Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: Oc94FGRaAt2BLqSee/1VvIUZkKwZCosQenPEIdF+HxM=
Subject key identifier: C3:1C:81:1D:2A:20:FE:A9:3D:1D:6B:69:E6:9C:BB:0C:C2:C2:2D:22
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0196C2A68BA606282643378E4259E7AAEAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 04:00:16 +0000
Manifest this update: Mon 12 May 2025 04:00:16 +0000
Manifest next update: Tue 13 May 2025 04:00:16 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: OoS+g+8qyO72HxAJap1V6gvCeiuh7b0g1K1evNZJoMo=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:8b:a6:06:28:26:43:37:8e:42:59:e7:aa:ea:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: May 12 04:00:16 2025 GMT
Not After : May 13 04:00:16 2025 GMT
Subject: CN=c31c811d2a20fea93d1d6b69e69cbb0cc2c22d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:7f:de:2f:ff:b7:d3:64:54:61:16:29:3a:
3e:dd:14:40:b8:4f:1f:66:d7:dd:ff:e5:37:5c:bd:
92:6c:86:a0:9f:d6:97:da:de:9e:be:05:a8:9e:d9:
99:a1:bf:5f:01:60:f4:4b:7c:6e:e6:91:2f:97:45:
75:ed:86:f8:c3:8b:dc:2d:23:47:d8:5a:e9:07:6d:
50:47:0b:5b:ca:46:fd:fa:8b:1a:19:eb:2f:f0:c6:
ed:53:41:fa:1a:70:67:85:c3:d1:4f:66:10:b2:c4:
1e:fd:d5:85:c8:42:a3:a5:56:2b:ec:1d:31:91:16:
ae:2e:85:f1:3f:5d:70:2e:a5:0e:aa:e8:23:d3:2b:
fc:ee:26:ba:07:5b:52:9d:b0:d0:ed:8f:72:67:c9:
81:33:df:19:07:eb:a5:32:31:33:3c:74:bb:48:b3:
d2:7e:2a:3f:75:73:cb:6a:fe:33:df:74:c6:bd:63:
e4:97:e7:a9:ac:46:c3:db:72:45:9b:f5:43:e9:2d:
8c:e6:a8:0d:55:71:d1:78:5e:d8:ab:97:1d:eb:4d:
0b:1b:08:13:84:71:8f:dd:b9:69:4b:05:7b:25:ea:
56:96:97:1d:c9:3d:b6:fa:1c:88:91:e6:41:3b:2b:
a5:07:cd:a2:46:fe:a0:9d:e8:49:a7:ff:b7:e1:b3:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1C:81:1D:2A:20:FE:A9:3D:1D:6B:69:E6:9C:BB:0C:C2:C2:2D:22
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ae:61:01:d3:2e:d3:69:ac:ba:db:a5:1c:5f:3f:8d:70:8e:
90:92:dd:81:c7:7a:62:2b:75:50:2d:11:74:f4:c1:2a:4f:33:
7f:91:db:17:eb:19:a5:74:68:35:95:88:72:3b:60:09:c0:28:
bc:59:04:31:37:9b:b0:6f:5f:4e:e8:5a:9b:4a:90:98:fc:26:
c2:6c:e1:04:6e:46:43:61:2f:24:fb:ca:b6:fd:61:63:0c:58:
25:2c:72:42:2b:75:be:e5:26:5e:57:2b:db:1f:6c:77:ba:9b:
81:37:f0:6c:19:43:48:f5:f8:41:3e:24:fe:f0:03:6d:76:b1:
78:51:e1:cf:0f:c5:46:f6:28:bd:07:94:a6:36:b4:56:9d:81:
be:3f:8f:57:2c:2c:34:f8:3d:00:02:6a:20:50:d3:d7:12:d9:
33:45:b7:bb:32:e3:9f:d6:30:40:4a:3c:d7:f4:ed:6f:c5:7c:
f0:38:7c:15:f9:99:f7:14:10:b8:92:d0:61:e4:af:95:82:5a:
32:5a:cb:fa:50:3a:5c:b4:48:fa:32:ee:4d:ef:33:4e:7a:b9:
01:b7:d3:85:eb:1a:2d:5b:46:4a:08:a1:ee:76:4b:23:8d:0f:
ef:af:25:73:80:89:c4:fd:2c:74:16:b0:8b:a1:57:a7:a1:77:
22:97:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:56 2025 by rpki-client