Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: 4ghdBJQKMm0UiDENPk7CZbl/nA8f26wIz82KhzNJix4=
Subject key identifier: 7A:41:16:7C:D7:D2:C3:4C:50:87:A0:D0:9C:31:6B:C0:12:B4:1D:C8
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 0196BD12994835DB5EC568CE4B42802C9F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 0FF1
Signing time: Sun 11 May 2025 02:00:34 +0000
Manifest this update: Sun 11 May 2025 02:00:34 +0000
Manifest next update: Mon 12 May 2025 02:00:34 +0000
Files and hashes: 1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: IUqGux2ok2BtEk3S7ODod+HwAVo6KiHNsvVoE56hxOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:99:48:35:db:5e:c5:68:ce:4b:42:80:2c:9f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: May 11 02:00:34 2025 GMT
Not After : May 12 02:00:34 2025 GMT
Subject: CN=7a41167cd7d2c34c5087a0d09c316bc012b41dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:7a:f3:83:db:1d:63:fc:e9:c7:21:ab:90:
18:e3:2e:7d:1b:76:92:6e:81:7f:b2:5c:1e:cd:3d:
f2:32:50:b5:34:8d:4f:dd:15:9e:4a:43:2b:e0:fd:
67:fd:dd:a8:35:7f:1a:68:01:1c:3f:24:08:b4:e5:
2a:e8:18:44:e8:6a:d8:db:b5:11:0b:51:aa:dd:7c:
5a:82:c0:fd:d5:28:b1:dd:74:a7:18:ef:3b:39:b8:
c3:56:e8:50:a0:22:da:38:36:20:2a:c0:a4:a2:42:
a8:f3:59:02:cb:92:82:0d:d0:a6:20:9d:3c:8e:0f:
8f:38:e3:f6:4d:4f:c5:81:46:05:de:fc:b9:ea:74:
a7:c5:4d:ac:dd:56:37:23:32:e2:24:4d:d4:a0:bc:
80:40:2c:f2:70:5a:68:61:9e:93:93:d6:14:19:22:
e3:a4:a0:80:76:21:7f:d3:8b:64:f1:b9:4f:5b:dc:
6a:47:98:f7:52:ec:77:91:2c:61:e2:71:25:0c:91:
cf:b1:ce:76:d1:91:43:a9:eb:f2:a1:31:fa:77:3a:
72:d6:09:09:ac:76:28:38:8d:58:11:e6:0a:38:f0:
91:9f:10:a7:a6:5e:35:1a:99:09:c7:4f:76:05:47:
73:42:60:50:14:9b:97:be:ed:a6:12:76:8c:7d:42:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:41:16:7C:D7:D2:C3:4C:50:87:A0:D0:9C:31:6B:C0:12:B4:1D:C8
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:77:ff:2f:dd:98:10:6c:52:4e:94:d0:ad:22:66:95:52:00:
c4:e0:3f:6c:25:68:0a:0c:9c:5a:cb:c4:77:a3:e5:3c:a6:1d:
19:28:b3:77:e0:43:ed:7f:22:d6:85:74:b8:e0:42:40:02:76:
78:bc:47:be:9b:f0:cd:fe:8b:b9:19:b1:0c:ab:ef:fd:07:ac:
d0:87:f7:5d:f1:89:55:99:1d:2e:13:51:c6:54:18:7e:75:2f:
95:9c:fb:13:40:fb:44:66:32:21:68:02:b9:f2:5d:f2:78:08:
53:ea:b6:ab:f7:7f:25:42:b0:30:fd:8b:d8:d4:d8:28:ae:a3:
ae:12:2e:52:a1:ab:c8:bc:0a:d7:75:3c:e3:31:1a:81:5e:73:
ab:c3:24:1f:f3:19:44:d9:fe:31:dd:5a:2a:70:48:89:6f:d1:
4b:b1:cb:1e:58:6c:2f:02:40:10:97:7d:9d:0e:04:df:de:cb:
60:c0:c5:4e:f4:1f:72:b7:83:8b:ee:61:e5:4b:fa:6a:af:0e:
ee:5a:fa:7d:40:7f:20:ce:9e:32:76:0d:d5:f4:a2:92:24:6a:
8d:9f:b0:69:23:a9:61:dc:e1:90:a2:2d:13:78:b5:fb:80:df:
7c:64:dd:d2:0e:d6:07:bd:18:79:38:7d:c0:0c:9f:fc:05:34:
f1:c3:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:22:43 2025 by rpki-client