Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: dd8vhbwJZMOWCOvJqtOPBei+uLGxtdsVtniVG+LjwUY=
Subject key identifier: F0:13:43:63:54:3F:3D:20:94:DA:FE:F8:31:D3:EA:29:3A:AC:60:AA
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 0196B17BF6784EA51C3D9CD7CECA763D88FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 20:00:12 +0000
Manifest this update: Thu 08 May 2025 20:00:12 +0000
Manifest next update: Fri 09 May 2025 20:00:12 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: GpVq+/nl+JK83GO7WeCtc3gyWSfkON1jtnoQeEPgrpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:7b:f6:78:4e:a5:1c:3d:9c:d7:ce:ca:76:3d:88:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: May 8 20:00:12 2025 GMT
Not After : May 9 20:00:12 2025 GMT
Subject: CN=f0134363543f3d2094dafef831d3ea293aac60aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:17:e7:86:bc:5e:2b:9f:be:a9:bf:e2:15:
99:f2:49:f4:05:77:3a:fa:3b:ff:83:ee:ee:af:6d:
74:bf:6f:00:48:9a:b9:e3:89:1c:e2:99:26:4d:a1:
bc:c9:e7:a1:a5:0f:a4:df:f5:f5:28:53:c8:1f:45:
92:5a:da:a4:02:db:dd:99:f9:ad:26:a0:25:05:fa:
84:24:0d:da:25:4a:ff:93:dc:b4:32:c2:96:f6:42:
47:7b:42:c4:3c:2b:23:ea:bd:76:e2:eb:d3:c1:c9:
68:55:df:07:20:e9:7c:a9:29:de:8e:35:1f:41:b2:
01:27:d1:98:e6:5b:97:ed:b0:08:2d:cf:af:98:4d:
56:44:a6:c7:d7:dd:94:9a:8a:a5:0a:7b:ca:f0:ef:
a4:aa:19:dc:9c:52:12:66:c3:c2:89:53:e9:40:01:
c8:fb:9e:92:ef:0e:30:e9:e6:2d:be:b6:c0:a8:95:
7c:81:28:17:65:56:31:f1:8c:04:94:c6:8a:32:d7:
cf:30:94:2a:b8:d8:84:5c:dc:35:38:7f:ce:4b:bc:
ab:b6:d7:f2:7a:e0:af:05:bf:d6:9d:6c:e0:96:f2:
45:d4:0c:78:3c:97:ba:31:e6:1c:92:7b:8a:2f:68:
c8:d7:e6:53:38:0f:75:c1:82:ec:49:00:57:fa:a9:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:13:43:63:54:3F:3D:20:94:DA:FE:F8:31:D3:EA:29:3A:AC:60:AA
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8d:c3:16:20:9b:c0:2a:e6:4d:cd:db:b1:9e:e3:0b:b1:fa:
5c:06:86:82:65:cc:1f:8c:e4:82:aa:ee:9c:6e:8d:b9:45:c3:
e0:05:2a:39:2e:e0:66:84:5c:07:35:3b:7f:39:f8:d9:65:66:
67:52:9a:62:28:b5:23:dc:16:7f:c1:22:2e:cf:13:ed:7a:6b:
ca:1a:72:98:4d:a4:2f:1e:86:9c:a1:2f:67:ee:d7:ff:b3:6a:
8d:c8:67:dc:9e:8b:92:7c:45:64:a2:b6:bb:8e:a0:c4:56:c7:
8f:3a:02:36:45:88:ae:df:92:c9:13:cb:fa:16:6e:31:76:28:
d4:6f:68:e8:e0:41:ae:00:98:f8:51:ce:3d:8a:8d:a1:60:0a:
98:05:06:7f:c3:82:44:38:3b:9f:46:f2:fa:84:bf:e3:41:3c:
06:c1:2b:fc:da:a4:9e:ed:f6:54:02:08:a7:db:c5:e8:4c:b3:
03:8f:c6:a4:b6:dc:90:5a:73:54:10:c8:db:2f:03:11:92:2d:
92:62:61:c5:5a:66:1c:a9:b7:a0:0f:7b:b2:0f:3e:20:4c:42:
53:f9:7b:85:bf:c7:0e:4f:70:9f:15:16:45:34:cb:3f:46:6b:
23:5b:e9:71:4f:6c:69:09:2b:68:79:08:0a:92:93:a4:1e:28:
0e:14:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:55:35 2025 by rpki-client