Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: uevEWPc27G/9/koVbWYXIs2YYKTloBZaYjMQF3uWHCU=
Subject key identifier: 00:E7:24:0D:8C:BC:3C:1D:F0:01:35:A5:DA:44:09:19:BA:56:42:39
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 01964067EF9DE0E4B04F5BC37D94CE331653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 21:01:15 +0000
Manifest this update: Wed 16 Apr 2025 21:01:15 +0000
Manifest next update: Thu 17 Apr 2025 21:01:15 +0000
Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: iH20+R9y/q0P6Wj78/Os2bQpalpVPtvGGMaylwpjZmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:ef:9d:e0:e4:b0:4f:5b:c3:7d:94:ce:33:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Apr 16 21:01:15 2025 GMT
Not After : Apr 17 21:01:15 2025 GMT
Subject: CN=00e7240d8cbc3c1df00135a5da440919ba564239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:4b:b1:27:54:7d:3b:d9:bf:c9:d7:e7:25:
8b:67:03:53:17:30:a6:9c:7c:72:a0:65:c4:ba:3f:
3c:75:6b:5a:ec:f8:8b:30:02:1c:70:cd:ca:2f:98:
f1:9f:3b:73:70:bc:c5:a9:50:eb:f0:2c:13:e9:ee:
3e:25:55:2e:b4:17:a4:16:30:26:b4:8e:c9:c3:4c:
2d:4c:f9:47:54:94:23:77:c1:eb:7c:f7:7e:88:d9:
db:2e:f8:ad:04:58:a5:fc:d9:79:75:19:f8:92:b8:
20:1c:2a:f2:ce:18:9e:aa:1a:0e:49:6d:aa:17:fa:
df:fc:a2:f5:f3:59:f2:8b:95:cd:47:2f:54:1a:4a:
ea:88:a0:85:4a:bb:e9:62:d0:25:64:c7:17:b0:97:
14:fe:80:f7:4a:64:ef:3d:f1:69:9a:ff:8e:c6:3a:
f8:d4:20:ca:14:bb:ff:7e:d1:82:14:6f:67:3c:97:
74:bc:98:ef:8f:35:0a:7e:3a:ff:3c:0d:be:f2:4e:
be:9f:40:6d:6f:bd:89:0a:52:62:ce:e2:d1:92:48:
43:57:40:1b:61:96:66:90:9a:4d:a0:4e:8f:01:e4:
ce:65:af:11:6a:a7:3b:e8:7d:1c:ab:2f:ea:31:5f:
d7:00:48:f7:b9:39:0c:44:88:f8:a2:75:49:e4:38:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E7:24:0D:8C:BC:3C:1D:F0:01:35:A5:DA:44:09:19:BA:56:42:39
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1d:f0:fc:5f:e6:f7:88:f0:85:2b:96:00:0b:20:58:0e:49:
dc:38:3a:42:b0:df:34:fd:a9:d5:ea:16:c7:9c:59:cf:81:dc:
79:6c:3f:f3:48:83:5b:a4:5f:5e:56:8e:d8:b9:f5:c0:c0:46:
1c:58:fb:90:9b:25:46:ae:f9:29:4f:0f:0f:b9:e1:17:8a:d4:
b4:2d:21:07:53:86:1f:a4:b2:eb:6f:f7:08:f7:bd:bb:e0:28:
2a:35:29:3a:b2:08:77:0a:07:54:94:7a:ad:fa:3b:a5:f3:d0:
86:5c:30:a5:d8:b9:04:cf:f4:c9:7b:f7:de:f6:49:53:e6:6d:
6e:f1:37:c5:99:86:c2:8c:25:71:1c:65:29:83:2d:ed:f7:9e:
8f:61:f1:d5:fe:81:55:b8:ce:f6:01:1c:91:76:1b:61:8e:63:
69:e4:18:5e:5f:8c:06:50:e4:14:56:8a:50:ae:3f:63:70:7d:
5b:d4:78:05:2f:bc:0d:e5:93:a1:dc:b9:17:96:9a:af:46:39:
c3:3d:62:1a:b6:4e:46:ec:1b:b1:ae:7c:54:0e:ad:9e:a6:c7:
b3:53:39:57:5b:ee:9b:be:7f:d1:2e:70:14:02:eb:d9:0d:d3:
47:d3:84:df:a4:9e:ab:d7:90:49:39:14:63:69:ff:75:48:5f:
9b:ca:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:08:17 2025 by rpki-client