Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: XoblRu+fz+E3Jw2yynPwtSvsfHvnC7ZsnJxZgA8W+BY=
Subject key identifier: DC:CD:8F:71:6B:30:80:F2:AC:B3:72:CE:FA:43:6C:40:B2:D6:84:10
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 0196BB2448DA4B6DAA9F137F63AADE2092D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 024D
Signing time: Sat 10 May 2025 17:00:39 +0000
Manifest this update: Sat 10 May 2025 17:00:39 +0000
Manifest next update: Sun 11 May 2025 17:00:39 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: FQNwPxKyTfn79XadCoNN/09nOx3QReXg1gPEFstG/Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:48:da:4b:6d:aa:9f:13:7f:63:aa:de:20:92:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: May 10 17:00:39 2025 GMT
Not After : May 11 17:00:39 2025 GMT
Subject: CN=dccd8f716b3080f2acb372cefa436c40b2d68410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:94:de:07:c1:07:6d:28:d3:74:ee:ed:8f:
22:d8:c5:36:9f:6e:09:67:7e:8a:51:ef:a7:29:57:
42:fc:4c:ad:7d:29:d2:9a:5a:ce:80:ad:66:6e:bc:
6d:bd:dc:19:a6:f6:c8:51:c6:23:a6:c4:45:23:a0:
20:ff:27:0e:89:e4:c0:06:b9:51:5e:59:ad:94:ad:
1c:19:3a:39:b0:7d:8e:95:86:72:44:39:96:7e:f1:
c9:57:90:57:bd:d8:75:88:37:b2:a7:88:d2:c2:e1:
0c:d4:f4:34:98:9a:52:f1:ff:43:4a:0d:5b:c6:e0:
9c:30:34:63:ea:ea:28:26:8a:19:5c:69:39:b0:8c:
38:d5:82:ca:8b:df:36:4c:fa:72:a0:b8:a7:13:6b:
2e:c6:9d:44:76:09:94:b1:aa:28:b5:07:c0:05:be:
2c:54:94:63:34:96:66:d3:9b:f8:37:60:94:e2:ca:
9e:e6:eb:4b:39:8a:57:c2:91:71:85:5b:7e:c7:4d:
84:0d:41:e0:b7:bb:ef:f7:77:11:22:2b:40:63:11:
51:ef:72:84:09:e4:7c:8c:fc:3c:99:00:61:70:d1:
ba:fe:11:8c:54:4e:28:8d:54:08:27:3f:8a:a3:32:
fa:06:8c:dd:d2:d8:61:e8:24:f9:9e:f7:7d:4c:72:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:8F:71:6B:30:80:F2:AC:B3:72:CE:FA:43:6C:40:B2:D6:84:10
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:3c:ea:3d:36:0a:68:1a:cd:59:db:8c:79:06:2c:45:68:
28:66:cd:36:60:b3:0e:a9:13:81:5b:86:17:3f:72:44:0b:46:
f6:85:47:37:95:ec:85:0a:30:ca:1d:30:4e:72:e0:ef:c2:17:
00:73:3e:a1:05:1f:e8:b2:f7:16:f4:f9:a1:a0:60:33:81:ca:
62:16:03:9c:cf:b5:35:ac:2d:83:05:da:cb:c6:22:e2:89:dc:
dd:7a:57:5f:68:4c:aa:72:f9:d9:e7:92:2b:45:17:d3:43:59:
ae:12:b9:be:83:d1:84:6d:91:47:9f:ff:a4:c0:09:ba:c4:17:
32:df:54:81:06:26:74:be:34:98:1d:29:75:97:12:7b:2c:9e:
cc:fa:6b:d4:ed:97:ba:eb:d6:13:9b:3e:23:45:90:82:f5:fd:
7c:68:bd:ea:39:bb:e2:c1:75:d9:4e:d4:e8:35:5c:f7:e5:d3:
f1:01:f7:16:82:54:28:b4:5b:a0:9a:6e:d4:1f:3c:51:a7:de:
e7:a3:89:99:ed:a4:ec:0f:89:dd:1c:46:e1:0b:fd:70:7a:1a:
ae:97:bb:99:db:43:69:ef:ac:73:35:6e:a8:00:e2:d7:f4:e2:
0e:26:ae:a8:d8:f3:be:a5:dd:9a:bc:89:c0:1a:31:a2:72:2e:
14:e3:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:42:12 2025 by rpki-client