Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: TdNEgSCXd0R9aiv8WgegwiZAnUksfeVRhWwXm4x6IjE=
Subject key identifier: 52:54:9F:0B:11:D0:D9:20:F0:39:1F:B0:E9:BC:B3:B3:76:9E:BC:18
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 01965424B14C44316E2D8829FC02847C5D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0BEA
Signing time: Sun 20 Apr 2025 17:00:12 +0000
Manifest this update: Sun 20 Apr 2025 17:00:12 +0000
Manifest next update: Mon 21 Apr 2025 17:00:12 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: Cdtjf1alGVRn5tOT0H9JXae5DWduhoGIWSY8w56HapQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:b1:4c:44:31:6e:2d:88:29:fc:02:84:7c:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Apr 20 17:00:12 2025 GMT
Not After : Apr 21 17:00:12 2025 GMT
Subject: CN=52549f0b11d0d920f0391fb0e9bcb3b3769ebc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:86:d5:ff:a4:78:85:f1:9b:87:4d:90:82:
27:10:92:84:e4:28:8e:dd:da:c8:aa:7d:55:c8:59:
f7:30:8e:8c:9d:08:37:d7:6f:eb:6d:8a:eb:cb:e4:
d7:a0:61:73:a7:30:17:3d:57:1e:89:cd:54:c5:88:
c6:74:bc:75:21:09:cb:89:ba:1a:f6:f0:22:1a:c5:
00:b0:5b:9a:9a:e4:6f:32:c7:26:df:31:88:72:69:
70:a0:65:6a:7d:15:f8:c7:0a:ed:8b:6d:d9:ed:0c:
12:6c:c7:48:ab:8f:76:69:a7:f8:29:41:db:a7:69:
f8:05:47:8b:68:34:44:96:88:c7:42:08:d9:a4:c4:
ae:fe:30:b7:d6:12:a5:82:8a:db:60:b1:2b:b5:6d:
79:2b:59:0d:8f:24:b5:5f:d8:fd:4d:24:25:56:b3:
85:07:cd:ef:6d:d5:24:c8:63:6c:c4:42:2e:7a:3f:
f3:36:f0:77:e6:0a:1a:54:53:3f:89:59:45:89:e6:
65:0e:e6:13:d9:22:24:de:00:a9:da:8e:c1:29:15:
59:55:10:cd:de:35:fb:f3:b4:29:5e:ea:42:f0:af:
fb:21:5e:a9:0c:c4:18:68:0d:bf:25:1f:91:9d:4b:
1e:12:b7:3c:ff:73:7e:10:3b:3d:08:bd:ae:f6:4c:
78:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:9F:0B:11:D0:D9:20:F0:39:1F:B0:E9:BC:B3:B3:76:9E:BC:18
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:48:ae:83:e1:7d:d4:50:05:05:89:9a:46:af:1c:4b:53:
e6:78:39:21:04:52:49:54:40:b8:55:d9:7a:be:ad:cd:f9:62:
bb:e5:19:f1:44:a0:cd:c8:d4:10:2a:cf:63:f0:4e:88:2d:73:
b8:c7:20:f2:da:f9:16:ae:8c:5c:ee:ea:c9:c7:0e:4d:72:6f:
bc:c8:fe:15:8c:47:29:86:0f:e8:d1:b1:53:f5:28:58:a0:31:
80:85:19:35:f3:c4:21:78:b1:c3:c6:08:b3:d0:a6:f8:14:d6:
1d:05:b0:e8:91:72:7c:10:3f:18:b0:0b:7a:22:ce:7e:6d:0b:
a0:89:04:f0:76:51:97:33:8e:96:f0:c2:ff:f3:42:a3:d0:8a:
16:82:16:83:3a:10:c6:d8:9e:28:ae:99:2e:9f:f9:51:a1:d3:
f4:f1:14:8d:7a:79:c8:39:76:76:d7:79:2e:c2:c4:e7:1d:3d:
bf:29:f6:aa:2b:4e:e4:16:6b:3b:cf:71:34:68:6c:8d:1a:ef:
9d:09:44:db:50:f3:d3:b6:17:e0:5c:28:e4:76:82:19:e5:fc:
3c:26:7b:79:1b:78:36:01:72:b8:04:ff:41:6b:84:57:f3:e1:
4d:1d:06:8b:d5:b7:36:13:df:37:23:6f:65:da:82:af:b8:ee:
b8:80:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:04:15 2025 by rpki-client