Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: gZBCSr0HXPDr5x5LzovD2G41BD00yy5QqT2GhY/6DjA=
Subject key identifier: 34:A4:06:DB:2F:B1:82:58:DD:72:9D:AE:00:69:8C:66:96:B9:AF:04
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 01964DECB07F240284B0CEA6B78EAB48EA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 12:01:19 +0000
Manifest this update: Sat 19 Apr 2025 12:01:19 +0000
Manifest next update: Sun 20 Apr 2025 12:01:19 +0000
Files and hashes: 1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=)
2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=)
3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: 1MltB92vd1aqpYBvaWMUX1YYlOeT37Ir8dOVIte+BSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:b0:7f:24:02:84:b0:ce:a6:b7:8e:ab:48:ea:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Apr 19 12:01:19 2025 GMT
Not After : Apr 20 12:01:19 2025 GMT
Subject: CN=34a406db2fb18258dd729dae00698c6696b9af04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cd:7b:bd:7f:d4:01:b3:82:da:f2:bd:73:4e:
7d:d4:cd:1a:69:f1:8b:c2:37:3a:9c:bc:80:39:01:
ba:96:74:b9:ff:fc:ce:ae:41:aa:d6:fa:f2:f4:f8:
0a:fa:ce:c2:d3:61:5a:3f:3e:50:d4:76:c0:51:92:
73:3e:97:b0:5c:fe:b9:56:63:00:69:5b:dc:e4:32:
57:cd:57:43:d1:b3:ae:89:2b:e6:f1:4e:9c:9d:59:
7a:d3:e8:48:5e:f8:22:b6:9c:3f:91:84:57:c0:89:
20:82:f5:4a:8c:c5:27:ab:13:42:04:83:f6:e6:70:
76:77:42:37:24:97:40:ec:2e:22:05:3e:05:ab:a2:
5c:54:b1:51:c1:0f:04:6b:6d:54:92:9e:39:96:c5:
21:a5:dc:ca:77:49:47:e8:5c:e2:f0:e2:5b:09:c0:
5d:b2:88:94:48:9c:ac:02:68:9e:00:8b:bf:bc:fb:
0a:d9:f5:85:71:86:28:a1:72:88:72:67:30:12:a6:
ee:ab:7d:da:fc:e2:57:c6:6d:a6:9d:77:bc:26:01:
a4:a3:fa:a6:a4:da:4e:9a:97:2a:2b:86:f4:c3:f8:
43:0e:a6:72:f4:4e:11:7b:42:b3:33:93:68:fb:2e:
80:35:c6:4e:7e:7e:f7:aa:70:08:9f:10:78:a9:99:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A4:06:DB:2F:B1:82:58:DD:72:9D:AE:00:69:8C:66:96:B9:AF:04
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:50:3d:c4:d9:97:cc:3e:38:b0:7d:2c:12:ef:31:6b:a6:5b:
2a:cd:30:ff:c9:77:eb:0f:6b:23:4a:4b:9e:fc:42:e0:b1:6e:
67:17:f5:f8:35:12:c2:bd:8d:19:0e:30:7e:0a:c5:82:d0:eb:
3b:c4:c3:2b:ab:52:7d:b1:ea:ba:5c:30:b2:ed:90:b8:d2:31:
4b:e3:9e:f0:20:72:93:61:19:6e:8a:9f:4a:d7:b2:06:be:41:
b1:2b:35:ce:dc:87:39:a2:7f:6b:71:5f:7d:27:4c:c3:ff:4b:
5b:22:c7:0d:86:28:9c:3a:89:17:ac:18:84:43:5c:24:33:47:
2a:af:67:46:16:02:36:c8:9e:33:97:81:81:17:e0:44:9a:cb:
62:23:cc:43:b1:99:f8:90:1a:71:3e:77:6f:11:c1:41:79:48:
1f:de:b7:8f:e5:48:37:aa:71:3a:82:29:fd:ff:9a:c5:7a:0e:
0a:5e:ee:1e:18:60:c8:45:ee:58:44:98:21:31:e3:b8:d4:e0:
cf:37:88:5c:29:53:4a:07:5b:d4:95:ba:fb:ac:2e:98:0a:ef:
9b:cb:2e:6d:ce:52:d5:e3:a7:94:45:cf:93:e1:49:d9:de:80:
9c:df:97:57:6c:b7:f7:dc:17:5a:c6:19:fb:1b:13:43:45:fd:
c4:13:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:03:54 2025 by rpki-client