Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: WcELO8TjYU+o0G5J/Nylcnq3ud+9IHjJeEADOT7cKXI=
Subject key identifier: EA:8C:96:D5:EC:71:0C:90:9F:4E:C8:A8:A8:4C:5B:E6:40:D4:52:A5
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 0196C984A4B78BEA8A04AE158C0C92682F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 12:00:35 +0000
Manifest this update: Tue 13 May 2025 12:00:35 +0000
Manifest next update: Wed 14 May 2025 12:00:35 +0000
Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: 0s28ACuDq/hrAVLCrB2JUXxIlbg6Nznb49JhUg9za/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:a4:b7:8b:ea:8a:04:ae:15:8c:0c:92:68:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: May 13 12:00:35 2025 GMT
Not After : May 14 12:00:35 2025 GMT
Subject: CN=ea8c96d5ec710c909f4ec8a8a84c5be640d452a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:9c:03:1d:62:c4:a9:21:04:8f:a3:c3:ba:
91:c6:bd:54:87:93:ad:07:4a:20:26:4e:f6:14:23:
be:a5:61:9a:c8:05:98:7a:fd:94:ca:b1:90:ed:40:
2b:99:da:d0:67:49:4e:eb:93:d0:ae:f0:10:d8:f2:
d6:88:43:b4:ec:77:85:a2:28:f6:cf:b9:55:d6:74:
b5:0c:ab:ca:31:81:d1:f2:bf:57:7b:9c:26:99:c9:
91:88:7c:ec:eb:9e:f2:b0:98:b9:79:85:a0:ed:d1:
39:18:2a:68:a6:4f:ea:bb:58:c3:d3:6d:b9:5b:d3:
89:55:7f:28:bf:bb:0d:1b:88:d3:80:61:cd:39:67:
e7:35:ef:bc:ed:bc:29:f5:e7:63:c7:a3:05:ee:52:
9b:f9:80:f4:05:74:75:c7:3d:74:f5:c6:0e:68:7a:
98:d0:b7:c2:51:93:74:df:85:7d:eb:73:78:5d:c2:
08:fb:56:73:c9:19:ac:2a:b8:ea:92:60:19:0b:3b:
cb:d9:69:e4:ab:27:ba:ab:72:2f:48:c6:97:96:35:
76:b6:4f:f5:af:bb:cb:7c:24:37:12:b5:aa:45:0f:
fb:ad:9c:b5:33:6e:71:e1:f7:b8:9e:94:9c:45:35:
85:96:11:8d:bb:af:b3:88:64:73:ca:85:f0:f6:94:
a1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:96:D5:EC:71:0C:90:9F:4E:C8:A8:A8:4C:5B:E6:40:D4:52:A5
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f6:8e:30:f5:af:13:7b:f2:4a:27:d9:98:95:83:47:63:ac:
0d:cc:1d:9d:c2:7f:94:6f:d7:72:46:21:d1:15:9b:80:b0:ca:
ef:a3:32:00:e4:91:6b:c7:14:00:22:48:9d:5e:a8:87:b2:76:
cf:6c:3f:49:2d:36:73:6e:5c:4b:bf:f3:b4:6f:9a:12:a1:d4:
23:20:56:ba:1c:a7:48:5a:ba:32:dd:46:de:7d:38:84:e6:f6:
71:76:3c:80:a5:d6:52:b9:76:3e:a1:a6:96:0c:dc:4a:5f:fe:
2e:a3:7e:91:5d:e1:ee:60:a0:6a:42:a6:a3:63:3a:66:a3:c6:
5e:d2:83:a7:25:cf:43:b0:04:e5:94:0b:98:6a:50:ee:13:6c:
7e:ca:bf:de:fd:9f:94:8d:d0:32:5a:fe:bd:c5:24:ee:e3:0d:
77:21:e9:ff:dc:3e:22:97:27:dc:90:57:3c:96:de:5a:2a:d5:
8f:52:ad:ee:04:00:8f:d0:ab:17:24:ac:8f:39:0c:2e:28:e6:
0c:f0:3b:9b:e1:7c:c9:b2:bd:06:2e:91:66:dc:ca:a4:9a:6e:
92:bb:90:da:ed:02:45:25:40:56:43:00:63:ea:dd:ff:ee:81:
39:54:69:f9:7c:e3:44:31:c5:d0:a8:28:a3:23:f0:7e:91:d8:
31:b2:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:22:22 2025 by rpki-client