk7GG6eYWDy0FgNJDUK6IsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:0c:1b:5d:98:ec:0d:68:91:a4:fc:1d:3a:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Apr 18 23:00:44 2025 GMT
Not After : Apr 19 23:00:44 2025 GMT
Subject: CN=a66f2316ef01a5d05d398e47c6788203d96bce01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:f1:eb:0c:db:fc:90:1e:cb:35:2b:75:bb:
04:0f:98:1b:43:8b:02:4a:07:89:59:16:9d:fb:08:
4e:59:ae:01:a7:db:f2:32:05:6e:4b:5e:69:b5:6b:
57:97:1d:fc:e6:b5:f3:df:2f:63:bf:5b:07:5a:ea:
9a:59:25:59:c2:ae:0e:6c:ea:07:30:53:0a:74:4d:
e3:a4:3a:c8:77:ed:3f:16:04:e6:6d:4f:2e:44:2c:
29:e5:ac:02:6a:b7:73:6a:65:dc:65:23:f1:06:58:
3b:b2:92:66:ef:d8:fd:43:82:7c:d5:b0:7f:4d:24:
df:3a:32:71:e1:ee:a7:e4:04:6d:5f:13:5b:00:e2:
46:2d:5f:ef:d5:2c:59:b4:f6:62:ea:39:f7:bb:d3:
e6:9b:4a:c1:28:79:97:b2:8f:19:10:60:fd:9f:16:
b0:9b:73:31:35:37:35:3d:1e:77:47:2c:e6:14:41:
5e:5a:40:95:db:95:7a:2c:67:43:64:74:63:bb:69:
74:ff:9a:29:a9:54:9a:89:8e:9a:49:fd:6a:14:22:
cf:45:6b:21:c2:8d:38:35:38:5f:51:50:d3:86:e3:
b8:af:83:86:4f:62:c6:f6:61:b8:64:b8:3a:f5:46:
54:1b:2f:e9:4b:77:49:cf:9f:1a:55:af:7c:58:67:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6F:23:16:EF:01:A5:D0:5D:39:8E:47:C6:78:82:03:D9:6B:CE:01
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4d:2e:f6:cd:9e:49:7b:3e:f6:ea:b3:ee:3a:72:d7:2d:4a:
63:c3:2e:7c:c9:53:77:5d:f9:79:a0:8e:f0:73:9a:d1:b0:ab:
c6:e3:3f:4b:de:cd:e1:87:14:14:7e:71:ee:d8:a8:4f:76:34:
7a:7a:cf:e2:42:5d:37:44:3f:f3:1d:2b:0e:5b:a0:1a:17:ab:
96:05:5e:4d:68:eb:8c:ef:28:53:c7:ba:2d:5d:01:6b:ab:9d:
95:e1:66:c9:cf:ba:00:91:02:e2:ac:f0:89:7f:e1:81:eb:a8:
8d:0c:36:f3:e0:5d:e0:f6:df:fb:9e:51:e0:65:a5:69:57:24:
15:0c:b4:54:2d:a0:2c:33:12:7f:8f:b0:30:b6:9b:b9:ec:1f:
6a:8a:df:f9:5c:aa:c2:c0:d0:12:ba:17:c0:52:91:88:c4:68:
b2:d5:88:52:de:11:5e:3b:b6:ae:f3:4e:b9:58:f1:f1:c4:60:
40:ce:24:8a:c1:64:6f:a4:03:ef:e5:60:0e:53:7b:66:86:f7:
5e:90:0c:de:2b:94:31:f3:89:cc:0c:d3:52:0c:ac:16:5c:c7:
18:fd:7d:48:a5:e1:c3:35:f1:3e:c5:b6:20:b1:af:4f:ba:a9:
64:f0:8f:8f:a9:99:25:c7:cf:0e:bd:49:7f:6e:2d:6a:c3:5f:
3c:6b:72:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:49:44 2025 by rpki-client