Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: n9tcFvwZrNuWv70k5niWp440a+6kwv4jqN35jVzG8Gw=
Subject key identifier: 35:72:96:FA:07:CF:71:38:D7:02:7D:66:96:71:ED:CF:0B:62:CF:27
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 01965537933DAA842D5AFDDA8E35473EA91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: C3
Signing time: Sun 20 Apr 2025 22:00:27 +0000
Manifest this update: Sun 20 Apr 2025 22:00:27 +0000
Manifest next update: Mon 21 Apr 2025 22:00:27 +0000
Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: /D3rMCHbgTR5pB2ZskB8e1l7CwC0vSbWkBLo3BcoPw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:93:3d:aa:84:2d:5a:fd:da:8e:35:47:3e:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Apr 20 22:00:27 2025 GMT
Not After : Apr 21 22:00:27 2025 GMT
Subject: CN=357296fa07cf7138d7027d669671edcf0b62cf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:af:3b:c5:bb:f7:33:3e:72:03:df:3c:3b:
8b:2b:75:f9:a0:f2:e9:21:d0:42:05:27:07:de:2c:
96:e0:36:bd:bb:b8:8a:34:06:48:d2:03:58:30:b5:
0c:7f:7d:81:83:43:39:91:07:fc:bf:a7:ae:49:57:
af:0e:a7:26:c3:15:03:3d:14:3a:d9:08:4e:ae:ff:
f7:9a:02:5d:01:b6:9f:a0:1c:4d:07:48:b1:b6:a7:
73:80:31:37:6f:27:a3:88:42:a4:47:fd:27:aa:77:
27:f8:88:58:e6:1a:44:ac:b7:77:61:07:86:0b:cd:
e7:5f:ab:57:32:4a:46:7e:cc:1d:67:1e:bb:01:c5:
a8:6b:4e:88:a7:cd:34:58:dd:f7:1e:58:b8:ea:af:
22:ca:a8:60:15:e0:df:97:ce:b9:9d:67:08:e8:f1:
1b:6b:23:3a:8b:8f:64:ff:65:e8:20:3e:d2:4b:c3:
57:18:f5:a6:e6:14:fa:7c:ee:f6:9a:dd:4c:ca:08:
4c:14:2c:92:b5:96:88:c9:ef:46:a7:c3:c6:e6:c3:
fd:7c:9e:06:f0:af:34:cd:f7:e8:c2:be:49:ce:7d:
7e:05:84:9f:a5:a0:4b:13:cd:f8:cc:c3:61:5e:20:
a9:a9:0e:9b:e5:ca:05:d7:f9:08:a8:a9:6b:71:f6:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:96:FA:07:CF:71:38:D7:02:7D:66:96:71:ED:CF:0B:62:CF:27
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4e:3f:86:ac:8c:e7:ba:13:c8:a5:eb:e4:5b:c4:55:77:22:
03:c4:28:3a:f4:eb:9d:4f:78:71:1a:ca:fc:d9:76:87:fd:6d:
6e:80:9d:4c:77:0b:3d:96:bb:ef:f7:7a:df:3b:15:05:28:9f:
6e:10:11:7a:1a:ff:68:8d:44:39:b5:06:54:4a:d8:4a:80:d7:
65:f7:f9:13:41:a9:18:75:16:19:6f:94:26:03:97:4f:73:42:
3a:db:ed:d6:83:78:91:f9:56:93:71:e5:67:a3:73:04:34:fb:
22:3e:e2:38:a9:ff:be:be:3f:cf:f3:3a:9e:c7:a3:fa:c0:68:
4e:d3:4e:3d:e3:f0:93:2e:30:17:67:85:a5:b8:b3:dd:1e:25:
7f:8c:39:3a:c5:3e:3c:aa:4a:43:43:31:2b:56:27:d6:68:12:
8f:2b:ff:08:37:43:95:ca:03:b4:87:85:5f:82:4a:7f:e1:63:
95:54:26:b5:8c:51:c7:e1:f7:a8:4b:9c:d1:76:35:3c:6a:58:
07:35:e9:f1:e6:0c:e4:e4:c8:26:a3:53:24:5d:fc:d8:cb:22:
5f:6f:11:cd:99:8b:6d:93:0a:82:45:bf:71:a9:f5:63:7a:b9:
90:8a:1d:87:2d:58:06:8a:a3:59:bf:12:53:96:50:c9:e0:99:
1a:d5:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:32 2025 by rpki-client