Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: 4EVuGm9WhR7iVgVN8ZFvVVnmsOuJGmAh1Ln8ypd1rU0=
Subject key identifier: E1:E8:61:DF:3A:AE:0E:AE:28:79:09:18:C6:64:B1:C0:B2:26:03:23
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 0196BE5C9D48A891CE627F484CFB18FF85A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 0FE3
Signing time: Sun 11 May 2025 08:01:02 +0000
Manifest this update: Sun 11 May 2025 08:01:02 +0000
Manifest next update: Mon 12 May 2025 08:01:02 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: eNESBiDToHP8zT/gq1BYxmQ0mq/rFK4QFujwGsLH9fo=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:9d:48:a8:91:ce:62:7f:48:4c:fb:18:ff:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: May 11 08:01:02 2025 GMT
Not After : May 12 08:01:02 2025 GMT
Subject: CN=e1e861df3aae0eae28790918c664b1c0b2260323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:78:41:b0:1c:1a:41:54:e3:31:d2:7f:12:
ca:21:4c:0b:0f:5d:22:dd:d0:72:0a:cb:80:55:1f:
b0:26:6f:c5:ee:9b:e7:59:d5:b3:cd:99:ee:26:2e:
43:5a:3b:86:d4:db:4b:27:50:05:f7:db:9e:fa:91:
d9:54:7b:5c:3e:ff:ae:1e:65:f5:15:38:6d:5e:d9:
a9:93:7a:41:ee:fc:72:8c:09:c9:df:8a:9b:82:f1:
17:98:22:ba:88:01:8f:6a:1e:3f:1d:fd:61:d1:76:
67:4c:a8:bf:f8:c0:63:26:91:1b:67:86:a2:7c:e3:
e8:c4:87:b0:8b:16:42:9f:62:7f:0d:94:19:a5:13:
62:9f:ed:02:ec:bf:d9:5f:d0:f9:2b:a7:df:03:58:
ad:64:20:49:82:b1:a5:78:e8:6e:3e:25:6e:bd:16:
6d:f7:b0:a1:06:76:8b:2d:b9:0d:79:1d:ce:13:c0:
ed:a2:8f:1c:d8:db:b4:f7:69:47:96:79:e4:25:8e:
70:13:e5:51:53:6a:ad:28:b3:e2:ab:91:e2:e7:d1:
82:f1:11:2d:f5:f3:62:6f:a0:9f:e1:ba:2f:1d:95:
b8:22:3a:42:ba:43:71:ec:ae:cc:36:73:36:0b:6a:
0b:5e:7f:2b:9a:a4:20:11:8d:75:ba:bc:a6:9e:1a:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:61:DF:3A:AE:0E:AE:28:79:09:18:C6:64:B1:C0:B2:26:03:23
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bc:27:e7:d3:b2:f7:ab:00:47:7a:67:92:ec:f7:68:d6:4a:
b4:f0:27:0c:a4:ff:86:e6:6a:55:76:17:a4:b1:69:3d:78:1f:
67:6a:89:f7:50:07:06:62:02:f6:08:3e:b0:48:e2:77:94:58:
9c:91:53:49:9d:77:f3:11:2f:99:22:8c:ce:33:f7:9d:6b:fc:
45:37:50:ad:e4:72:4c:93:7b:1e:36:a6:f6:01:60:dd:63:f6:
7f:db:52:4b:50:e3:0d:f7:13:64:47:50:e0:61:86:3a:ff:75:
d8:54:d0:3c:c4:be:ee:80:bc:87:08:5a:03:03:21:3d:32:f4:
fb:31:ec:9d:55:e9:05:67:59:fd:e9:e5:de:bb:56:1d:24:12:
0a:01:04:c0:3a:ee:8e:a9:e2:bd:07:33:f3:3d:ec:51:e2:e3:
b0:20:d2:7f:4d:14:37:de:1f:37:f2:9a:b0:8a:e7:85:48:62:
32:2d:24:97:b2:41:78:43:c0:6c:c0:4e:bd:d2:24:e5:b0:c6:
b4:a2:77:84:e3:88:e4:d2:c5:f5:fb:74:99:29:5b:46:95:4f:
38:f3:7e:c7:52:7e:4a:5e:1f:54:06:10:b9:d5:ae:2b:83:53:
1b:3a:8a:3f:a8:6c:1d:24:72:fb:48:a1:93:fc:42:1b:d0:f8:
97:99:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:42:15 2025 by rpki-client