Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: 8184RDd5fL5DAQ+BrSqO0UiMR0IdStyIAVY9+A1pZhg=
Subject key identifier: 87:D9:F5:51:CF:F5:83:16:B5:29:94:71:91:05:8F:07:F8:B2:88:5A
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019640675F6F0D509997CE6BE21683D05C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 21:00:38 +0000
Manifest this update: Wed 16 Apr 2025 21:00:38 +0000
Manifest next update: Thu 17 Apr 2025 21:00:38 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: tFO5bu5ZKW+wsbyTQvkawnEXxLmnVEMmHguQyOmj6MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:5f:6f:0d:50:99:97:ce:6b:e2:16:83:d0:5c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: Apr 16 21:00:38 2025 GMT
Not After : Apr 17 21:00:38 2025 GMT
Subject: CN=87d9f551cff58316b529947191058f07f8b2885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:80:11:39:22:69:ec:a0:74:ea:c0:2e:92:
6d:52:4a:a8:99:a3:c9:d6:5e:53:e1:b8:eb:22:81:
04:a3:98:f3:51:fa:ad:d7:31:cf:69:57:85:70:c5:
15:15:6b:6a:db:2f:cf:fa:cf:90:cb:11:17:3a:a7:
8e:56:fb:89:2c:84:c1:41:6a:fa:6d:2f:0b:87:8c:
ca:d4:d0:de:11:80:9c:9f:f9:52:ee:d9:b7:77:10:
e7:cb:92:d0:f6:35:cc:1c:32:c7:1e:87:f5:66:2c:
da:02:20:82:48:d1:20:69:c8:ec:bc:1d:ca:df:c9:
1a:68:94:16:e9:d0:6d:1e:68:fa:19:2d:e2:d5:e6:
81:3c:40:72:1b:c8:9d:a7:92:97:12:c9:66:4c:9d:
b6:d4:25:c5:67:a7:ea:a2:9f:e2:53:f8:6e:82:ec:
8d:d5:10:fa:22:81:03:52:90:37:dc:bb:e5:2a:9f:
52:3b:d9:09:2c:5e:a8:fe:2f:b9:8a:e4:db:b2:d5:
29:28:ec:82:90:e8:ae:a3:3a:e9:4b:e4:e3:a1:56:
88:82:69:34:e6:d0:66:8b:5a:1e:db:39:a0:af:ec:
32:68:ad:8f:d9:82:c3:80:94:bb:23:a0:46:1c:bd:
6d:05:cb:00:ef:b8:d2:fd:62:7d:94:7d:6f:3b:50:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:F5:51:CF:F5:83:16:B5:29:94:71:91:05:8F:07:F8:B2:88:5A
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:e3:f1:4a:36:4b:da:69:2c:ed:db:66:71:b2:3c:6c:49:
63:86:83:0d:99:45:90:25:e3:e1:32:78:ac:77:24:82:88:67:
bf:14:32:8a:15:46:a8:2d:08:78:ae:46:b9:2a:73:3d:ac:28:
d5:91:84:56:3a:ec:49:d1:a1:94:d9:45:c9:d5:3d:5c:fe:aa:
c9:6d:da:f6:fd:e4:f6:d6:b5:e7:b6:2c:1c:10:00:e7:c1:0c:
a2:32:6f:f8:63:27:e6:6a:02:d1:26:df:37:ca:50:a5:56:e2:
ee:cc:cd:97:b8:36:75:e4:d9:cd:a0:c7:21:61:37:3b:46:0c:
71:2b:2e:72:44:7b:47:6a:1f:a7:ad:cd:5a:f9:69:f2:59:dd:
83:39:aa:1e:71:05:b0:ee:ac:b3:25:08:51:7f:90:25:31:5f:
9f:ca:e2:72:35:40:16:5d:ac:c4:52:9b:a6:82:4e:74:13:ae:
43:a3:d5:81:fc:f4:6d:46:e2:94:9e:fc:ba:ee:34:f0:1f:81:
92:56:18:a7:98:f7:fc:67:31:42:5a:6b:8d:dc:c9:5f:77:cb:
04:f0:58:b9:ce:7d:21:02:44:75:3f:67:f5:ed:42:02:4b:3e:
f9:16:e5:7f:ac:af:11:e5:44:44:29:1d:da:b5:d3:4e:e7:6e:
50:b6:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:07:42 2025 by rpki-client