Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: qYDuoVN6vXkxpEy+eLxqa0TZalnJQmotdoJ6VHspyow=
Subject key identifier: 73:BE:F2:20:56:9E:2B:CC:EE:80:33:88:CB:79:E0:AA:40:4C:FB:11
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01958BF20C88C0DCF2D4A1D3C58462DBF3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 149E
Signing time: Wed 12 Mar 2025 20:00:50 +0000
Manifest this update: Wed 12 Mar 2025 20:00:50 +0000
Manifest next update: Thu 13 Mar 2025 20:00:50 +0000
Files and hashes: 1: 95gfeORrzFU1baOm9FNRF4z-Awc.roa (hash: yu0lodJztF5C/Epqr7ypdXxVzEpgYNXlQQQ9uDXoMnU=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: lyGAfqnssBubXa5dshI8+V2HEodqfPSQb6nGT2jDGjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:0c:88:c0:dc:f2:d4:a1:d3:c5:84:62:db:f3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Mar 12 20:00:50 2025 GMT
Not After : Mar 13 20:00:50 2025 GMT
Subject: CN=73bef220569e2bccee803388cb79e0aa404cfb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:46:b0:6c:72:8b:58:70:5e:41:4d:98:71:
c4:6d:5b:38:68:bb:7a:44:f0:85:cd:14:7c:e9:6c:
bc:0d:4f:da:75:64:a4:12:c4:05:ca:1d:4e:3f:fc:
f4:5f:f3:d2:b9:6b:3b:d4:9a:0f:4a:ac:ad:0e:58:
9b:85:4e:15:d0:f5:be:b8:b6:03:1b:51:c9:b8:d9:
19:60:fb:d7:25:73:a3:81:cd:b4:f8:95:d1:43:97:
66:fe:2a:3a:9f:f6:55:16:41:52:8b:95:71:68:9d:
e2:68:cc:d2:6e:6a:a7:53:9b:45:35:c7:60:59:c9:
f1:24:1d:96:1c:95:b0:7a:13:dd:b5:34:82:99:c6:
89:9f:5c:2d:fb:b2:85:35:f3:4a:b0:72:56:82:02:
d5:12:d2:56:9e:38:a6:0c:bf:c8:d5:15:9f:fd:64:
92:c3:27:62:e0:c5:9c:ef:46:fe:52:fa:63:a5:1c:
ad:e2:3b:bd:fa:3b:29:43:2a:67:ef:8f:ad:46:a7:
8b:96:3f:62:90:f4:b2:27:c3:5e:da:c3:66:56:a3:
37:48:90:7c:73:59:42:72:26:3f:86:2c:44:f9:c4:
c0:ef:75:2a:08:1d:df:18:b8:68:ea:7b:78:6f:63:
ef:af:2d:3a:17:2c:eb:40:4d:3c:63:56:e4:06:3c:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:F2:20:56:9E:2B:CC:EE:80:33:88:CB:79:E0:AA:40:4C:FB:11
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:2f:7d:d8:37:4e:2b:6a:87:1f:fb:ae:85:8d:dd:4a:24:
6f:cd:dc:56:20:ff:94:a7:f7:79:aa:c5:11:a5:c5:09:0f:be:
fb:82:87:da:f2:94:d2:e4:34:c3:98:4d:6c:37:26:86:de:d1:
28:2d:14:b8:bf:61:e4:b9:93:20:72:74:33:68:7a:f1:74:3c:
ef:63:4d:57:ff:bf:5a:6b:9d:1a:cd:de:7c:39:2f:6f:d5:21:
24:96:55:21:1d:a9:6c:53:a1:d4:f8:20:91:1a:a5:e5:73:31:
19:4d:fd:0d:24:fc:66:ca:f0:22:ed:98:fd:37:da:7e:8c:d3:
18:3a:da:76:1d:3e:da:5e:7e:8d:1a:f6:0a:92:d1:bc:53:ed:
7d:14:17:b6:8c:e3:7b:bc:98:0f:20:eb:82:34:c4:fd:6a:f4:
ac:24:76:26:e0:98:ed:f4:d9:5e:d1:2f:34:db:7c:07:bc:a6:
88:2b:9c:9e:c2:2c:2e:77:02:da:5b:c5:b1:ea:08:69:7f:db:
7e:51:e8:4a:38:1e:6e:22:64:aa:a6:08:f2:ca:ea:5f:6f:af:
d1:d8:c4:a0:c1:42:56:dc:1a:80:89:b0:5b:60:21:5b:c6:a7:
0e:16:aa:d6:46:80:bf:71:1d:41:8e:72:fd:88:b4:49:60:9b:
ea:f0:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:22:13 2025 by rpki-client