Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
File: p_xcZck6dAQIaxelTn4NqWCpspM.mft (raw, json)
Hash identifier: MRcvn+M1AIBWSy8GAAry7BJkXbPUHCRK1tGFJIU+hbc=
Subject key identifier: 85:33:A5:06:FF:B6:23:2D:11:E3:35:7C:D8:D5:17:5A:84:BD:9C:F7
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 0196A2E5385671BE9A326DAC5EF338668E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
Manifest number: 10A9
Signing time: Tue 06 May 2025 00:00:53 +0000
Manifest this update: Tue 06 May 2025 00:00:53 +0000
Manifest next update: Wed 07 May 2025 00:00:53 +0000
Files and hashes: 1: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (hash: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=)
2: p_xcZck6dAQIaxelTn4NqWCpspM.crl (hash: K0RovOtSc/3Dba3kTZ2Z5t2QdDb103A7U/JTlSFw2HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:38:56:71:be:9a:32:6d:ac:5e:f3:38:66:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: May 6 00:00:53 2025 GMT
Not After : May 7 00:00:53 2025 GMT
Subject: CN=8533a506ffb6232d11e3357cd8d5175a84bd9cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:1a:12:6c:b8:0a:00:d0:a2:93:72:d7:ba:
87:5d:68:61:04:7b:b4:24:9a:ad:b1:a0:ff:4a:82:
e8:b7:46:df:51:06:da:12:40:16:bd:4c:68:e7:0e:
01:54:aa:7f:d0:07:37:d8:f2:9e:63:ce:e8:1a:d8:
91:3f:f3:57:f1:16:99:48:a4:52:53:bc:92:74:2a:
ee:19:33:cb:2c:ca:72:18:7a:5d:fb:01:b6:f8:ce:
e1:6a:02:33:38:9d:f6:c2:21:5b:e8:66:04:8b:e8:
6c:bf:6d:3e:6d:24:8d:30:7f:24:4c:ad:d5:a4:7c:
89:fd:9d:98:33:ea:d6:0f:f2:ae:97:68:06:d6:36:
4f:e4:cc:b1:53:61:c1:45:81:b9:d6:df:55:4a:3a:
16:f0:a9:a2:3e:f9:4b:ba:9f:8a:1f:44:9f:92:e8:
33:c1:c4:ba:83:6d:d4:f5:ea:82:72:27:f0:9f:5f:
5f:fc:46:95:a0:0a:9c:bf:e4:3a:9d:0c:ca:06:66:
b2:b1:4c:88:e6:16:54:f2:21:20:37:03:7b:cb:60:
21:2a:1e:46:14:45:8a:76:67:8b:32:a5:21:ce:e3:
d3:23:45:8b:ee:3d:0a:5d:ea:13:2e:63:26:68:d5:
e2:83:8a:a6:21:4d:4f:90:e5:68:15:9a:59:ec:b1:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:A5:06:FF:B6:23:2D:11:E3:35:7C:D8:D5:17:5A:84:BD:9C:F7
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6b:0d:3d:e5:50:22:9b:65:96:88:4b:a1:5d:be:1a:bc:35:
e2:11:df:94:13:f4:59:25:d1:f2:40:9d:db:04:fc:b1:86:83:
68:25:15:65:d8:8f:3e:05:05:0d:bf:7c:74:7c:86:9e:c7:08:
7c:53:7b:41:98:14:aa:07:75:0d:27:78:fa:d2:88:1d:49:a0:
66:49:df:0e:b6:18:9e:74:29:2a:5f:b9:a8:a5:c0:03:0b:03:
e0:96:96:c9:bc:b2:10:fc:b7:62:b1:ec:f2:e0:5c:10:6e:c2:
f7:89:99:42:4c:d2:37:09:fd:59:9f:7e:32:1d:55:12:ad:3b:
67:b4:7d:2a:fa:6c:17:a8:b1:67:37:0c:9b:17:4d:ec:a9:dc:
c3:87:92:20:69:60:b0:b1:41:92:39:de:10:01:5d:30:94:5e:
53:e3:a5:70:c1:4b:aa:bb:36:da:cf:c9:af:ff:59:b1:8f:b6:
6d:25:31:1f:af:4a:e9:1f:98:12:ac:88:17:71:9e:67:52:eb:
19:4b:d3:86:a9:d5:c6:94:ea:aa:47:c4:0e:33:8c:88:11:ec:
59:b8:12:38:5b:80:db:31:91:7e:d2:6f:0b:a0:ff:4e:33:c2:
af:b8:64:39:88:2d:5d:73:34:3f:3d:1f:20:66:05:92:10:29:
e9:ae:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:25:28 2025 by rpki-client