Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: NLzGVQFf46doR9E1Fy0XbD/j6g/e7+6g+4hd5Vkbl8s=
Subject key identifier: DA:8B:AD:13:AB:6D:98:2C:5B:6E:BB:ED:70:9D:5A:53:C8:73:18:BF
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 0196BD1267012D3098E30A1F28DDF682F625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0D9A
Signing time: Sun 11 May 2025 02:00:21 +0000
Manifest this update: Sun 11 May 2025 02:00:21 +0000
Manifest next update: Mon 12 May 2025 02:00:21 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: EOLoBcq9eoiea8JHCaFlbCXpGP1ZFtEhFYtG+iJAma4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:67:01:2d:30:98:e3:0a:1f:28:dd:f6:82:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: May 11 02:00:21 2025 GMT
Not After : May 12 02:00:21 2025 GMT
Subject: CN=da8bad13ab6d982c5b6ebbed709d5a53c87318bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:95:e3:2c:60:f4:0d:66:ff:54:44:fb:2b:
a5:2d:d7:90:d1:be:f2:41:37:df:98:44:6b:e8:77:
a8:95:2c:ee:a5:9d:d0:dc:a4:85:f0:e4:a6:0e:4c:
c2:77:cb:53:65:3f:9e:8d:b9:67:fa:62:b1:aa:62:
30:a1:1b:ce:f1:49:19:b0:e6:0f:b6:ee:d0:75:4c:
59:33:21:ab:17:a2:93:e9:ac:b2:a8:ec:62:1c:31:
10:c9:07:fe:55:1e:ec:39:04:38:e4:63:c5:8a:e8:
e9:73:06:cb:d0:12:1e:16:1f:0f:53:dd:b0:f9:14:
1b:60:fc:82:56:58:cb:c0:48:ca:c8:97:05:2d:e0:
18:84:3b:9d:5a:f2:0d:70:0b:fd:5f:48:b6:68:b1:
a6:23:cf:11:d0:c0:17:0d:1c:03:33:04:cf:0e:74:
8a:28:0f:7e:bc:c1:9d:81:af:97:26:09:01:2e:1a:
25:3a:aa:ed:cd:ef:39:4b:d4:71:1e:39:a5:78:20:
5d:a3:30:6a:26:ba:37:b2:91:ec:38:36:55:1c:04:
ef:11:a6:40:ec:7e:dc:ab:59:f2:32:c7:37:dc:f3:
0b:b4:f3:cf:b4:be:8d:77:29:5c:ed:5c:53:a2:99:
da:a1:1d:7b:b5:e8:b8:8a:f0:9b:e8:15:9c:16:f0:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:AD:13:AB:6D:98:2C:5B:6E:BB:ED:70:9D:5A:53:C8:73:18:BF
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e6:1b:0f:36:6d:1f:75:72:da:d8:b5:44:7f:fe:40:17:54:
c8:47:b4:a6:d3:ff:e0:5f:8b:cb:98:c9:6b:83:e0:22:7d:42:
1e:5b:6c:78:88:3e:22:b9:25:bc:02:04:d8:02:bf:45:e4:38:
a4:ed:d4:6f:7c:4e:1b:87:f7:4f:97:60:9c:50:2d:14:be:25:
4b:31:f5:99:01:6c:29:70:f4:e4:60:a0:f7:71:d3:e2:18:82:
7e:f4:ef:fc:32:68:88:9f:41:cb:6c:27:83:25:d7:5c:9e:95:
1d:cf:72:f2:4e:11:73:74:b0:72:40:c0:63:34:aa:7e:c6:39:
c8:4e:cc:da:09:71:52:2f:f5:32:30:6d:db:c9:ae:6c:4c:2f:
e7:4d:c4:41:7e:f6:65:97:98:71:a3:fb:bd:27:18:aa:d3:04:
46:35:b9:4e:b2:cd:d2:90:3e:49:27:59:e1:17:75:89:a9:a9:
a6:7b:18:71:41:c7:1d:1e:9c:82:f5:3c:80:af:03:bb:71:7f:
b1:b7:34:7b:78:bc:de:83:75:25:18:c8:86:66:2e:61:e5:92:
e8:16:54:21:67:ee:f9:44:04:cc:81:26:b4:cc:27:c5:11:d2:
a1:fa:64:87:cf:bd:6b:eb:71:42:b3:ad:e1:47:6d:d0:53:a6:
88:77:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:27:59 2025 by rpki-client