Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
File: x0yghVF4oM3XGRS88iOqMa9jaaQ.mft (raw, json)
Hash identifier: q0u3mjtF+EXN4po93t/N+2q7dbDM7pheTeqsJhY42vM=
Subject key identifier: 51:AD:8F:C6:AD:B4:EA:57:34:EB:A0:B4:32:4C:58:71:C6:F3:FD:86
Authority key identifier: C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
Certificate issuer: /CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Certificate serial: 0196BB5B391A51FA8FFE0C1F5D122DE771A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
Manifest number: 0D9E
Signing time: Sat 10 May 2025 18:00:39 +0000
Manifest this update: Sat 10 May 2025 18:00:39 +0000
Manifest next update: Sun 11 May 2025 18:00:39 +0000
Files and hashes: 1: w61tMnNeHDs_V8XDRBjX0VmxQLs.roa (hash: zbcmX4twBgLQPIU3RR2PPgPgWTG3cAdbD9etQBxxLBE=)
2: x0yghVF4oM3XGRS88iOqMa9jaaQ.crl (hash: KY0fWpWLWw8SdVRUD07X2ygUtOHSh4CEbP6uedGNOJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:39:1a:51:fa:8f:fe:0c:1f:5d:12:2d:e7:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74ca0855178a0cdd71914bcf223aa31af6369a4
Validity
Not Before: May 10 18:00:39 2025 GMT
Not After : May 11 18:00:39 2025 GMT
Subject: CN=51ad8fc6adb4ea5734eba0b4324c5871c6f3fd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:f9:f5:91:b4:3a:3c:e0:fd:35:a0:bd:74:
e5:de:06:71:2a:e9:14:6d:a2:f4:35:1b:02:91:c6:
0d:d7:02:15:6f:9f:b5:a3:d4:70:a2:84:01:d5:56:
cd:3b:10:f9:81:f2:f2:48:8e:fb:55:ed:e5:b1:b3:
13:da:0d:6d:47:f1:e5:bc:86:46:16:5d:03:e1:9a:
45:b9:c6:92:09:63:03:40:3f:d6:37:da:00:54:ac:
a9:8b:d9:7a:c8:2f:b6:54:13:19:9d:e9:25:44:f8:
71:81:25:03:b9:9b:03:51:02:3a:2d:68:5e:cc:17:
67:0b:4c:6e:77:6d:3c:91:ed:6d:3b:54:78:97:62:
fe:9c:d6:19:d4:b9:79:f3:89:a2:1c:03:8b:fc:97:
85:b8:b7:dd:33:4d:0e:5c:3f:de:96:a3:f9:49:02:
b1:31:8b:f2:85:80:a5:83:f0:2a:9f:3a:ae:cd:20:
10:42:dc:a9:61:d3:75:03:29:d8:ef:11:73:ee:56:
98:73:c2:5b:76:60:24:f3:f4:c5:25:16:b3:07:f8:
02:39:1e:a9:66:26:fc:0c:32:dd:6f:69:53:88:71:
e9:50:8a:1f:13:df:ad:7f:7d:37:50:6c:b7:c5:ee:
32:74:19:24:95:b3:94:12:f8:d5:8c:6f:3d:03:da:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AD:8F:C6:AD:B4:EA:57:34:EB:A0:B4:32:4C:58:71:C6:F3:FD:86
X509v3 Authority Key Identifier:
keyid:C7:4C:A0:85:51:78:A0:CD:D7:19:14:BC:F2:23:AA:31:AF:63:69:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0yghVF4oM3XGRS88iOqMa9jaaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f220a0-df81-42fb-b714-dedd35293230/1/x0yghVF4oM3XGRS88iOqMa9jaaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:43:08:30:1e:a3:00:e6:ab:b4:dc:43:01:19:8d:50:8a:5e:
1f:2e:ca:2a:87:bf:ca:dd:9e:04:94:73:f1:d8:9f:d6:da:2c:
26:82:23:a5:db:80:c0:0e:50:2d:4f:1f:8d:65:57:55:7f:94:
f6:50:6d:71:46:76:7a:d9:28:f7:e1:9f:35:a1:da:18:a4:4d:
2a:dc:00:30:16:91:75:a9:a3:f7:46:4a:4f:2e:ab:2c:dc:7d:
ad:25:d3:b8:e1:14:e4:11:54:b4:15:3a:e3:32:e4:61:3f:6c:
cb:9f:da:15:94:88:23:1a:43:c8:ba:24:c4:7e:02:48:3e:a5:
88:4f:b6:6d:53:67:42:ba:93:e7:6f:4f:55:31:34:7f:a1:d7:
d3:8a:fb:11:82:d5:e3:15:11:57:22:9a:32:97:ce:95:15:e4:
41:bf:0c:8d:de:d5:d7:b5:f2:b0:fe:3e:91:88:6a:2a:c0:55:
ed:9c:ae:f0:21:33:44:7e:db:ad:40:0b:a0:e1:3d:5e:66:e5:
98:27:3a:5c:e8:56:d6:9c:09:d1:55:8a:d4:6d:36:cb:b3:6e:
d3:3f:71:f3:04:ff:f9:89:fe:1e:27:5f:62:ec:4e:74:55:35:
c9:f5:5c:b2:37:1e:4c:63:f5:89:5d:84:d7:93:42:d2:43:75:
b9:24:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:32:16 2025 by rpki-client