Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: jhZFw4IGqACalC/Kirop2hxEsmn3VmPIsZphYDBnjOI=
Subject key identifier: 14:67:D2:B8:B2:E1:FD:7A:B8:8D:9B:83:2E:8B:2B:F3:FC:8E:4F:3D
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0196BE930D49A010A3579B00B2CE564482C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 031D
Signing time: Sun 11 May 2025 09:00:30 +0000
Manifest this update: Sun 11 May 2025 09:00:30 +0000
Manifest next update: Mon 12 May 2025 09:00:30 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: 8OBquHCr2lBeqPVvf1/e4DhOguw2e2QcPq1X/LTWRR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:0d:49:a0:10:a3:57:9b:00:b2:ce:56:44:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: May 11 09:00:30 2025 GMT
Not After : May 12 09:00:30 2025 GMT
Subject: CN=1467d2b8b2e1fd7ab88d9b832e8b2bf3fc8e4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:0a:a0:78:90:1b:bd:35:32:16:4d:08:f9:
87:8b:93:85:31:df:d8:95:60:4d:be:5f:57:bb:46:
a3:65:7f:00:ce:a6:e3:49:93:39:8e:d5:a4:6f:5a:
cc:14:69:f7:6d:4c:4c:a5:a4:81:a9:b4:a9:03:1a:
df:6c:bc:03:e5:c2:80:8f:b4:47:2f:24:4c:11:d5:
b2:d6:3b:f0:5a:c9:61:4c:c4:45:83:a1:ef:04:ae:
e3:f3:87:2a:6b:1e:63:ce:f5:a0:52:52:8d:db:bf:
5d:56:e5:c2:74:96:d5:c8:15:58:11:7c:70:db:9b:
6e:0e:ae:4b:2f:25:e0:b8:65:ec:ac:93:17:25:d4:
60:fb:7b:cc:d2:2a:ee:5c:8f:54:0a:f4:3e:30:50:
58:09:65:e4:42:03:6d:fe:d8:19:01:19:b6:f9:2d:
9d:69:ce:fa:54:a9:da:e3:00:a6:ad:fd:7b:4b:94:
7f:a5:84:d0:38:56:6e:a7:7e:63:ad:96:44:85:86:
79:38:4b:e2:a1:c1:a4:0a:a7:ba:dc:a8:c8:52:a1:
91:80:c3:e2:1e:49:af:1f:48:6c:f1:f6:fa:7b:bc:
5e:b2:1e:33:b9:15:0c:03:91:fa:5d:09:8a:ec:36:
8c:aa:a2:f8:5c:12:83:8f:5a:f4:51:f8:e1:c6:d6:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:67:D2:B8:B2:E1:FD:7A:B8:8D:9B:83:2E:8B:2B:F3:FC:8E:4F:3D
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:10:39:10:35:f2:7d:32:a8:00:a6:4a:64:9b:7a:75:57:
bb:04:28:09:e1:7f:fd:5f:96:6d:30:96:31:e8:15:3d:14:c2:
a1:8d:f9:5c:6b:03:d5:32:20:6a:90:c9:fa:a3:cb:31:6f:f4:
7f:fc:07:67:da:ae:7c:c8:c4:ab:1a:91:e8:d7:37:65:95:4c:
d3:dd:55:22:b6:42:ee:ea:47:7a:4f:0b:76:25:a6:08:94:91:
9a:cf:03:79:43:b9:09:3f:73:99:9f:0b:b1:3a:99:72:4f:1f:
d1:7d:1d:9f:e2:f8:0d:c0:d5:15:e0:6e:e8:50:c3:52:a0:83:
96:ad:f4:cb:69:57:a4:1b:0a:4e:a9:82:06:d0:47:da:41:53:
ce:38:9b:be:54:b6:48:c3:56:c1:da:eb:83:a4:dd:ba:f0:f9:
1d:9c:f1:a4:ca:a8:54:26:2b:27:9b:11:d6:f9:38:6c:1c:04:
d7:9c:1c:b0:11:64:84:98:81:d9:e4:1d:f4:09:84:bd:db:a3:
7c:22:e6:a1:20:8b:e4:88:f2:d2:87:69:d4:e9:83:03:9f:5e:
66:c7:ec:2f:7b:55:28:ca:8b:32:c3:7b:36:33:38:66:e2:07:
12:9a:0d:29:46:39:cf:9d:c6:51:87:df:b6:f8:c5:ad:9b:2b:
6b:00:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:27:03 2025 by rpki-client