Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File: xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier: /1aGdwMZZ8V4kUQPhEnV1R1eWU7YWIah6NIgBvML7W4=
Subject key identifier: 31:C8:7F:79:13:0E:9C:CA:F8:77:E3:B0:DE:65:1F:33:A7:28:93:B5
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 0196BDEE69AB0F89D262E7388A52F8B72404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number: 046A
Signing time: Sun 11 May 2025 06:00:40 +0000
Manifest this update: Sun 11 May 2025 06:00:40 +0000
Manifest next update: Mon 12 May 2025 06:00:40 +0000
Files and hashes: 1: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (hash: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=)
2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: fH49JvGQCinNpVHpfFlcJZ+umvUUx9pnBJZNrangPKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:69:ab:0f:89:d2:62:e7:38:8a:52:f8:b7:24:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: May 11 06:00:40 2025 GMT
Not After : May 12 06:00:40 2025 GMT
Subject: CN=31c87f79130e9ccaf877e3b0de651f33a72893b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:d9:0e:64:28:e4:c1:53:2f:84:b4:f1:d5:
ac:53:9c:b8:fd:5d:16:c3:2f:e9:22:d3:d6:30:34:
f9:ae:b6:77:bf:b1:b1:94:72:68:1d:db:9e:49:ab:
ad:33:9b:27:ec:bf:5a:36:96:e3:57:f9:7a:f3:7a:
e4:79:12:2c:aa:e9:87:29:91:41:45:89:30:51:7f:
ba:4e:11:dc:d6:a3:67:46:38:1a:1e:19:7f:ab:84:
48:85:96:09:2e:3a:ff:d6:a7:1a:70:35:88:82:a4:
98:dc:6b:be:9f:1d:97:be:d4:6a:90:97:23:7c:28:
41:5f:29:17:7b:07:6b:bc:b1:44:45:64:11:dd:f2:
89:39:bf:f2:ab:88:e3:4c:a1:52:a0:49:c5:2d:f1:
d0:17:3a:d6:a3:c2:8f:0a:b3:aa:2e:fb:eb:e1:a2:
3e:e7:a1:74:44:cb:24:ca:90:5e:5d:38:09:9b:62:
0f:c6:35:50:57:76:58:65:2d:34:60:e1:bc:f3:fd:
4a:58:51:16:4a:9a:45:b9:ba:bf:29:bf:1e:f0:ec:
85:13:75:5f:85:05:57:cb:8c:6c:f6:cd:9d:66:96:
9b:fc:7b:11:f6:c0:08:64:ee:b8:8c:a4:0f:9b:92:
7b:a0:b5:30:36:9c:4c:06:34:68:de:da:48:f2:8d:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:7F:79:13:0E:9C:CA:F8:77:E3:B0:DE:65:1F:33:A7:28:93:B5
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:36:36:8a:f2:2a:2c:a8:90:76:3c:30:a8:b5:5e:44:d4:db:
d1:2b:17:4a:68:2c:e9:3a:33:15:03:5d:d3:f5:07:26:79:7f:
56:f2:95:aa:5e:e9:5b:37:74:a4:57:4d:a7:5e:0d:32:f1:fc:
09:5e:12:07:d7:22:a3:9c:44:28:ec:43:a2:a3:61:0b:b7:55:
b0:af:54:a8:e9:fd:f7:bd:ec:3f:0b:15:81:85:e9:9d:a2:8e:
29:b3:6c:0b:6e:0b:64:60:57:2b:45:53:74:a4:ff:fb:2d:a1:
25:38:0b:09:8d:eb:3b:8f:42:a9:df:f7:52:1f:d0:d7:4a:ff:
77:b7:38:fb:13:29:af:8c:3a:44:f7:c9:c1:c7:59:6c:a0:5e:
db:52:0a:93:24:42:ad:65:d0:67:c5:28:47:b5:55:3b:bb:e6:
a5:26:e0:c4:f1:7e:49:fb:98:e2:93:96:6a:25:18:27:6c:f3:
8a:ec:89:2d:84:ae:6a:86:f7:76:b5:50:31:10:29:1e:83:b9:
54:4d:92:9b:f2:fb:95:21:41:0e:f0:c8:b8:3d:62:bd:17:da:
c6:c5:01:8d:a9:12:6c:f9:29:1d:83:2a:cd:f5:b7:eb:21:1e:
a7:00:b0:09:8d:cf:3e:12:a5:3e:c8:1c:ae:04:48:36:24:4f:
a8:f8:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:58 2025 by rpki-client