Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: xo13Pk0NKnVeV8FOW3Ejb7c2psbqvVVNr7es6aE6uos=
Subject key identifier: B3:C1:EF:F5:67:5B:12:A5:B9:96:7C:AF:DE:4B:40:0F:71:57:1F:87
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 0196A6C1FAB2B7E8B584040324D646169849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 05FB
Signing time: Tue 06 May 2025 18:00:52 +0000
Manifest this update: Tue 06 May 2025 18:00:52 +0000
Manifest next update: Wed 07 May 2025 18:00:52 +0000
Files and hashes: 1: pUCR7J1Yuc7NHdPhzOaLS4lHeXA.roa (hash: duCthqxEbQDKuJSOfYFDXosZAjczkDom8uh5OUKy8l4=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: 9ik/xQA3je02XwjedqJ8Lf4mlNQ0p4S/YQj5CbHgr7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:fa:b2:b7:e8:b5:84:04:03:24:d6:46:16:98:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: May 6 18:00:52 2025 GMT
Not After : May 7 18:00:52 2025 GMT
Subject: CN=b3c1eff5675b12a5b9967cafde4b400f71571f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:5c:82:44:9a:e7:be:51:60:5e:84:24:4e:
e6:32:ff:23:de:af:bf:a2:a4:82:aa:26:4c:8e:5a:
26:a5:5b:ce:8e:70:bd:b5:c7:cd:cc:52:d1:7c:98:
d3:d1:34:5a:ea:3e:3d:64:6e:6a:6e:0c:cd:38:6c:
cc:d4:c1:76:d9:e0:b6:0a:a0:73:7a:85:1a:37:6d:
fc:f2:df:61:b6:8c:47:37:c4:a0:7a:c6:2c:5c:80:
76:ec:d8:ad:88:68:14:42:b3:6c:88:44:bc:a2:17:
f4:dc:d5:22:0a:b6:8c:f1:95:56:64:70:23:66:74:
99:3f:ab:89:50:54:d7:34:fe:41:1d:fc:62:e9:a8:
3a:a9:80:05:cb:64:a9:6b:cb:cb:49:ea:2e:f6:16:
83:8b:20:f9:e5:d3:5f:4c:08:67:9e:e5:2d:a0:ed:
ed:a4:67:ae:3e:d7:26:c8:6a:d0:4d:4b:8f:89:06:
9c:45:9c:9e:d8:60:e1:0d:8e:4a:ad:62:55:d7:ee:
3f:96:96:cf:f6:5b:8d:7f:21:b8:0f:b1:3f:6d:4b:
3b:71:26:62:04:f2:25:87:0b:ef:ab:56:0f:ce:94:
7d:90:bc:01:e5:0f:b3:75:7e:51:7e:74:fa:18:fe:
6e:aa:8c:6b:74:43:7e:50:c1:ca:22:75:a7:60:04:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:EF:F5:67:5B:12:A5:B9:96:7C:AF:DE:4B:40:0F:71:57:1F:87
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:85:ff:d8:25:d5:6e:4e:63:f3:d7:3b:df:d7:a7:2f:53:67:
e7:97:27:66:88:36:6d:92:dc:16:21:bc:86:31:b3:7c:ee:54:
f3:37:f7:ad:9e:67:1a:c4:d7:1b:74:56:b2:65:1e:1e:52:67:
29:c8:49:ee:24:58:f7:69:b9:6f:04:3a:58:2d:37:1b:b2:21:
de:b1:93:a0:e2:4d:4f:ed:9a:3a:c5:d5:75:79:28:32:99:d8:
71:f1:b2:6b:46:b4:8f:b0:56:28:46:02:e6:d0:23:9d:51:e9:
c8:58:29:98:c8:7f:db:4a:2e:b1:fb:25:2e:8e:7a:fa:ec:f8:
27:26:9d:2a:27:1d:98:36:dc:0c:02:e5:a4:48:68:f2:6c:3e:
1d:1a:4e:a0:8f:d8:ca:ce:57:10:4c:80:81:c4:45:32:24:62:
8d:14:05:3e:30:b2:60:f7:1e:bf:a8:7a:c6:c5:e8:b6:0b:06:
8d:ca:ff:48:47:67:e4:ba:aa:e4:3e:6b:42:7b:09:eb:2c:1a:
45:5f:6f:74:b0:b5:de:aa:cd:10:03:70:61:fe:f6:28:fa:57:
b7:ad:66:1d:23:35:e2:37:f7:2a:70:c0:3d:28:12:c9:39:09:
ae:0a:55:85:83:8e:4c:fd:19:43:df:83:78:6d:38:9a:bf:58:
49:c2:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:26:26 2025 by rpki-client