Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: nxINeWT0c0ha1+bfuQxU7rV/bxNOST8T6ivyDgV+/pc=
Subject key identifier: 82:26:98:16:CF:4F:10:2A:05:1F:33:A5:71:12:9C:AF:43:AF:CB:F6
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0196A0F6C18D3F3A9E981E94C0F5ED90B2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 1268
Signing time: Mon 05 May 2025 15:00:48 +0000
Manifest this update: Mon 05 May 2025 15:00:48 +0000
Manifest next update: Tue 06 May 2025 15:00:48 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: g0NlPf9XHXbir/yA8cJD/TAhBkFcb+Z7v7xNhe55GpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:c1:8d:3f:3a:9e:98:1e:94:c0:f5:ed:90:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: May 5 15:00:48 2025 GMT
Not After : May 6 15:00:48 2025 GMT
Subject: CN=82269816cf4f102a051f33a571129caf43afcbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:da:cb:15:21:d8:b3:e2:80:d3:49:1d:6f:
31:5a:61:c8:11:6b:db:fc:b1:bd:bb:a1:ec:0a:67:
33:31:b4:34:07:c4:55:02:6b:48:aa:00:d4:72:11:
26:07:e0:3c:66:d1:54:57:29:bc:1d:af:01:0f:33:
da:af:75:be:4e:95:37:73:9e:d8:10:4f:0d:9d:e5:
7d:5a:5b:a4:50:73:13:95:13:75:27:ab:51:7e:d6:
dc:3a:22:49:2a:8f:e8:84:eb:a2:45:f3:2b:12:90:
75:1f:79:36:31:3f:95:a0:1f:58:d3:38:ff:03:cf:
85:db:d0:00:c9:87:d0:b7:6d:ba:75:78:f1:ed:89:
04:23:62:2e:84:cf:53:06:76:7f:a7:ee:9e:b0:e9:
c4:85:ab:ba:ac:41:23:c6:c1:4d:73:95:cc:f4:c7:
36:86:f6:ef:4a:57:b3:5b:5e:83:77:6b:7e:14:cd:
fa:2f:d4:10:4a:8a:ca:fb:a7:b8:4d:5b:26:d5:15:
c8:8e:60:d5:f3:92:e9:50:bb:00:88:fe:bb:df:5e:
88:9c:14:f3:9f:dd:b6:14:ee:83:7e:d5:e2:92:ae:
a7:ce:c6:f5:6e:34:71:b8:e1:dd:e1:89:68:11:19:
d6:f7:06:a3:fb:8a:5b:30:2a:15:3e:53:1b:14:4c:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:26:98:16:CF:4F:10:2A:05:1F:33:A5:71:12:9C:AF:43:AF:CB:F6
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:39:33:2b:9f:a8:dd:cd:8d:fd:d9:8f:8c:70:42:b2:48:af:
d0:76:1f:37:23:1d:75:50:00:3e:7e:1b:c3:4f:52:6f:26:b3:
fa:ec:a6:1e:b1:e6:0f:89:1f:c3:88:2b:e9:c4:92:7e:38:42:
bb:78:5b:7d:5b:8a:4b:54:c1:59:6b:44:9a:ba:14:89:9b:c8:
63:c0:da:80:80:4c:77:48:43:8e:fa:a4:cf:1e:b8:7b:a2:0a:
26:c8:5a:84:ac:c8:84:e1:b7:fd:c0:15:af:1a:c4:29:94:e3:
d6:90:ae:de:a1:bc:23:1f:fb:fd:e5:81:2f:8c:c0:bc:8b:6b:
5c:7b:cd:ab:2c:75:2a:bf:9c:ec:ad:e9:1e:79:0f:2e:8b:9a:
10:e1:c2:36:7e:75:bc:7b:76:3a:41:89:ca:4b:97:75:5d:71:
12:ff:eb:a0:cd:98:23:1c:81:3e:91:b9:a9:83:9f:0f:5e:15:
a4:89:59:c3:e8:38:a4:1a:2c:3d:ff:10:3b:d0:af:26:39:95:
b4:54:5c:8d:53:bc:ac:81:82:0e:b7:87:74:6e:6d:1d:7e:71:
64:54:c9:cf:01:25:9b:9b:37:44:29:8b:a1:3a:96:eb:9f:ff:
dc:9a:ce:64:1c:fa:af:0d:f9:db:da:ee:ab:15:9c:9c:1e:8e:
dd:c0:e2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:04:46 2025 by rpki-client