Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: zR8V0ym5O723XUjcFHRwaVO0Ynm+khqI5BBc8h0rsB4=
Subject key identifier: 98:71:27:77:C4:D9:18:23:C8:E8:0E:E3:56:72:F3:D6:91:6D:13:03
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 0196B3A1981C46463F0682CEB1996C2DACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0C41
Signing time: Fri 09 May 2025 06:00:34 +0000
Manifest this update: Fri 09 May 2025 06:00:34 +0000
Manifest next update: Sat 10 May 2025 06:00:34 +0000
Files and hashes: 1: C21UyjKwyHlotXzUs2wrT9-7ml4.roa (hash: ZR2xWVZUFQuKM7jT26V7/BzP532dWCavsfpkwUm/YAU=)
2: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: XgEHtT/lBpgXl8p1KEO5ghJN4743jYc6jVyrqGmuQ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:98:1c:46:46:3f:06:82:ce:b1:99:6c:2d:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: May 9 06:00:34 2025 GMT
Not After : May 10 06:00:34 2025 GMT
Subject: CN=98712777c4d91823c8e80ee35672f3d6916d1303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:77:7f:e2:6a:6f:49:56:b7:22:2d:9a:b5:
f9:96:09:e3:07:74:66:44:bb:25:77:e0:c0:74:86:
dd:89:81:f4:40:01:9a:5a:c3:f7:a3:9e:66:2f:de:
5d:8a:9e:cf:c2:ae:df:8e:8f:21:b9:55:50:ab:fc:
82:82:5d:a1:d1:df:9e:ed:66:35:3c:d3:8a:b5:94:
22:8a:dd:b3:4a:34:1a:5c:a4:7b:b3:70:88:38:8f:
13:91:43:73:74:ef:b4:f0:ce:d0:db:66:33:e5:30:
6b:0d:e3:9d:c3:95:fe:48:f5:bb:bb:de:33:b6:4a:
9e:92:6e:34:73:f7:82:76:44:0a:29:b4:ae:82:e7:
34:0a:c0:03:f7:00:d8:2d:a0:c5:56:a8:c5:3c:01:
98:70:57:6e:67:91:99:5d:41:8a:bc:55:3d:1d:56:
50:0d:f0:34:ed:17:68:d6:17:47:37:53:fc:a6:9f:
60:86:04:86:6d:41:46:ec:be:c7:03:8c:d2:71:33:
aa:e2:7e:b2:8c:5f:74:20:de:42:7e:f8:7f:ed:49:
38:7e:03:b6:04:87:13:72:1a:a9:93:96:1c:62:5a:
d5:6d:95:8d:a2:90:c3:89:5b:64:da:38:64:8f:0e:
83:fd:ee:57:3f:31:04:cb:ee:71:fb:16:81:26:58:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:27:77:C4:D9:18:23:C8:E8:0E:E3:56:72:F3:D6:91:6D:13:03
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:92:06:b7:9b:a6:e3:1d:e0:28:40:92:d5:b9:17:b6:48:
f8:42:bc:95:05:53:98:b6:a5:44:35:d9:c2:2f:23:e0:d5:e8:
ae:f5:78:2e:41:ff:c0:4c:42:73:e7:97:1a:35:ab:78:85:5e:
11:ab:57:2f:9a:5c:bc:a5:df:15:e5:46:23:09:d2:7c:e8:f1:
67:49:8e:f9:17:3e:1c:53:95:b4:51:6e:ae:86:68:10:78:9b:
97:1a:fd:76:70:50:72:eb:e5:e6:e6:4f:4d:45:0e:7d:55:74:
cb:fd:07:d7:eb:73:8c:7d:20:4a:d2:bd:c6:10:95:6f:e4:f1:
24:42:bf:74:55:37:3d:bf:ad:c7:52:a0:00:3e:e2:d0:0f:a0:
b2:a4:0a:75:ec:e9:68:ae:83:92:79:36:52:70:d8:9b:30:fc:
7b:0e:8a:56:7c:c5:65:08:c8:e0:47:79:53:bb:54:8c:9a:c9:
fd:ce:99:3a:45:77:56:06:20:13:20:7c:51:3f:44:b4:56:76:
ef:1c:01:da:62:98:a9:27:08:50:6c:b1:21:e2:02:a4:e7:5e:
22:8d:47:94:81:08:cf:c6:6d:be:74:6b:c9:92:d5:e4:95:39:
99:10:0c:1b:f2:f1:e2:b3:a4:3b:37:9b:c8:94:b2:06:09:e6:
d8:1b:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:21:55 2025 by rpki-client