Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: MFPfoKSZBSUApfxeLD8wk6W1y8cL4CPi34PHmJ51jBA=
Subject key identifier: 04:4C:1E:D7:92:2D:6E:5A:84:60:F5:8C:39:FE:CF:8F:6F:83:E8:DC
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 0196108E8717C65CAA7C599F2E116EFCDCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 0646
Signing time: Mon 07 Apr 2025 14:01:38 +0000
Manifest this update: Mon 07 Apr 2025 14:01:38 +0000
Manifest next update: Tue 08 Apr 2025 14:01:38 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: AL69FhubKfpkWgYscIWRQe3ENVYS7aEYiRCWYD6avp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:87:17:c6:5c:aa:7c:59:9f:2e:11:6e:fc:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Apr 7 14:01:38 2025 GMT
Not After : Apr 8 14:01:38 2025 GMT
Subject: CN=044c1ed7922d6e5a8460f58c39fecf8f6f83e8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:5d:c5:21:f4:6c:c3:cc:f8:99:36:a8:6b:
a7:5f:db:10:32:cd:07:71:c0:49:dd:1f:5f:9a:d9:
8b:8e:60:08:f2:df:db:92:ed:5b:f6:dd:4a:ba:62:
dd:21:59:8a:0e:5c:b2:dc:b9:0e:7a:64:e6:2a:4a:
34:ac:e7:ac:01:32:fe:10:b5:77:1b:b9:16:54:64:
0d:76:ac:e6:9f:a6:82:4e:7c:39:1e:8f:27:23:25:
bb:6e:14:92:7b:b3:27:2b:10:5f:c1:b4:a9:83:e1:
15:b6:95:b4:d4:bb:e6:a7:76:f6:60:80:e3:ff:cb:
1c:78:b1:9b:1c:3e:9a:ae:c2:6c:e3:75:b7:ee:6c:
b8:a2:67:e1:b7:6b:d3:00:cb:fd:2b:9a:ee:38:a0:
41:13:35:75:28:3f:90:41:59:45:01:17:cb:75:5e:
da:72:44:6a:29:db:de:5d:a5:5a:e1:ae:78:81:97:
49:4b:0c:c0:1a:73:b7:6d:c1:c0:70:17:56:a6:3f:
4e:03:e4:ce:6d:55:43:d2:01:4b:38:6a:21:3d:74:
e7:f0:1b:cf:a7:db:be:ca:dc:3d:ec:d6:9b:f9:9c:
00:7c:3b:4d:1b:7c:31:87:57:f6:09:c6:fa:33:a1:
c7:4c:a8:73:48:1c:c7:ad:10:be:22:5f:a5:50:91:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4C:1E:D7:92:2D:6E:5A:84:60:F5:8C:39:FE:CF:8F:6F:83:E8:DC
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:6d:99:04:d9:27:a7:32:7d:44:17:a1:d0:67:fa:ef:3f:
cf:54:15:dd:78:7f:87:29:d4:ee:ca:3d:59:8f:dc:55:cd:80:
ba:85:5f:ef:cf:7e:22:15:2a:81:ae:80:a6:42:fe:b9:2b:f6:
21:c9:f3:49:e5:55:3a:9a:34:ce:da:be:ab:8f:6f:55:99:53:
3d:67:ab:c7:62:5b:c1:40:a7:46:f6:0b:45:93:17:46:ed:3b:
60:ad:03:38:af:f9:4e:d3:11:c6:95:58:90:69:d7:dc:a7:39:
61:91:d0:0f:89:3d:d6:e2:07:c8:57:fa:05:b0:1e:0f:6c:fd:
8a:01:60:2a:08:c7:d2:9c:55:ee:b6:42:af:62:45:ab:a3:66:
64:fd:70:6a:6d:70:03:8f:c5:78:e9:d1:2c:62:db:c4:32:8f:
cc:cd:83:fb:ed:4b:b7:9f:15:a5:e5:73:d9:1a:94:24:5d:7c:
02:47:f3:6c:9d:c6:a4:bf:97:0d:55:c6:cb:cd:3a:21:95:dc:
71:3d:1a:cf:23:e8:72:53:fb:a8:7d:18:68:e3:a6:96:0d:41:
e3:be:cb:c1:bb:71:8f:0a:a4:35:04:42:1f:d5:0c:ed:7f:be:
16:3d:0c:97:db:83:cf:92:6d:dd:24:1a:fb:f3:04:9d:0a:95:
04:29:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:43 2025 by rpki-client