Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: L3FHN+bV4hCAxncdwZ2oG4G6t8mFA1UYVIHgf2ixwNs=
Subject key identifier: 15:6A:50:7C:76:F0:D1:4D:B8:23:94:6B:4D:F9:A9:81:6B:C7:17:3F
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 0196AB437548BBF9476ECD704C5526055E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0C50
Signing time: Wed 07 May 2025 15:00:46 +0000
Manifest this update: Wed 07 May 2025 15:00:46 +0000
Manifest next update: Thu 08 May 2025 15:00:46 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: hEYWOZSEivoM6IcG8ehdqsFHpJWyy6uzONFfsNENG1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:75:48:bb:f9:47:6e:cd:70:4c:55:26:05:5e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: May 7 15:00:46 2025 GMT
Not After : May 8 15:00:46 2025 GMT
Subject: CN=156a507c76f0d14db823946b4df9a9816bc7173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:18:ca:70:db:f5:ec:41:fd:11:fd:01:58:
8b:7c:b6:a2:4f:4d:8a:84:81:39:0b:d3:e5:2b:35:
78:97:3a:d8:1d:f8:1f:05:45:ea:8d:32:e0:58:63:
19:0f:1f:bc:cd:e3:1a:53:3a:f6:a8:0f:ca:92:2b:
8d:cb:51:b9:ce:19:e5:7c:0a:c7:69:86:b4:fc:44:
36:b3:aa:66:c1:d3:b6:6f:de:47:bb:7d:e6:56:17:
e5:ec:e2:bb:01:ac:29:8f:3d:a9:cd:8a:5f:6a:1d:
3f:64:f9:ef:29:74:5c:19:79:53:ac:95:30:68:f6:
a5:42:18:15:7a:c9:4c:dd:7a:9c:de:60:80:41:09:
0b:ab:f1:83:d9:88:76:40:78:f9:91:9c:68:dc:b0:
20:b5:6e:5a:b9:f9:6d:cb:38:9b:ba:fb:ee:a6:2f:
40:56:74:8b:f4:8b:a8:03:b9:91:14:ff:bd:f9:79:
80:73:d8:36:ae:77:09:f8:56:4c:14:bc:4a:33:be:
9e:09:8d:2a:4e:cf:53:c5:dd:07:dd:88:45:f9:4b:
28:25:0f:3c:ac:dd:0a:93:48:83:f7:a0:4f:ca:b4:
5f:31:09:60:c3:2e:08:68:ac:2e:4b:99:74:e3:bb:
73:f3:c4:cd:1f:d1:7d:3a:41:cd:7a:92:9b:d1:d5:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:50:7C:76:F0:D1:4D:B8:23:94:6B:4D:F9:A9:81:6B:C7:17:3F
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1f:e9:a6:fa:cf:dc:00:bb:31:00:16:5b:3c:47:55:a3:74:
1b:5e:07:45:3a:cb:6c:f0:4e:48:4b:c8:a3:2a:41:1c:ff:c6:
cd:0d:4e:d9:5e:b5:2d:d2:82:f3:ab:35:11:c9:0f:07:f9:78:
2d:e1:d3:c7:f7:c0:a1:3c:b8:4e:52:5b:9c:f7:12:c4:09:a8:
0e:d6:c1:41:72:24:55:3f:91:5e:b7:ae:2a:f4:04:5d:b9:7a:
49:95:98:75:8a:c2:72:50:2c:b4:0e:ef:b5:2c:54:5a:47:24:
93:9f:fb:00:b3:80:4c:6c:9e:bf:98:eb:4c:32:5d:1e:df:03:
f8:6c:21:9e:d5:3f:4e:64:36:1e:1d:ad:28:aa:2b:8b:15:b6:
27:e9:1c:4c:e1:00:b5:51:b7:41:0d:f4:d0:ab:90:88:98:0e:
09:88:f5:f1:48:f7:5f:65:bd:dc:68:2c:fd:01:9c:02:3b:ee:
d6:79:1f:cc:9e:d8:7f:9e:63:a9:3d:7c:d1:50:38:2e:fe:84:
43:e0:56:4b:a4:1b:92:e6:e0:43:63:b5:39:95:ca:8b:f2:cf:
c4:49:60:de:22:8b:10:df:9e:50:7a:3c:7d:50:2d:e1:91:ba:
c2:7e:3d:85:75:0a:8d:e7:d9:ea:c6:b0:9b:5c:89:87:d1:f8:
2a:da:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:32:01 2025 by rpki-client