Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: l8bv+5YQIovZ6ESrfZ9FYdGsufftcqmompz0NMViiWk=
Subject key identifier: D7:3C:34:04:CC:F3:3A:1C:46:F3:F8:FC:95:EC:A1:A6:66:0E:AF:0E
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 0196CB7316334AA85BF9B138C57F13C97F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 1390
Signing time: Tue 13 May 2025 21:00:39 +0000
Manifest this update: Tue 13 May 2025 21:00:39 +0000
Manifest next update: Wed 14 May 2025 21:00:39 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: iu7fZ17ZTtpQobbfs6aWAmzbk+KGiAlCLBCq5fdqRnc=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:16:33:4a:a8:5b:f9:b1:38:c5:7f:13:c9:7f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: May 13 21:00:39 2025 GMT
Not After : May 14 21:00:39 2025 GMT
Subject: CN=d73c3404ccf33a1c46f3f8fc95eca1a6660eaf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fc:8f:8f:c3:9f:12:5d:d5:6c:33:04:ae:c6:
32:3b:60:63:5c:2b:5d:af:d9:cc:2d:14:f2:bc:1d:
f8:c5:66:0d:d1:40:03:23:ef:ee:00:47:93:2b:5c:
c9:a8:e4:5d:0e:15:38:2c:0e:68:ac:d9:02:66:bc:
49:b8:7d:a1:0d:96:ba:63:23:66:56:f1:d2:c8:a5:
36:7e:d2:09:b0:5c:85:1f:a8:54:f4:e3:ee:b8:a9:
ce:e6:37:85:45:4e:2a:4d:8e:e5:c1:1d:78:f6:20:
fa:bf:84:fa:12:81:5f:ce:68:67:95:c2:bd:ef:16:
05:a1:b7:7d:67:bb:91:99:5c:e6:a6:0d:83:92:c9:
16:35:7f:fc:5e:5d:52:79:26:63:60:43:62:8e:78:
ad:63:58:44:bb:93:0c:ea:53:22:17:13:06:8a:a9:
6d:00:59:e3:2a:a4:aa:50:af:4c:1a:7a:6f:9c:a6:
4b:f4:80:64:8b:be:42:14:af:ec:20:51:9f:bb:60:
61:4b:6f:9b:81:ce:ee:e4:ea:d1:74:0d:31:4a:4a:
f6:35:b0:25:a0:78:3d:9f:a7:27:2a:0a:fa:8d:e3:
ba:d6:2c:27:97:9d:8e:a1:25:f0:51:c0:57:ac:3d:
3c:30:e2:bb:5a:54:e9:ee:44:e0:96:43:64:30:4c:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3C:34:04:CC:F3:3A:1C:46:F3:F8:FC:95:EC:A1:A6:66:0E:AF:0E
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:07:56:fa:86:41:17:ad:77:42:f2:6c:9b:23:ef:c7:38:
dc:68:09:6e:8c:b9:1d:fd:36:65:c8:59:38:68:65:ba:69:2f:
6d:7c:18:3c:56:ed:33:17:78:2c:d4:20:06:6d:3e:f3:5d:d9:
e3:f9:15:13:dc:21:e2:29:3d:d8:6f:28:54:a0:3a:47:a3:04:
47:47:4c:54:c6:6b:0f:09:b1:07:29:c5:42:fb:4f:45:d0:af:
99:58:8f:fd:12:1f:1f:8f:44:33:99:7e:34:4b:d1:8d:57:5a:
c9:0d:7f:dd:17:ec:ba:25:3c:da:4e:21:64:20:1b:aa:09:cd:
98:96:b6:14:b7:c6:c7:91:b0:0a:66:d4:02:72:2f:a2:dd:aa:
97:b1:b2:38:a8:e0:c1:58:8e:7e:91:1d:c6:86:4c:b0:d0:f2:
d4:73:9a:bc:86:07:7c:57:6a:6d:ac:93:25:fb:10:ea:50:8a:
38:1a:2d:fc:dc:b2:ee:58:1b:48:31:0b:2f:a7:81:ec:24:1c:
e7:bc:65:5c:e0:08:d1:e5:ae:b8:00:86:87:7a:d4:ac:cc:a6:
5e:ce:96:53:33:2a:30:4d:d9:63:47:92:3f:74:a3:80:71:39:
99:41:85:cd:68:72:bb:a0:d2:a4:b4:9e:e5:0e:33:37:6d:7e:
aa:29:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:41:02 2025 by rpki-client