Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: 1DK1DDUl8SoAu75MEWExUKVZNQOrX1qLN32yzrRWW1A=
Subject key identifier: D3:83:45:0B:48:0F:F3:DF:47:F9:38:92:A6:71:11:39:DC:46:7D:AF
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 0196A353062913C841617B78E6A972B15E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 02:00:49 +0000
Manifest this update: Tue 06 May 2025 02:00:49 +0000
Manifest next update: Wed 07 May 2025 02:00:49 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: k6Op3DcOqHJzN8raOjfUPbnmvGSjb9pMusZJbhOT/7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:06:29:13:c8:41:61:7b:78:e6:a9:72:b1:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: May 6 02:00:49 2025 GMT
Not After : May 7 02:00:49 2025 GMT
Subject: CN=d383450b480ff3df47f93892a6711139dc467daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:d1:f2:fa:2f:ea:39:e8:93:a6:fc:74:65:
c8:ce:02:5a:ba:b9:10:2c:cd:b0:76:e0:da:fa:6b:
5e:2a:c0:ce:84:77:80:c4:5c:fb:77:8b:23:50:33:
23:5c:70:ae:74:ab:c7:19:ed:64:45:1a:88:0a:01:
62:24:cc:97:3f:6e:49:e6:a3:da:b5:d7:33:72:ae:
c9:10:78:37:c3:77:42:92:54:3f:9c:b1:c6:bf:79:
1c:60:e4:89:6a:b4:84:0e:2f:b7:87:e1:70:d7:a7:
ec:47:bf:8e:be:67:ff:e3:f6:6d:2e:bc:cd:9e:77:
7e:4c:ba:fe:96:72:bc:ba:f0:be:17:07:9d:d8:54:
53:6d:29:a5:8b:0f:ee:a4:86:89:dc:b4:d1:c5:3a:
50:db:eb:6c:ab:a5:b8:f4:51:e2:31:6c:97:e1:8c:
f7:bf:60:80:a7:70:86:7d:cd:cc:dd:a7:66:59:4c:
62:8e:9c:06:1d:10:f8:75:0b:2f:2d:c3:25:b8:e0:
78:2d:d6:c4:83:c7:7b:38:aa:f7:ad:8e:af:e7:a5:
41:d2:bd:a8:0b:17:95:06:6e:3b:d9:c8:38:ef:11:
21:a6:1b:de:8f:68:b0:62:f0:40:cf:ef:37:42:b2:
c5:49:7a:35:e5:48:95:2b:0f:3c:3e:42:04:34:8f:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:83:45:0B:48:0F:F3:DF:47:F9:38:92:A6:71:11:39:DC:46:7D:AF
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:22:b5:ef:8a:2b:9a:7e:de:39:fc:3b:c6:19:6d:72:52:1b:
5d:96:dc:c5:bb:cf:8e:51:4b:f8:27:99:a5:de:62:18:bd:2c:
b9:e7:54:b5:e1:9a:7e:71:41:44:f5:c7:ff:fc:d3:26:be:91:
a1:13:04:4f:36:b8:44:6c:94:a4:ed:93:20:e1:f4:ad:68:63:
82:3c:ec:c7:dd:b8:33:7b:b0:15:76:aa:eb:9f:71:c4:32:2f:
61:24:16:ef:0c:66:b4:e8:e8:1b:b6:59:5a:83:27:52:6f:6e:
2b:f7:94:97:d1:3e:8f:47:ad:31:69:f0:fd:2f:5c:88:5d:00:
f8:15:95:fc:c2:72:cc:82:e2:3d:9e:87:0b:92:90:79:3e:e5:
1f:dc:17:b0:57:61:06:26:48:24:53:45:2d:ad:e7:98:13:48:
1e:bb:e0:7c:4c:db:50:24:1c:28:3f:83:d1:04:00:0b:65:b4:
d4:67:13:7c:fa:f8:cd:ed:4c:29:eb:4b:16:03:85:5a:80:1d:
00:4e:38:fc:65:a0:d7:3f:44:06:37:d9:e5:87:2e:3b:58:66:
28:5e:1f:a0:ff:b5:63:f4:6e:8a:88:89:45:e5:c9:ff:f8:5f:
81:19:f4:27:62:2b:38:61:fb:17:6b:cd:6d:15:c2:ee:f5:34:
15:a7:83:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:35:53 2025 by rpki-client