Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: qMEloM4obmSlqhygRIXSjBbdPwwKLNmuNrJeSCk8Ulo=
Subject key identifier: 98:0E:F1:DF:6F:4F:92:FE:55:94:79:B1:E0:32:52:56:33:72:4E:BD
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 0196C94DC4F3B7B74DF5A457B756D4A176E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 0220
Signing time: Tue 13 May 2025 11:00:39 +0000
Manifest this update: Tue 13 May 2025 11:00:39 +0000
Manifest next update: Wed 14 May 2025 11:00:39 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: wi/5U+5eL0C1h/rNse5UfxOX4CRggar/ekMN53xjfB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:c4:f3:b7:b7:4d:f5:a4:57:b7:56:d4:a1:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: May 13 11:00:39 2025 GMT
Not After : May 14 11:00:39 2025 GMT
Subject: CN=980ef1df6f4f92fe559479b1e032525633724ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:c8:3c:68:3f:a2:d7:79:46:46:85:94:fd:
5a:aa:ff:b1:6c:e4:81:75:0f:0c:b3:cd:00:e9:d9:
59:c0:a1:a7:35:d4:d7:15:86:be:53:c7:b2:6b:28:
5f:4c:11:42:2b:97:5e:fa:8f:71:e0:07:98:82:7c:
16:dd:c6:e1:33:5c:5c:b1:ab:71:29:99:34:b8:53:
4d:16:ee:cb:a1:e0:34:81:5c:af:4e:db:6a:8d:3c:
d9:58:32:86:c2:0e:47:a5:73:c7:a7:6b:ca:fc:ee:
ca:ee:0e:15:fe:09:ef:02:38:e2:d4:fe:6e:aa:6b:
1b:be:38:52:de:02:db:3a:bb:c4:0f:c2:fe:2e:d1:
1a:71:8a:14:7e:ce:f9:2d:5c:eb:bb:b4:f4:ce:83:
2d:60:fe:8f:29:fc:82:a0:1d:f7:ed:0a:f0:08:fb:
ce:de:45:9c:8e:c6:c9:f9:e2:bd:ec:da:fb:c7:e5:
ff:6c:9d:de:c4:ea:07:3d:46:11:e0:e8:37:79:c2:
1a:f0:ad:55:9f:5f:a2:65:8d:43:be:5e:81:90:9d:
b9:d3:8c:ec:9d:0b:d9:99:c2:67:c7:b7:cc:6a:a0:
be:1c:8d:54:4c:ae:1d:ba:13:d9:ec:64:17:d6:bf:
29:5f:19:36:91:7e:1f:e6:7e:66:84:50:37:5e:8a:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:F1:DF:6F:4F:92:FE:55:94:79:B1:E0:32:52:56:33:72:4E:BD
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:8e:28:05:f2:55:90:e0:ec:cb:ca:be:cb:1f:ff:a5:7c:
68:ca:9e:c4:97:04:40:4e:59:10:02:6e:b0:bd:c5:e2:8e:87:
99:28:4c:cd:b6:09:01:e8:8d:3e:17:99:a6:09:3f:c7:3c:dd:
96:03:40:d5:c1:c3:2e:7f:cc:c1:47:0d:36:66:89:78:44:f8:
32:20:0c:b7:32:cd:91:d6:0f:03:ed:5d:d8:89:be:41:04:95:
2e:60:6d:ab:9a:dc:02:f6:4e:d2:56:3d:87:be:f4:36:66:fb:
9a:e9:dd:20:e5:61:00:ab:7d:92:26:75:e2:68:04:ef:4b:66:
1d:f1:64:1d:71:e3:5e:cc:32:ad:ee:d1:a8:04:04:9f:92:5b:
db:07:e0:a8:5c:24:ff:5e:7d:e0:1a:5d:f2:46:d9:4e:58:85:
de:77:74:6b:75:a7:bc:8e:4d:61:9d:ba:b1:5d:c1:7f:cb:57:
86:64:45:bb:ce:b6:36:ea:42:a2:04:53:8e:ec:b5:b9:d7:99:
4a:22:2d:29:5a:44:be:94:ed:00:97:62:ba:89:28:44:37:3a:
d0:74:1f:1f:e6:91:24:21:c0:ad:09:48:01:68:17:aa:29:8e:
e2:a5:f9:29:f8:01:ea:7d:44:38:58:f0:d0:1d:c0:63:a4:6b:
69:bf:6a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:41:37 2025 by rpki-client