Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: ybrShUlyc1JkseovJzCtEnsETlpFRimB8lMW6avNAPE=
Subject key identifier: 05:0F:33:7C:27:2A:12:5E:59:E2:C5:2C:70:83:93:F0:69:B7:1E:F4
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 0196AE7B8EEB35C5206B1FD92EE03D46AEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0AA0
Signing time: Thu 08 May 2025 06:00:55 +0000
Manifest this update: Thu 08 May 2025 06:00:55 +0000
Manifest next update: Fri 09 May 2025 06:00:55 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: opKTQnqBzYLnx9nBn5qTNqDZ0qFFuSmtfF5uL7psOgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:8e:eb:35:c5:20:6b:1f:d9:2e:e0:3d:46:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: May 8 06:00:55 2025 GMT
Not After : May 9 06:00:55 2025 GMT
Subject: CN=050f337c272a125e59e2c52c708393f069b71ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:32:b2:96:94:3c:37:da:04:30:56:58:a8:
d3:54:dd:2f:a0:75:4b:30:d2:34:e0:64:16:7d:85:
29:f9:c7:f0:af:6c:fa:c6:3a:e5:5c:c1:0d:4b:af:
7a:42:2c:31:b7:61:cc:33:6e:3a:80:a4:1c:9b:6c:
0f:84:b3:fe:f3:d3:da:82:b9:2d:2e:63:9b:58:90:
f6:5f:84:81:85:e3:5b:55:ae:ca:02:19:11:1b:e5:
37:b1:38:e6:74:19:4d:a6:17:b8:4c:2a:c9:0a:7e:
c0:31:4c:9d:44:45:9f:12:95:96:22:3e:7f:73:c5:
73:56:d9:c4:7f:53:f7:1d:ee:38:e2:0c:8d:86:0d:
c2:3c:db:79:2e:b1:7f:47:60:00:4b:7c:4f:1e:8a:
a6:30:44:2c:fc:02:8a:71:41:36:ef:98:3f:59:69:
49:e8:81:04:ea:d6:50:25:53:68:b2:02:d3:17:30:
23:e0:18:01:e4:7c:d9:94:b0:2d:97:da:e2:02:da:
c2:5e:8b:46:b7:f3:79:70:fe:a9:68:95:59:82:9d:
bf:2d:5a:74:74:c6:97:85:72:52:11:ee:e2:2f:69:
f7:34:23:de:43:c8:e1:42:05:d7:84:d8:32:c3:57:
b9:64:20:43:92:65:94:6a:b8:e7:41:ce:d7:8b:52:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:33:7C:27:2A:12:5E:59:E2:C5:2C:70:83:93:F0:69:B7:1E:F4
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:79:02:89:01:65:e6:0f:2c:2d:8a:43:b6:e8:b3:7e:a0:0a:
83:ea:40:c3:ea:2b:0b:53:84:55:41:89:82:21:61:52:47:68:
e5:14:e1:10:af:3b:b1:53:55:45:23:fc:06:3c:72:50:e2:0c:
c6:d9:80:fb:39:a3:49:27:28:71:23:b8:88:07:77:2d:65:82:
97:b5:58:fc:ff:92:79:90:de:3c:4d:11:41:2b:de:ca:bf:b6:
85:5b:3a:08:42:68:54:72:e8:db:06:e8:85:5f:cc:ed:eb:ca:
0d:32:9b:46:c1:a3:bf:67:bd:79:79:e4:5d:b7:f4:59:13:4e:
4c:67:df:36:c3:78:c2:8a:66:62:ab:14:eb:b4:df:3c:eb:a9:
2e:e0:80:33:94:d6:87:b2:f5:d3:04:b8:9c:f9:47:00:5d:7e:
9c:12:39:63:99:ee:cf:11:3d:00:20:78:d1:01:c5:84:bb:35:
ce:b2:9c:ea:67:4f:41:39:f5:4f:86:bb:70:10:7d:c1:d9:e8:
a7:78:28:5d:17:8b:1a:bc:af:f9:27:99:a4:1e:30:e2:60:2b:
29:83:55:31:f9:74:34:c8:0a:69:29:a0:b1:be:f8:13:7b:d9:
44:d4:21:15:c2:a1:57:8e:d2:41:ca:18:3a:4e:05:14:20:b0:
0f:13:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:43:35 2025 by rpki-client