Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: 1kMNvQDW+r+Oqg2OWjlmaSosAAirrN5lqpA5bHqmEUs=
Subject key identifier: FA:B8:B0:1D:11:72:A1:20:81:EA:A3:CD:09:97:61:44:B0:18:D2:01
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 0196C5A78E886987EB99DA40DEE2BECC0C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0B9F
Signing time: Mon 12 May 2025 18:00:14 +0000
Manifest this update: Mon 12 May 2025 18:00:14 +0000
Manifest next update: Tue 13 May 2025 18:00:14 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: qQEFUfyHax1rOJAKSWdLWZXsJstQ5ZJt1tcY4RmrwiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:8e:88:69:87:eb:99:da:40:de:e2:be:cc:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: May 12 18:00:14 2025 GMT
Not After : May 13 18:00:14 2025 GMT
Subject: CN=fab8b01d1172a12081eaa3cd09976144b018d201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:26:ec:05:ca:9d:79:73:e4:04:95:e0:88:
af:26:52:07:aa:4a:7e:79:fe:f8:c9:54:ed:d6:14:
eb:da:c6:e9:3f:47:48:37:b0:6c:1f:5e:5a:d9:f3:
68:8b:88:44:4f:fb:cd:84:b8:c2:d7:06:86:fb:ff:
7f:59:d9:95:d5:c4:38:06:b9:c0:b9:5d:1d:76:1a:
6c:48:83:74:9a:00:50:7c:da:9c:54:c1:0a:76:d6:
b8:c1:60:d2:8c:10:61:17:e3:67:30:05:35:0d:bb:
8b:39:fc:83:3c:c1:8b:e2:98:20:6d:5e:17:2e:85:
f9:f1:05:7d:a6:5f:d0:9f:6e:d6:9a:99:16:4d:7c:
8e:c5:80:91:f1:4b:b8:b0:98:25:d8:d5:a9:6f:61:
56:c1:df:c6:45:2f:b9:f9:10:35:18:e1:d8:e8:39:
f7:a0:67:a3:20:35:8c:37:02:c9:2d:0e:4b:15:11:
f0:34:df:65:b3:b8:19:35:fc:65:6d:fe:69:ce:5f:
9b:8d:4f:15:98:4e:48:80:74:ae:17:1d:ae:17:43:
e5:54:ee:e9:09:84:13:bd:f6:c3:65:13:e5:ca:6f:
10:67:02:54:42:5a:bd:da:36:ba:f6:50:1d:f1:5f:
58:f1:f6:fe:c8:52:fd:46:90:84:3e:b3:21:7b:af:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:B0:1D:11:72:A1:20:81:EA:A3:CD:09:97:61:44:B0:18:D2:01
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ba:48:bc:fb:6b:1c:2e:6b:81:d0:fb:36:c5:99:40:c3:ce:
8e:a2:04:56:a4:aa:66:25:04:2b:02:3f:34:4d:94:13:34:69:
8b:9d:37:e1:19:4a:e9:c1:5e:d8:64:7a:6c:b7:0a:cb:4e:47:
a4:45:e6:8d:32:ba:50:32:ad:3f:72:72:c1:6c:c9:16:92:c6:
69:e2:6f:be:ef:d8:b1:d4:e2:9f:1f:a0:a8:9c:36:73:34:82:
5d:a1:33:e6:f1:40:f2:09:ee:f0:4a:3c:fe:76:59:c2:4c:26:
15:90:d4:07:d1:9c:de:b9:eb:8c:8a:e1:fa:48:0d:a1:7a:36:
dd:78:9d:b8:7c:1f:cf:36:17:2b:32:9b:19:cc:25:c0:b6:3b:
a4:bd:02:0d:70:d7:f0:63:d1:d3:af:56:81:c0:e3:fe:98:83:
ac:4c:b0:6c:fe:6f:0c:2d:d2:23:4b:03:06:cb:1c:f2:b9:02:
26:54:e3:f2:e6:5e:ed:b2:fe:99:7c:b3:2a:fe:8e:31:64:be:
fe:0c:06:0d:32:57:d5:22:48:ed:ac:e6:58:f0:4c:84:2f:1d:
85:24:4c:67:79:31:88:9e:aa:5e:a5:40:20:85:bc:c3:bd:70:
fb:35:32:30:fa:3e:eb:68:60:00:61:c9:da:eb:69:01:1d:a1:
85:2f:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:57:10 2025 by rpki-client