Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: 8c/HjQfOIxB0EDp+UFz1W9Ck3LnMsQMGdIe7oz5YoNA=
Subject key identifier: 72:B3:DD:43:E8:66:B8:D3:54:93:26:99:43:36:79:4C:31:60:04:05
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 019644B1C925F8D5F7691E212532E8AF5FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 17:00:24 +0000
Manifest this update: Thu 17 Apr 2025 17:00:24 +0000
Manifest next update: Fri 18 Apr 2025 17:00:24 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: 5e93Q1C6P7GkzNq7g7kTiNiA7TBazhackZc44hOVWEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:c9:25:f8:d5:f7:69:1e:21:25:32:e8:af:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Apr 17 17:00:24 2025 GMT
Not After : Apr 18 17:00:24 2025 GMT
Subject: CN=72b3dd43e866b8d3549326994336794c31600405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:4c:53:42:be:62:27:a7:e7:66:d2:f8:95:
81:2d:2d:4c:74:ba:da:ec:f7:79:b9:8a:13:ba:51:
29:2b:77:a7:5e:56:8d:ec:14:29:1b:bd:99:a4:34:
b0:4a:b2:b5:fa:b9:db:07:c3:7c:d4:c2:fa:47:8e:
63:6c:65:2b:b5:46:98:ce:7f:06:60:07:71:51:15:
78:18:a8:a7:70:0a:47:51:86:f5:ac:0c:c4:3d:09:
f5:0f:04:e1:0b:ff:3f:a9:e1:7d:cd:0d:ff:0a:36:
e3:71:03:cb:8f:e4:88:68:48:b5:11:d4:83:7b:44:
5c:1c:83:99:02:66:e4:57:77:3f:98:00:22:75:f9:
b7:a3:cd:0a:60:fd:f1:df:61:de:cd:5a:12:8b:45:
10:d4:33:33:2d:7c:9d:c9:2d:00:33:e1:00:c6:4c:
f4:e0:10:cc:2f:2d:b1:9d:f9:2e:f7:de:6c:3a:11:
c5:3c:b1:67:15:42:83:d6:a4:a9:8c:02:dc:8f:a8:
27:dd:f7:d4:f8:c6:56:ad:61:99:9d:9a:06:b4:a0:
a5:f2:45:6a:39:66:c2:d2:62:fe:b4:c5:25:54:fd:
a3:16:1d:90:34:83:e3:7f:00:d9:f1:70:44:2f:a6:
f6:cf:6d:9b:9b:db:64:5f:57:5c:09:fb:3b:56:7a:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:DD:43:E8:66:B8:D3:54:93:26:99:43:36:79:4C:31:60:04:05
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:16:ef:44:10:07:0e:e1:69:e6:01:0e:4a:31:58:5f:35:aa:
bb:78:74:7e:0a:20:11:ce:0f:25:c1:87:49:4b:b6:bd:7c:55:
e5:25:40:72:89:d2:6d:d2:ca:fe:d2:5a:a6:dd:c6:1c:7f:e6:
88:1e:84:17:8e:4c:05:dc:b5:b1:b0:cf:ef:c1:eb:4d:7d:6c:
68:61:b9:10:f9:92:4f:95:a9:d2:26:5b:c2:a6:38:ed:ca:77:
74:5f:e7:67:be:38:33:46:81:fa:8c:a2:b6:7a:c3:40:b4:0a:
00:dc:56:79:a8:19:3b:fc:85:88:fc:c9:38:29:be:a1:0b:1e:
50:48:11:9b:3c:e4:ec:31:19:1a:ff:ae:09:b7:9f:ba:75:2b:
68:df:c8:39:93:de:93:55:a1:77:c9:2e:69:e1:67:e5:19:ff:
58:1b:a4:50:b7:c8:b7:69:30:50:7c:3d:63:cd:a4:c4:43:a1:
79:87:b0:5c:9d:e9:bb:f3:c8:41:4c:ca:fb:e4:8c:7e:74:6e:
f7:d9:cb:bc:d3:1c:71:a5:06:3e:b2:9c:cf:81:4b:57:3c:90:
19:c4:71:69:28:99:6e:08:80:f7:da:6c:44:76:11:e5:f4:50:
b5:19:07:b3:e4:01:75:33:ef:5e:54:7a:96:28:00:86:a0:cf:
41:ca:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:35 2025 by rpki-client