Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: C0LPx/b8DFQN6ecEmYapWmoWEfKaEGksrhUX+PjgtPM=
Subject key identifier: F8:13:68:BB:22:8F:F2:0F:24:83:CE:54:16:C6:6A:9F:78:91:56:32
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01969E632F1542C60C51D5E87CE93E6D779D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 03:00:22 +0000
Manifest this update: Mon 05 May 2025 03:00:22 +0000
Manifest next update: Tue 06 May 2025 03:00:22 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: I6ZtTmPTEy04PRmP5ikazRz7HpYzmKe2gclcNQoSu7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:2f:15:42:c6:0c:51:d5:e8:7c:e9:3e:6d:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: May 5 03:00:22 2025 GMT
Not After : May 6 03:00:22 2025 GMT
Subject: CN=f81368bb228ff20f2483ce5416c66a9f78915632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:4a:b7:bd:90:79:eb:dd:c6:64:b8:ee:88:
44:5f:92:28:1b:99:90:9e:34:c4:ca:9f:f1:c8:51:
08:a5:20:8b:69:9d:2c:83:a6:37:2c:d1:01:fb:b1:
87:37:ba:65:81:d4:e3:f8:04:ee:a1:7e:aa:71:dd:
98:ee:24:d7:0f:67:6d:be:59:54:7e:4a:50:7d:3d:
1f:ec:7b:63:bd:59:45:b9:c0:9b:a9:f7:aa:8c:ba:
e5:ec:7b:26:91:71:ca:89:f6:69:35:c7:80:9f:98:
2e:39:72:c0:95:da:c7:7d:6b:e3:c0:ce:95:dc:8b:
01:3f:68:8a:e4:58:03:6a:57:51:1e:d6:e6:d9:38:
a4:8d:a7:5f:eb:5a:2d:80:31:9d:fe:bc:ea:bd:f9:
b3:2a:3a:f3:c3:af:3b:96:4e:25:aa:8c:8d:b0:e0:
2f:cf:64:94:84:e2:55:01:66:a6:18:9e:63:e3:cb:
24:d2:cb:b9:9f:c5:a2:e2:87:35:7f:f1:a7:63:b4:
d3:ed:ad:01:e3:b0:96:d0:3e:b9:0b:a0:13:a6:d5:
0f:5b:ef:de:09:b6:40:43:f9:9d:2b:bf:06:83:11:
9d:6f:85:89:ac:cd:06:3c:cd:f7:21:6d:88:c7:a4:
2a:c0:e8:88:ac:85:a1:4d:88:ce:bb:8f:06:19:e6:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:68:BB:22:8F:F2:0F:24:83:CE:54:16:C6:6A:9F:78:91:56:32
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:95:c0:c1:19:bf:c7:4d:fb:80:d6:b6:27:1e:58:0e:f1:9c:
51:4e:6b:3d:15:7c:15:a3:76:8a:bf:66:d1:97:18:9c:58:99:
10:e4:ab:ba:04:59:ef:84:1c:c8:99:c2:3f:59:16:37:7c:fb:
5c:56:1d:3c:d9:a4:ab:ad:9b:2c:54:03:a0:45:83:8a:c9:97:
f9:80:9b:63:cd:a2:47:64:01:02:a1:d2:4a:6b:16:b4:cf:e7:
46:45:c6:d8:06:db:ba:31:62:c9:f5:f0:ed:c2:6a:d8:a6:80:
69:e8:f5:43:76:d1:f4:6e:82:61:58:f6:c2:50:9a:61:d1:d2:
b1:7e:7c:b0:fe:bc:c5:38:54:c0:47:d2:85:50:ca:3d:32:6f:
1a:ae:52:c6:e6:39:91:76:1a:55:6d:95:d4:87:cb:49:47:be:
55:10:89:93:c3:fc:fa:b4:ae:c8:1d:4f:f9:5d:4f:61:9e:cb:
32:b3:53:13:17:e1:b8:26:92:19:63:72:f3:41:c1:89:86:b7:
12:eb:e4:9b:20:61:d8:e1:0a:4f:40:69:25:15:9d:f4:65:89:
76:7a:34:3f:0d:f8:92:07:01:80:6e:10:0e:cb:6c:b7:05:06:
e9:8e:ed:7f:22:40:43:28:17:b0:b1:df:b6:ed:67:f0:8b:5e:
2f:80:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:01:10 2025 by rpki-client