Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json)
Hash identifier: JN7BdsBiwm/mn33K0hDMEDSOdbYq32PBtcWg+bF1fWQ=
Subject key identifier: C0:9C:8F:2B:2A:B1:AD:8E:74:08:29:12:D0:8A:9B:04:28:16:8E:58
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 0196DAE67A6EF6A16733345EE94FAD5119AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
Manifest number: 1544
Signing time: Fri 16 May 2025 21:00:59 +0000
Manifest this update: Fri 16 May 2025 21:00:59 +0000
Manifest next update: Sat 17 May 2025 21:00:59 +0000
Files and hashes: 1: jvr-TtmshyO-21Athyko7-oCA0g.roa (hash: YbFNgrbQ4nYeYFpzPZPmunVsALPP8JY0whWvWBRLdqk=)
2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: 49WiXqJMa5gLzDLtv9zDw2pMEiS7v/pn4MXYAXaGRcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:7a:6e:f6:a1:67:33:34:5e:e9:4f:ad:51:19:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: May 16 21:00:59 2025 GMT
Not After : May 17 21:00:59 2025 GMT
Subject: CN=c09c8f2b2ab1ad8e74082912d08a9b0428168e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:0c:84:c5:8c:aa:92:73:47:a9:31:ff:d0:
73:f2:97:06:f2:d5:97:1c:7a:d9:d2:64:54:a4:f7:
ed:a3:0b:53:cd:a6:f1:74:d8:b6:6b:b3:8c:1f:ac:
27:9d:c3:eb:c5:13:1b:0f:ee:e8:d6:0c:4d:38:a4:
d1:8c:2c:f1:21:3c:46:aa:2b:1f:b7:cf:71:9f:86:
9a:a5:34:47:6e:78:d3:d6:fd:44:03:3a:ba:00:ef:
4d:f9:c6:7b:e2:84:31:54:c4:76:ca:bb:f7:dd:01:
d4:04:b1:51:43:0d:c0:86:05:5a:a8:a5:12:1b:3c:
32:c4:38:4f:3a:f3:23:db:b0:72:c2:c7:ca:48:b8:
b5:df:a3:45:5c:aa:1c:26:45:7f:9b:a6:2b:20:db:
6a:75:b2:d9:33:e4:8c:31:ed:91:c7:02:fe:d7:33:
71:2f:6a:1a:11:2f:c3:b4:73:41:04:ff:6f:a0:2c:
8c:02:7f:5a:9e:08:26:2f:0a:aa:9e:52:0a:ec:44:
90:e5:86:bc:a3:2c:b7:64:da:01:43:a8:6e:40:a1:
d8:27:8d:86:4c:48:5d:8b:a6:b4:7c:37:f4:43:92:
d4:d2:d9:53:48:36:59:87:cf:3a:e9:8e:e8:6a:db:
14:17:d4:2d:ba:17:1f:f7:b8:6c:7f:30:5b:d0:b0:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:8F:2B:2A:B1:AD:8E:74:08:29:12:D0:8A:9B:04:28:16:8E:58
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:17:ac:77:74:5e:84:eb:cc:6f:2b:4f:75:52:c5:f6:34:76:
51:84:31:31:6d:ad:05:00:24:57:de:ba:d0:bd:98:6d:d0:b3:
31:fb:14:71:cb:94:e5:56:4c:6e:0c:db:53:60:89:bb:45:71:
a4:ca:73:68:ff:f1:a8:b2:22:e3:d1:d8:06:f4:db:2f:66:e2:
08:45:08:dd:2f:21:94:aa:cf:fe:30:21:e8:c7:32:99:33:7c:
5c:f6:e3:1b:d0:81:10:e8:40:0c:e5:d3:ab:de:be:d4:13:e7:
ec:f6:80:dc:44:fb:3f:41:c6:e5:0d:df:6b:f1:9b:88:1c:2a:
58:49:65:61:c2:03:18:f5:65:9b:a4:ab:d9:47:82:fa:2d:da:
17:62:22:3b:9c:d2:c5:a3:f3:ae:57:ab:4a:ad:ed:cc:81:34:
77:7d:c7:fb:5e:b9:cb:fe:cc:a6:ad:d9:27:66:fd:23:d1:60:
9c:95:82:70:d1:77:e9:3b:46:69:e8:67:7d:b9:dd:fb:96:66:
68:c2:6c:8a:91:bc:ad:30:45:50:82:cc:f7:48:04:95:e2:61:
cf:8d:c2:18:e3:bb:44:e5:41:98:86:71:bc:d4:58:de:80:f3:
bb:60:ed:79:12:99:30:7f:c2:ac:f9:b3:e7:b1:5d:da:16:1c:
46:99:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:22:38 2025 by rpki-client