Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: C4YC9qd6JHt86FBnRnysERfZSouFclL5Py3F17D5RVk=
Subject key identifier: E2:89:50:F5:B7:79:81:B2:83:0A:79:61:E8:8E:94:CE:08:48:FF:A0
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 0196C9F2E3F6D10AE4A84F00FE49C9A415AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 1136
Signing time: Tue 13 May 2025 14:01:00 +0000
Manifest this update: Tue 13 May 2025 14:01:00 +0000
Manifest next update: Wed 14 May 2025 14:01:00 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: bWmDXwjkDuioFow5xuiniCoRILDrGb2JJ+vQCz4ccRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:e3:f6:d1:0a:e4:a8:4f:00:fe:49:c9:a4:15:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: May 13 14:01:00 2025 GMT
Not After : May 14 14:01:00 2025 GMT
Subject: CN=e28950f5b77981b2830a7961e88e94ce0848ffa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:d0:97:39:b0:37:ad:a1:d5:83:5d:8e:1e:
d4:f3:f5:5c:ad:8c:35:fc:85:70:ed:f1:66:06:3d:
e6:a1:dd:bb:00:cd:96:75:28:9e:19:d0:6d:88:3c:
6f:9b:86:51:e0:46:fe:44:ff:f8:9a:d5:60:37:28:
d2:41:9b:69:2a:49:84:c1:31:00:d3:05:5b:d7:3c:
e2:92:a2:2a:89:55:57:6d:b0:35:98:e6:d9:e6:ff:
18:1d:fd:f9:96:ff:fa:0d:48:4c:59:da:5d:0d:f5:
42:28:db:57:15:d1:77:d5:79:5e:3b:87:fc:05:e0:
c2:77:09:1a:bf:70:2f:4b:89:d9:50:5d:8e:a4:7f:
19:93:eb:f1:2e:c6:15:e5:34:df:68:97:7f:66:7f:
3c:ba:4a:4a:3d:81:42:cf:4e:15:21:f2:59:43:b6:
4d:84:18:53:f4:00:85:ed:4c:2d:79:4c:24:d0:a0:
c9:2f:7f:c9:bb:fe:10:d4:e2:42:c6:1d:f0:f6:60:
fc:f9:b9:6c:d3:f1:ae:47:65:dc:d2:18:6b:33:c2:
b0:0c:e5:3f:81:2e:9a:18:72:e5:0e:08:78:3e:f5:
5e:6b:86:a3:6d:fc:2a:4f:40:e6:0c:d1:e6:a1:ab:
9f:3a:20:30:9a:51:e7:d7:dc:96:26:71:ec:84:f6:
0d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:89:50:F5:B7:79:81:B2:83:0A:79:61:E8:8E:94:CE:08:48:FF:A0
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f2:0e:46:ac:0f:29:56:94:09:92:12:32:23:ac:be:4f:f8:
ac:85:f8:8e:ec:06:4b:57:6b:84:28:90:10:bd:9e:f8:a4:20:
69:ff:dc:43:bb:1c:b7:cf:5f:8b:e6:6e:94:03:be:30:80:6e:
20:3b:0e:20:ce:41:92:0e:81:b9:c0:8a:2d:6f:bd:d9:ac:58:
92:48:09:8e:df:d9:19:2d:2c:8c:4a:1a:31:a6:4b:1a:36:85:
47:10:96:06:ce:12:db:a2:bc:71:3b:ac:6a:7b:9e:4f:4a:1b:
2a:99:de:c2:5e:2c:a7:ba:e6:a7:98:9f:b3:d4:00:f2:ff:b4:
20:8d:2d:32:3d:19:d0:e7:b3:30:bb:58:d4:f8:d7:85:c7:a0:
22:7a:bb:28:57:7a:4d:ac:fc:33:e6:93:28:46:33:70:ab:56:
61:e3:eb:17:a9:e6:78:59:24:84:34:e2:6a:41:6c:ad:2b:2c:
33:97:49:c2:b0:d8:a6:a9:24:cc:65:27:a7:57:35:a8:bf:2b:
f8:67:5c:bc:95:70:31:e8:a6:65:3f:49:c6:fc:96:1d:56:0c:
7b:1b:03:71:08:de:bd:97:da:cc:c2:a9:5d:09:6e:5c:b5:cc:
4d:2e:85:1a:ee:89:d8:1c:d0:c8:67:05:29:65:02:13:a8:7e:
82:11:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:07:35 2025 by rpki-client