Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: b0AHRvQW4xl3uw7QVZppbu+Fs1pEwr/epleuqHw2OO0=
Subject key identifier: 26:36:BA:EF:9D:D0:B1:5D:E6:69:62:17:6A:AC:1B:B7:F0:4F:FE:59
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0196C83AD52F6DAD7AA150738F5EA81EAE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 14D6
Signing time: Tue 13 May 2025 06:00:20 +0000
Manifest this update: Tue 13 May 2025 06:00:20 +0000
Manifest next update: Wed 14 May 2025 06:00:20 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: s8n5rDP0UEG60Hx8AiKK8Kj2E3UUtx3ACUN5gIb5l9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:d5:2f:6d:ad:7a:a1:50:73:8f:5e:a8:1e:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: May 13 06:00:20 2025 GMT
Not After : May 14 06:00:20 2025 GMT
Subject: CN=2636baef9dd0b15de66962176aac1bb7f04ffe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:91:7c:c0:27:dc:6a:9e:73:2f:e7:28:2f:
d8:7d:3a:f6:78:ee:29:43:c8:e8:ca:d8:18:78:a9:
8d:74:aa:82:d3:6a:4e:65:15:5f:e8:6c:8d:c8:5e:
6e:c4:c8:c2:11:09:cc:14:31:a7:bb:68:17:60:7a:
77:af:a2:45:0a:1c:66:9a:aa:aa:3d:2c:9b:d6:22:
4b:f6:fd:b0:a5:4d:29:2b:48:ec:4a:35:d0:79:e7:
05:57:86:c3:af:e2:41:be:da:92:d6:1b:67:44:aa:
5a:b8:b5:4c:81:d1:e3:45:42:00:9f:ed:54:5e:72:
81:9c:03:1f:96:78:79:26:92:f3:bf:81:30:21:5b:
31:4e:af:26:af:0f:92:ef:6f:c4:34:8b:0c:4e:0a:
d0:1f:19:63:b9:de:68:3e:5c:1d:9c:de:df:1d:fb:
d8:8a:9a:6e:0f:96:9b:0e:1c:fd:96:ea:62:31:f2:
7e:c7:17:ff:44:9e:b7:4b:23:b1:44:4d:82:47:e2:
e5:ef:04:fa:38:8d:1d:24:96:00:8c:e8:56:fb:6a:
03:24:0d:aa:dd:90:15:31:f3:4b:a0:36:f7:15:5d:
01:8b:93:9b:1b:cc:a1:ce:6e:84:2c:82:18:06:13:
f3:63:06:f4:87:a8:ec:2e:77:da:d1:c0:e1:10:7e:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:BA:EF:9D:D0:B1:5D:E6:69:62:17:6A:AC:1B:B7:F0:4F:FE:59
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4f:8c:03:28:ed:f2:e1:08:01:f0:a7:25:e5:71:2c:0d:7d:
83:56:5a:0e:49:e4:81:af:77:26:4b:92:4e:12:98:23:48:d8:
0e:be:9d:65:84:e2:29:c9:57:99:97:c0:4d:72:fa:0d:41:64:
13:ed:a3:e9:1e:9e:96:02:46:a6:79:78:0b:f6:fe:76:d1:f3:
28:d6:68:98:6e:bb:75:4d:35:b2:bd:27:5b:b3:8c:56:37:e6:
83:a0:d9:10:6a:75:b5:d9:25:53:a6:34:d4:b4:ce:21:37:52:
88:5d:9f:49:71:1d:61:e2:a6:26:40:80:52:fb:ac:9a:ee:8e:
55:4e:db:08:b1:f6:3e:32:ae:73:27:cb:5b:59:bc:97:2b:11:
95:3f:23:dd:bb:17:0d:2b:b2:09:01:72:6b:0b:50:a0:5b:a8:
97:b5:b4:24:4e:98:de:81:c7:c7:f4:8b:f8:6a:e4:15:6a:ce:
b6:56:67:5c:40:7a:40:4c:c5:56:82:be:e6:c7:d3:40:38:ed:
c3:c4:06:63:84:a3:34:b8:bd:98:7e:0d:0a:cc:b3:06:44:0f:
9d:5b:7b:06:ed:7b:80:8d:ad:89:91:5b:a1:d5:f5:3a:60:0c:
4d:de:75:77:75:71:d5:93:5d:04:d5:c4:4b:0a:d9:72:19:0a:
c5:f7:20:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:51:54 2025 by rpki-client