Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: gG215o9tkNwofaXs+zzAD8trOqo8kfOIU22YaLUGYwQ=
Subject key identifier: 27:11:41:98:79:4B:1D:E5:01:DB:1E:E1:7C:F5:DF:72:18:D6:E6:36
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 0196BAED5429E4535CDD008798D1F6344B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 14C3
Signing time: Sat 10 May 2025 16:00:37 +0000
Manifest this update: Sat 10 May 2025 16:00:37 +0000
Manifest next update: Sun 11 May 2025 16:00:37 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: hXmh2ZDr6LU2EdGBAM6DER8rQBgktf/rHdsMMLkB3PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:54:29:e4:53:5c:dd:00:87:98:d1:f6:34:4b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: May 10 16:00:37 2025 GMT
Not After : May 11 16:00:37 2025 GMT
Subject: CN=27114198794b1de501db1ee17cf5df7218d6e636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:34:df:8f:f6:f1:51:a3:ba:da:2d:e1:30:
88:81:4a:be:72:1b:18:7f:c1:8b:57:6c:a8:eb:73:
1d:4a:17:bf:24:08:81:07:22:15:19:4e:94:8c:ad:
86:0d:c7:4b:5d:d9:15:50:d4:71:e5:b6:24:44:19:
8c:43:e4:8d:d2:c0:39:d9:ff:fc:61:87:69:26:34:
93:32:07:7b:4a:f7:d0:c7:9c:42:97:43:1d:33:3e:
65:2e:40:d1:51:4d:a0:e3:4b:41:16:e2:1a:42:f1:
c3:91:76:42:92:78:3a:59:36:dd:bb:0c:23:86:ea:
1b:df:7c:65:46:47:e3:c4:72:3c:10:d6:59:cf:13:
96:7d:3f:3b:23:5c:e3:35:4f:68:bf:89:6f:83:01:
c4:7e:ed:81:10:6a:e9:f3:16:e1:93:2b:db:a4:26:
29:2a:53:e4:34:97:46:8f:a2:de:7a:90:b9:e6:e8:
e6:c1:fa:58:44:fa:6d:bf:ac:47:ed:c1:78:5e:b6:
7e:1b:0b:cb:5c:db:29:81:c8:84:22:e8:ab:f1:93:
6d:c8:fb:97:83:ff:b6:2c:4b:c4:a4:b5:f8:3a:12:
1d:0d:de:34:fb:4e:c5:bd:1e:5b:68:ef:8c:85:dd:
49:7d:1f:29:e5:af:14:03:d1:46:e3:c9:19:7e:ef:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:41:98:79:4B:1D:E5:01:DB:1E:E1:7C:F5:DF:72:18:D6:E6:36
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:89:ae:d6:94:a9:42:ab:0a:70:f0:c6:52:41:89:e1:c5:ce:
a4:be:18:2c:03:cb:5e:b2:63:33:76:21:3f:8c:cd:c5:56:ca:
05:7e:33:58:c1:be:62:b2:6a:66:06:c4:3c:20:ca:5a:d2:fe:
99:f3:42:3e:3a:a6:5e:d7:c8:49:b2:4d:d7:21:2e:c1:06:38:
a8:39:47:0d:4b:d9:03:50:81:c5:97:07:5f:13:ea:d6:21:b5:
63:07:42:84:bd:bf:71:69:64:9d:c2:e8:bc:fb:c2:ec:97:c2:
5b:a1:38:ca:a0:98:60:fe:4c:b2:ed:4a:73:ff:dd:2a:7c:72:
05:18:d8:50:ab:4e:a0:4c:e5:43:3c:68:08:7f:cb:9a:2a:d2:
bf:20:bf:c9:93:8f:9e:cf:28:80:b3:7b:23:75:4f:eb:81:d5:
fe:8f:68:35:5b:c6:62:f6:38:90:57:15:17:a3:c7:62:27:e5:
b0:e6:f6:58:76:c6:7a:90:d8:78:2c:ac:37:d7:ad:7d:38:fe:
48:76:77:52:d6:11:bb:f3:94:1c:0f:fe:79:32:54:2b:4f:b3:
e9:66:47:9e:e4:28:6f:d1:2f:75:3e:e2:ff:62:fa:d8:44:e8:
b7:65:81:6d:48:5b:54:57:60:90:56:7b:48:3e:72:86:f8:25:
b9:5c:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:44:38 2025 by rpki-client