Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: Td2FMAXYxnSMLq0/jQz6WRGvsSHN29fCNeaXnSM2Wlo=
Subject key identifier: B1:77:44:48:43:4B:B1:94:7D:BD:C2:82:95:D8:DB:BC:E4:B4:83:6C
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 0196A7D4A854D7B47BD35722A6D21E585799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 0221
Signing time: Tue 06 May 2025 23:00:53 +0000
Manifest this update: Tue 06 May 2025 23:00:53 +0000
Manifest next update: Wed 07 May 2025 23:00:53 +0000
Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: /Kmnqt/2d17pz69s4xwK8B/MaW6UuGj3i6VGq8X05k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:a8:54:d7:b4:7b:d3:57:22:a6:d2:1e:58:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: May 6 23:00:53 2025 GMT
Not After : May 7 23:00:53 2025 GMT
Subject: CN=b1774448434bb1947dbdc28295d8dbbce4b4836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:24:6f:75:27:ab:4f:fe:e8:79:ef:e9:da:
8d:0b:8f:7c:15:2d:2e:73:d6:53:bd:94:e2:44:bf:
80:d5:09:6f:8e:ff:01:c7:2e:2a:3c:a7:69:35:ec:
7a:a5:ab:97:38:c1:24:90:ca:69:70:f8:82:90:ed:
0b:57:8f:7b:72:e7:af:3d:05:fc:a7:d3:dd:5a:62:
41:92:01:d3:bd:d4:8e:cb:4c:8d:93:86:37:1a:2e:
2f:da:a7:53:3d:5f:fa:07:47:2e:ac:0d:40:d8:cc:
8e:c0:3f:c5:1f:5e:93:48:58:28:5d:5d:64:c3:07:
0d:26:10:b1:3e:3a:04:1d:1c:7c:94:a3:42:ad:de:
11:e3:40:3a:26:85:b6:e7:f2:a4:18:92:a0:b3:71:
c2:a9:cc:ce:c1:51:a5:fd:2b:1b:fb:de:72:e1:6b:
76:2e:4a:fe:d7:8b:fd:fe:39:c8:6e:c1:b3:2f:24:
94:50:f1:3e:cb:eb:fe:8f:0a:db:ad:1c:c3:fd:80:
5c:5b:93:7e:4f:69:38:8e:28:7f:ec:d6:fb:96:07:
6c:37:9d:a7:af:47:95:01:64:5c:db:0f:a2:87:19:
4b:06:0c:d8:a1:bd:97:ed:39:fe:d9:1d:bc:7b:ce:
f9:30:5f:4b:ca:70:cf:73:41:9c:bc:0c:07:52:ff:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:44:48:43:4B:B1:94:7D:BD:C2:82:95:D8:DB:BC:E4:B4:83:6C
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7f:45:b2:26:76:e9:53:79:8d:9a:1c:39:b4:da:36:4b:20:
51:8f:27:56:63:56:59:89:43:85:41:13:2f:f3:f4:a3:dd:fe:
4c:a6:9d:ed:97:56:93:05:e5:dc:99:19:6f:52:7a:5e:92:76:
6a:56:1e:a9:78:21:48:64:a6:bb:5c:18:47:2b:da:5d:2a:f7:
ed:c3:6c:25:cc:c6:77:75:d6:09:25:a1:1c:f3:2b:b2:ae:5c:
39:62:7d:1f:b1:6a:ea:a8:8d:3c:09:5c:60:87:d6:90:72:76:
81:95:0f:1b:2e:4f:be:be:e1:5f:a2:f4:a7:37:8b:2b:40:88:
f6:ae:2e:23:dc:cb:13:3f:65:58:a6:23:67:69:74:09:07:8c:
92:83:da:68:30:f4:9c:6c:1e:d0:e5:0d:8d:c5:be:e7:a4:13:
c8:be:22:a7:67:c9:11:85:e3:f9:7a:cd:09:cf:c8:c4:b6:05:
e7:82:9e:b1:38:ea:81:fd:ba:53:b1:fb:89:dd:eb:65:79:f7:
94:5f:86:99:e7:d5:5e:c9:84:02:25:82:c5:de:01:4a:f9:88:
96:67:39:e9:67:f5:01:ca:12:0e:69:73:ba:ff:07:09:e1:51:
91:5d:fd:96:58:fe:34:38:c1:77:05:d8:14:98:ef:0e:83:ba:
b6:4a:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:18:19 2025 by rpki-client