Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: FkmRh+BR0qzJwNLMbN5tRxE/6qGHjY6GJrRLj0AcnXc=
Subject key identifier: 98:5C:84:49:0C:B9:16:30:66:B5:D7:2E:9F:08:3A:3F:AB:B2:59:A6
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 01969E632B7676837E49DF7A57A6546EE361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 125E
Signing time: Mon 05 May 2025 03:00:21 +0000
Manifest this update: Mon 05 May 2025 03:00:21 +0000
Manifest next update: Tue 06 May 2025 03:00:21 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: 8xiZOF0C+zPuYK0Gwp/FgszKTZkVVj//Pf1ToFtLrek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:2b:76:76:83:7e:49:df:7a:57:a6:54:6e:e3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: May 5 03:00:21 2025 GMT
Not After : May 6 03:00:21 2025 GMT
Subject: CN=985c84490cb9163066b5d72e9f083a3fabb259a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:42:43:61:3d:ae:fe:52:8b:7f:48:2c:c2:
d3:9a:2b:5b:39:75:10:92:f5:bd:8c:3a:c9:e8:cb:
29:6b:18:af:e6:d9:cd:f1:11:ed:3f:37:e1:38:4f:
8a:bf:7c:28:77:10:e0:46:4f:18:a7:d1:cc:43:16:
68:b2:95:60:c4:7c:7c:d4:09:54:8f:8d:f9:2d:4f:
c6:05:8d:47:9d:28:90:0a:c8:7a:d3:b1:27:8a:58:
29:e9:bc:d5:c9:32:c3:ff:5a:c5:54:54:3e:1d:c5:
12:db:eb:63:d4:db:2a:d5:6b:e4:d2:c2:83:4a:82:
48:71:0c:ec:0f:af:1b:4c:9d:59:26:de:a4:30:fe:
f1:8e:93:a5:a4:45:56:e4:18:43:47:dc:2c:b1:ff:
54:e8:e0:c5:7b:7a:5e:64:37:3b:04:a5:04:a4:0b:
4f:0a:06:9c:18:41:eb:6a:fe:7c:e3:1d:bd:bd:f9:
ba:8e:28:79:46:c6:f8:02:17:c4:cd:1d:34:80:e2:
2e:e8:eb:55:a8:63:44:84:99:14:e8:b6:91:a6:2c:
09:05:fb:c1:3f:90:88:7e:39:e7:bb:f2:97:42:45:
7c:ab:c0:2d:4c:92:03:94:09:ad:64:a6:f7:44:4f:
76:cf:be:c4:3f:80:31:4f:bc:f0:7d:09:6e:26:42:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:84:49:0C:B9:16:30:66:B5:D7:2E:9F:08:3A:3F:AB:B2:59:A6
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d0:2a:5c:91:c5:59:26:af:5c:b0:1a:83:e5:f3:8e:93:0b:
49:39:cb:06:5d:93:1d:77:e7:f3:7f:b2:5f:40:f5:da:a1:97:
ac:6b:fa:9f:34:f7:8a:84:92:ff:07:0c:74:a3:98:4f:17:2a:
f7:e9:53:90:ca:3c:9c:14:d3:e3:ae:d8:ad:1e:9e:dd:30:93:
14:ec:9d:18:7e:6c:ba:6b:2e:15:a3:da:56:e1:08:11:7f:77:
92:81:95:df:99:6c:5c:a3:47:6d:32:3b:e1:f4:02:bb:74:59:
3f:74:98:64:88:79:77:47:03:0f:0f:03:84:ac:3c:9b:c9:b6:
70:1f:9c:dd:e4:0e:50:ad:1e:ec:ed:a2:dd:0a:f9:fe:7e:56:
6a:1a:0f:60:82:9c:02:49:bf:d0:82:02:06:76:fd:f5:ee:db:
53:94:98:0b:0d:4c:d3:ce:0e:7e:04:95:22:88:3c:b3:2b:44:
eb:97:a9:21:4f:5e:1b:fd:a4:d2:7f:cb:40:5c:81:14:dc:de:
56:78:ac:b6:4b:d5:b1:e8:1f:81:07:7e:06:60:d1:d5:a3:87:
b4:6f:1b:c0:59:22:83:28:60:f3:ce:75:bb:b4:11:50:4a:12:
45:b6:66:09:e9:47:89:f2:7d:07:9e:80:b4:b0:9a:cd:9c:a9:
74:de:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:02:27 2025 by rpki-client