Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: pCFjsNlg0Uptp6pblp9DXWeiDOqv+QzkfA49opOWihA=
Subject key identifier: DF:8A:BE:44:D0:AC:11:8B:5F:60:D4:A4:AF:80:61:56:CB:13:9F:03
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 01969FE3CF954A1C47AF7409EF22C9B614EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 10:00:28 +0000
Manifest this update: Mon 05 May 2025 10:00:28 +0000
Manifest next update: Tue 06 May 2025 10:00:28 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: zPcmyYWmV3uuf9GBID7NzufUxwikTgb9hl86ulNgLXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:cf:95:4a:1c:47:af:74:09:ef:22:c9:b6:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: May 5 10:00:28 2025 GMT
Not After : May 6 10:00:28 2025 GMT
Subject: CN=df8abe44d0ac118b5f60d4a4af806156cb139f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:71:05:0e:8c:82:42:e4:c6:66:b2:e3:ab:
c3:bf:ab:b8:ca:fd:16:82:a9:62:6f:89:83:46:b3:
d1:24:6c:1a:ff:39:5e:20:8b:63:41:4a:54:2c:77:
c8:8a:62:37:29:11:a8:a5:15:00:4c:37:08:25:0d:
53:90:1d:cf:91:17:8f:8f:fd:ed:53:1d:df:f0:00:
8b:53:c7:2e:79:29:2c:98:33:ce:03:97:16:26:a6:
b1:d7:8e:15:70:81:5e:e4:63:68:1f:30:f8:97:6a:
b8:d5:da:65:63:4d:d3:af:e6:5d:8b:eb:04:55:cf:
9d:d5:0b:85:23:27:92:b2:a0:e6:2e:c6:05:5c:a5:
35:8a:a5:b4:76:e8:bb:5b:97:a2:d6:f1:44:49:64:
65:45:2d:69:89:97:b8:0c:2e:fe:74:61:81:58:89:
f2:56:3b:67:76:53:0d:81:4a:f4:5b:d4:1c:56:a7:
2c:37:44:57:8b:9e:98:c0:ed:cd:9c:6d:ea:ce:ea:
f3:d8:cc:6a:0e:b9:d8:5b:9f:4a:17:cc:f4:d9:00:
2e:cf:21:36:ef:33:4a:27:e2:9c:33:0a:0d:68:ed:
17:f0:8c:7a:04:3d:ab:48:28:20:f5:66:54:d3:5a:
f7:ae:97:a7:9e:dc:0f:30:e4:0c:f3:9e:ee:02:92:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:BE:44:D0:AC:11:8B:5F:60:D4:A4:AF:80:61:56:CB:13:9F:03
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a3:a9:a3:0f:ab:76:22:67:b4:23:72:2c:6c:f6:f4:5e:4e:
da:2e:35:52:5a:80:f6:9c:93:0e:86:de:fa:ac:f7:e8:ae:bd:
ea:54:c0:c2:b4:d4:70:57:e3:a7:2d:e1:97:ba:32:c2:0c:49:
64:ae:76:af:2d:7e:56:19:f2:b6:69:b6:36:ea:fc:63:86:dc:
c8:d3:8b:ef:74:17:ce:6b:66:4b:7e:05:7d:59:09:0f:70:22:
f3:56:a4:69:2b:19:5e:32:5f:3f:97:28:ec:00:c1:24:53:c3:
21:d4:9e:79:b7:b9:4a:00:7c:84:78:b8:0d:57:16:03:2a:a4:
02:e4:07:59:78:bd:c2:7d:78:d0:fd:98:39:ac:2e:d3:2b:44:
68:d7:14:e2:5c:95:48:57:65:9c:25:52:b6:ae:1e:6e:0a:d0:
a8:7a:21:93:9c:ac:e0:26:67:e9:51:1a:ae:bc:7b:69:91:35:
41:1b:f4:e6:54:57:1d:8e:83:b1:c7:1f:78:c8:93:7a:11:7d:
b8:53:97:f0:04:a3:97:18:11:23:71:e7:51:5c:71:47:07:4d:
ce:1f:50:cd:71:38:87:34:af:17:e1:51:48:5f:15:e5:f1:66:
0b:5c:f7:1d:00:7a:6c:ca:c3:a9:df:e9:a7:08:45:2a:2f:46:
b8:d2:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:07:00 2025 by rpki-client