Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: iBOu51Ouv7usDTsejy99kkbU59tPNUo0931gSN6lv6w=
Subject key identifier: 1E:85:E6:D0:27:B3:BA:53:95:5C:16:73:93:CA:A0:23:10:81:74:F5
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0196C314CACCB65AADF6AC07104C3DF4DF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 06:00:41 +0000
Manifest this update: Mon 12 May 2025 06:00:41 +0000
Manifest next update: Tue 13 May 2025 06:00:41 +0000
Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: w+NPwiIZzwyw7vHHF7q26VAM3yEwwveotNvummqz50M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:ca:cc:b6:5a:ad:f6:ac:07:10:4c:3d:f4:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: May 12 06:00:41 2025 GMT
Not After : May 13 06:00:41 2025 GMT
Subject: CN=1e85e6d027b3ba53955c167393caa023108174f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ec:55:5d:a6:05:81:e1:da:1d:a7:9c:a2:fe:
f6:a6:22:a4:b8:32:e5:1a:13:be:97:4e:a7:92:ca:
8c:f3:5f:64:68:19:b9:8c:04:8d:01:82:e9:dc:26:
e3:46:e1:8c:85:41:cf:2f:dc:d8:ba:6f:b6:1a:76:
e1:79:ab:24:46:21:5b:cd:81:c9:ca:f4:a4:5e:31:
c2:6b:15:d3:9b:52:ae:d2:22:53:8b:6d:c1:8f:3c:
52:6c:e0:6c:d4:48:68:1c:a7:ed:6b:de:ee:2e:37:
87:c3:50:8e:18:54:23:7a:8f:09:c2:d0:7f:e8:81:
a1:b2:cc:c9:d9:98:65:f0:16:f2:ac:c0:1d:08:ce:
33:0c:3f:54:65:24:cc:8b:85:a2:2c:a6:7d:9a:f7:
9c:6e:5c:8b:44:74:d8:5e:ea:9a:42:f4:fe:d9:ff:
a3:d8:4a:7e:e4:25:5b:02:97:bd:91:30:a8:78:73:
9d:06:78:c6:fa:eb:fc:a3:9b:c9:f5:73:b6:54:30:
d9:65:d3:a3:91:0c:f8:7d:e0:b5:01:3f:f2:99:53:
b0:d0:68:0f:47:03:17:1f:30:43:29:d4:8d:91:57:
33:65:f6:fe:cc:8f:a6:19:83:58:37:76:35:1d:da:
93:88:d5:47:8b:7b:76:aa:0a:e6:0e:f2:01:78:17:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:E6:D0:27:B3:BA:53:95:5C:16:73:93:CA:A0:23:10:81:74:F5
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2b:d8:d7:24:87:66:46:48:11:52:22:c4:f4:28:48:2c:c8:
7b:d3:67:db:01:d4:4a:ec:07:7f:39:5f:a2:4c:0f:5e:de:5f:
91:1e:13:d0:e5:4e:65:9f:8d:ef:1b:df:17:8c:75:05:7d:d7:
66:5e:06:83:58:10:ee:2f:ad:02:ec:f6:fb:6e:71:03:18:f3:
1b:df:31:75:a1:49:ad:76:38:4d:78:0a:f4:03:bd:c5:47:5a:
a3:5a:35:dc:f1:02:8b:66:4c:7d:2f:02:d2:f7:c4:be:07:df:
97:ad:7b:c6:7e:f8:e0:70:dc:60:83:77:c1:f5:88:f0:ab:3a:
28:46:8a:77:09:f4:59:c2:91:1f:0d:b5:76:5b:d2:24:2d:02:
ae:35:85:02:29:b3:1b:07:1a:78:45:4b:65:e1:f2:c8:b9:b2:
ec:78:41:96:97:b7:51:2d:9d:6c:03:88:e9:ae:20:31:a4:d3:
a8:0f:5a:0a:6f:58:a7:50:03:13:25:56:83:9f:b5:bd:5a:a0:
19:ab:f6:72:68:73:ee:24:d1:d5:87:0d:a4:d6:16:eb:0b:8c:
cb:27:27:e9:46:2a:19:e6:0d:4a:2e:f5:20:94:d4:13:93:b8:
d2:52:86:43:26:e3:4e:d4:82:22:f5:86:4c:bd:5c:23:3e:bd:
c6:d4:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:54:18 2025 by rpki-client