Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: TkEAYeoZgEu34zazr+VfGe3gSbm8zjc3VUQWsP72oHA=
Subject key identifier: 4A:FC:FB:F5:6B:78:F9:DB:4C:ED:63:E5:A7:5A:6A:38:AA:9A:E3:9D
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 0196B9A475C781812986C16A71EB67D6E83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 0CFD
Signing time: Sat 10 May 2025 10:01:25 +0000
Manifest this update: Sat 10 May 2025 10:01:25 +0000
Manifest next update: Sun 11 May 2025 10:01:25 +0000
Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: olY3LccVME5e4JMeDniyKhxNUhHhLgRmKqLBXbVcf08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:75:c7:81:81:29:86:c1:6a:71:eb:67:d6:e8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: May 10 10:01:25 2025 GMT
Not After : May 11 10:01:25 2025 GMT
Subject: CN=4afcfbf56b78f9db4ced63e5a75a6a38aa9ae39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:59:2b:ef:29:2e:45:72:34:76:d5:36:35:
3d:bc:b1:6c:b0:b9:86:e9:85:0d:25:be:2c:81:38:
f2:37:8e:a0:52:b8:ca:c9:c7:14:c2:db:df:5e:80:
27:10:b9:ed:6a:5a:d8:49:bf:1c:f5:53:ed:08:83:
bf:2a:5f:eb:db:af:dd:4c:06:ce:b1:ca:7b:29:37:
91:05:a4:af:a9:c1:d1:5b:30:2f:48:59:bc:e8:be:
af:17:9c:41:79:1d:a7:7b:6a:6d:bf:c2:a4:de:5a:
4e:db:68:01:c5:01:6e:77:ba:dd:25:b9:96:f4:39:
d1:06:7b:56:0f:b5:5d:dd:17:1a:62:af:a0:68:18:
cc:53:fc:80:99:9c:36:f8:c7:4d:ec:66:12:c7:b0:
ee:a4:26:52:e3:72:4e:df:5e:78:c7:f7:b3:04:fb:
03:0b:33:50:b1:e2:f3:cb:d7:fe:28:39:32:a8:28:
86:be:7d:32:59:ff:2e:1b:c7:1a:06:25:7d:ec:ca:
8f:2b:db:b1:3b:79:a1:95:96:76:87:08:5e:e2:ca:
9c:d9:f4:ab:cc:84:50:b1:44:05:78:72:37:78:78:
7a:39:36:ca:84:8b:1b:78:ca:9c:ac:02:88:bb:a9:
ad:0b:40:8a:3d:93:64:17:66:e2:03:e4:85:10:d9:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:FB:F5:6B:78:F9:DB:4C:ED:63:E5:A7:5A:6A:38:AA:9A:E3:9D
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:9c:b8:31:45:5a:97:5f:b8:8f:6c:f7:c0:09:6b:e1:86:
c1:78:b2:45:d4:e3:1a:eb:27:d9:24:05:94:0e:70:9a:68:b2:
d3:88:a7:3f:42:24:7a:60:f5:13:92:72:f6:67:99:6a:75:9d:
b2:a1:d9:f1:4f:95:9a:c2:e9:02:61:a1:5a:fe:e1:89:75:f8:
b2:26:76:fe:a6:c8:85:5d:e8:13:da:fb:2a:d0:4c:a0:3c:ff:
d2:41:01:a4:b9:db:90:5a:56:5f:fe:5e:34:fc:0b:aa:6b:2a:
fb:ea:16:bb:86:6e:9e:e9:d2:85:c8:e3:43:c6:66:63:fb:ee:
f1:29:e1:1a:0b:7d:ea:25:4b:83:53:7b:a4:b8:77:dd:59:3f:
d5:7c:fa:20:6c:65:ee:05:24:ed:12:db:a9:e8:17:58:3f:14:
b9:a9:09:a3:1c:ad:af:ac:a5:70:3b:d7:bd:63:b9:34:6d:bd:
1b:78:b1:7a:e9:46:81:35:21:b1:2a:47:6b:0c:12:6d:81:42:
20:39:53:15:a0:a2:1b:a1:52:f0:fe:f1:cc:67:84:ea:df:39:
b7:de:f0:2f:c2:1c:4b:0e:62:86:0c:e6:24:99:27:91:84:0b:
d3:13:f2:1f:19:79:44:f6:5c:fd:1e:ed:7c:77:65:71:06:55:
0f:b2:56:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:48:02 2025 by rpki-client