Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: +yOLw/IV++o3yQXYdNq7O/nbE/Jsrsp0Ov1i2shyrYs=
Subject key identifier: 00:53:0E:AF:05:1B:0C:6A:5E:54:A0:64:C3:AE:37:9D:09:F0:61:A2
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 01958CCE371903453BA2B8B64EC5FECF3370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 09C6
Signing time: Thu 13 Mar 2025 00:01:19 +0000
Manifest this update: Thu 13 Mar 2025 00:01:19 +0000
Manifest next update: Fri 14 Mar 2025 00:01:19 +0000
Files and hashes: 1: BJWbU3h0q9wVWOT-c9CXfkXxzTI.roa (hash: z+J9qT8t5WHyrsd9FbLlrFZCDxCHuS4qBPoI0V7XSRI=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: UgQfm1P6dmBI4vlDop4HErR9Ilolec4obpdJ022a7eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:37:19:03:45:3b:a2:b8:b6:4e:c5:fe:cf:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Mar 13 00:01:19 2025 GMT
Not After : Mar 14 00:01:19 2025 GMT
Subject: CN=00530eaf051b0c6a5e54a064c3ae379d09f061a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:4a:54:38:60:2b:cc:4e:d0:e2:a9:7b:29:
52:7d:b3:95:bc:7e:f1:cd:19:ca:98:5b:b7:ab:55:
2a:a6:cb:f1:4f:c5:01:f5:27:dc:ca:08:e2:6c:cf:
9f:06:27:9e:5a:0b:b4:59:40:08:02:08:f4:0e:b6:
a8:41:37:ce:d4:12:25:09:3f:b9:1d:ce:fb:1b:29:
60:8b:ef:78:50:af:86:bd:cf:8b:e3:ea:30:4f:09:
98:a8:0e:87:59:a7:95:3f:8b:51:65:46:58:01:ff:
34:51:38:2a:25:11:ff:c4:35:4a:f8:20:66:ae:b5:
ae:a4:99:93:84:93:ad:23:d6:00:d2:4d:6d:a9:c2:
d6:6e:ae:0e:95:29:b5:e8:83:fe:d6:6c:b6:3c:e2:
fc:3a:33:b9:29:e6:98:ba:5c:1e:ba:ef:4b:2d:45:
03:a1:7a:2a:49:9e:b5:18:a0:cb:9a:b8:bf:1f:85:
f9:6a:bd:06:bd:43:4e:f6:cf:d4:1c:5d:2c:6b:19:
94:35:60:74:b0:6b:1d:07:a0:6b:9a:4f:bd:27:e6:
f4:de:f9:93:ec:dd:14:88:af:eb:43:af:24:44:f9:
c9:c1:a5:40:0e:35:8f:0c:26:f8:ef:f1:0d:3c:4e:
f6:03:af:1d:ac:da:f4:42:37:49:bf:f8:5a:c0:48:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:53:0E:AF:05:1B:0C:6A:5E:54:A0:64:C3:AE:37:9D:09:F0:61:A2
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:81:c2:b9:08:b6:42:d6:ec:72:f3:e7:aa:ac:7d:33:b0:68:
ee:fd:62:64:37:46:11:45:f9:75:26:49:3a:77:c7:ae:ec:b3:
f3:31:d2:d9:f6:77:db:63:11:6d:c2:06:f8:65:61:ab:76:78:
8f:7b:c9:24:56:88:82:87:4e:13:0c:1c:4e:d7:fe:34:d4:56:
f3:c4:62:ba:d9:eb:31:6d:87:43:e9:fc:91:b9:fd:16:48:c6:
ba:72:95:2a:49:59:85:c8:77:0e:a5:5a:13:eb:85:fc:ed:22:
47:91:d2:97:2c:48:f2:4e:7d:42:e8:45:71:3c:60:cd:bb:2b:
b5:ef:b2:8f:90:90:39:b5:f2:46:60:14:4a:ae:c5:4d:88:3f:
07:63:b6:ff:00:f4:65:a4:d2:73:cb:7f:9f:9a:e2:13:3e:8c:
63:3d:b5:ab:fd:a5:26:b4:b6:78:8b:1c:d8:21:ec:b9:0c:80:
2e:3f:ac:00:d2:b0:6b:a5:6c:1a:f7:7b:4f:a0:40:99:4a:b5:
25:d9:92:bf:c7:6f:80:dc:83:62:61:4d:fd:a1:98:55:24:16:
64:1e:82:be:7e:12:22:5b:20:aa:20:b2:e6:48:08:57:0c:2b:
51:1e:91:5d:8d:48:bb:ef:63:3d:d2:64:ea:33:dc:8f:89:40:
3f:12:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:08 2025 by rpki-client