Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: gZP7QuFajrIGWLTMa8+oeUE27a3INwK4X4hAfsH9bK0=
Subject key identifier: CA:B3:15:BF:E2:BF:22:9D:7F:E9:53:ED:9A:2A:D1:DE:8B:A7:AC:FB
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0196A089A025DEBA8346679FF966A1AAD41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 152C
Signing time: Mon 05 May 2025 13:01:35 +0000
Manifest this update: Mon 05 May 2025 13:01:35 +0000
Manifest next update: Tue 06 May 2025 13:01:35 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: fLeG4DWABUehz0QfFP9TWMYQQ/JO+HQKeGarGJsrOg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:a0:25:de:ba:83:46:67:9f:f9:66:a1:aa:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: May 5 13:01:35 2025 GMT
Not After : May 6 13:01:35 2025 GMT
Subject: CN=cab315bfe2bf229d7fe953ed9a2ad1de8ba7acfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:65:5f:a8:b6:65:e6:e8:6f:f6:ac:e9:12:
41:2d:75:02:d2:52:dc:ab:80:0d:9d:d2:d6:ab:97:
fe:87:3a:b1:f0:8e:7f:9f:d8:4f:b7:12:15:b5:b3:
3e:d1:d4:ee:99:5b:d5:53:37:d0:e3:d3:71:48:ef:
aa:ea:2c:5a:64:e7:e1:c1:c8:b3:a7:b5:0c:db:2b:
77:4d:9b:40:7f:27:c7:e5:41:a0:1a:60:2d:fd:42:
50:69:a2:7a:5a:2b:86:c0:31:d8:da:5a:8b:4f:31:
d6:94:0e:3f:01:61:56:1f:bd:b3:ca:70:e6:d0:ce:
e7:00:da:d1:5c:33:6e:6b:86:d8:67:b7:98:42:cb:
c0:bc:8d:c7:78:e8:58:28:d8:52:54:5f:e0:bb:e0:
a9:62:7e:8e:e1:7e:e9:20:01:7b:c3:d1:76:cc:a5:
76:3e:fc:e5:05:35:8e:af:09:95:6f:d8:ff:e9:1b:
cc:fb:c2:f2:3f:9e:e9:38:34:4f:28:94:ae:bf:c9:
18:3b:fc:99:3f:4a:ea:0e:dc:55:ab:40:ae:06:34:
ea:61:f6:9f:f1:a4:6b:2c:2e:7c:0f:c8:ec:6e:a6:
57:54:e3:5c:3b:bc:cd:54:eb:de:90:b5:7c:41:c3:
a8:fc:16:18:aa:48:9b:94:f1:71:82:64:1c:6d:3f:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B3:15:BF:E2:BF:22:9D:7F:E9:53:ED:9A:2A:D1:DE:8B:A7:AC:FB
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:c8:63:4b:7c:1a:e9:ef:3f:ef:35:2d:29:63:a8:54:75:
10:c3:90:2a:02:ac:3d:f6:9e:0f:04:1d:a2:47:58:83:97:c0:
de:ac:0d:b8:85:9d:75:52:9e:fa:46:9a:11:1f:83:ae:23:d3:
fb:74:9c:f3:ca:7a:c4:3c:da:f1:f1:33:ff:fe:b2:7c:2c:ce:
60:e8:0f:6f:d2:cc:5c:1d:9c:35:96:51:cb:1d:f9:43:e0:c8:
f4:18:3a:89:73:10:d0:7b:87:4c:ed:d6:7d:1e:a2:f6:54:72:
bf:12:be:d6:90:67:c3:2a:cf:c4:23:19:9a:2d:fa:69:3a:3a:
3d:64:7c:0e:a2:d7:c8:82:56:6f:a5:12:a0:8a:ab:c8:da:06:
e0:5d:a0:92:60:4f:51:a9:e8:14:72:26:d6:06:20:e5:99:c4:
07:ec:55:62:02:cd:6d:6f:5e:04:fd:d0:41:6e:96:a7:d1:3a:
1a:bb:ff:c3:94:62:11:df:bc:0e:c2:ea:3f:40:70:bd:07:ed:
a1:1b:08:f7:37:58:90:34:db:b8:62:99:2c:f6:b4:b4:78:2d:
79:b1:15:7b:9a:c2:3c:1f:84:52:67:3e:00:9a:cf:fe:e4:ef:
d9:3c:f8:23:e0:aa:96:01:e1:a2:81:25:9f:06:19:37:2d:48:
17:ab:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:14:00 2025 by rpki-client