Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json)
Hash identifier: jGdVhrwv9xFbJNyVyDX8ja7yR/4NxiyGeoMftkjXwzo=
Subject key identifier: 4F:B1:A1:DD:FD:90:6D:F2:BA:55:2B:DC:7E:F6:2B:2B:08:07:F6:88
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 0196BAB69299E65078866941D91783FD15FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
Manifest number: 1542
Signing time: Sat 10 May 2025 15:00:49 +0000
Manifest this update: Sat 10 May 2025 15:00:49 +0000
Manifest next update: Sun 11 May 2025 15:00:49 +0000
Files and hashes: 1: 0LO0qT2-0L6mWDwJ3dVrGvaEEOA.roa (hash: m3gjbEV2ZPpf1SrIWWEpb/lM9m2SeM9EF+s0bK96n04=)
2: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (hash: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=)
3: GZyq4JhiMN6IbDxHDi387ilVO3Q.roa (hash: RAmDxoFTdOQGRBWibMySEyO1+N/egEhlrBt73Hj0G1U=)
4: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: sgtT/q/xJipWsuhcBW6M2seod6Hj+BPyrMM01PFdC78=)
5: XsnL58BowN54P94Hq8ZFELardLk.roa (hash: HNbFuOKPa1T82T8LpW7Qm3FZ0tR+dmMImgYgvtx3m4g=)
6: Zz42OKsTm8e7N4-UL7iAE7WQUo8.roa (hash: 5tp1DE1mgaUL43CN7zGdBuvgS2VFLrFuAK++O/dGYog=)
7: eGwOE8lbraIFP9l-UBBCUyjN8_w.roa (hash: E3bGB9caMn035nPuIHCWLooaKqDnHxrQ+ZG/yfDBfXc=)
8: obqfL4R2IKMApxxeeUPFE0sW9OQ.roa (hash: 7Ovq+/kB1PpmG+7SGcAWS7Jl70fuixev1vRb1jw0DXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:92:99:e6:50:78:86:69:41:d9:17:83:fd:15:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: May 10 15:00:49 2025 GMT
Not After : May 11 15:00:49 2025 GMT
Subject: CN=4fb1a1ddfd906df2ba552bdc7ef62b2b0807f688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:ef:88:3d:35:ea:14:9e:7a:c1:0a:b4:70:
1e:2a:86:19:53:f4:f1:ed:e5:39:9e:06:1e:a2:5a:
2f:45:4e:70:0c:c2:81:e5:b1:fa:09:54:8e:e8:92:
59:5e:0a:08:f2:81:05:b2:70:95:e4:c8:7b:c2:05:
b8:af:21:da:77:4a:59:6a:97:f5:88:ab:c6:fa:08:
81:48:11:af:94:b3:6a:d9:6d:79:2e:97:a0:dc:72:
18:c1:8f:03:d0:e9:8e:65:17:f9:26:05:97:8f:1a:
69:22:42:29:b1:9e:5a:e8:a7:ed:86:e5:e2:28:ac:
ac:a8:da:9c:3b:e0:3d:14:f5:5d:bc:c1:fc:b1:ae:
27:7b:d9:05:25:65:27:09:4b:f0:4f:7b:bc:a8:eb:
d2:30:94:aa:ac:00:4f:1d:d1:4c:95:3a:4f:dd:2e:
05:26:3c:fc:1c:a4:83:3f:78:5b:57:fb:a7:02:b5:
b5:df:0d:c0:38:9e:a6:7f:d3:2b:60:47:ca:08:96:
2d:2e:02:20:01:f3:e8:68:61:aa:ae:92:a5:fd:89:
7e:ad:d5:ba:77:a5:20:9f:ec:16:fc:c4:2b:a6:37:
55:10:ae:a2:21:87:b2:eb:03:60:01:cc:90:55:92:
b5:c5:c1:b9:72:58:56:7f:eb:32:82:b7:c8:8a:99:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:A1:DD:FD:90:6D:F2:BA:55:2B:DC:7E:F6:2B:2B:08:07:F6:88
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:c2:af:bc:57:f5:d3:b0:27:61:9b:b4:13:2e:8b:07:fd:
20:be:c5:0a:f4:ff:15:8c:b2:f4:c1:27:2e:56:97:d0:a8:ed:
09:88:08:80:32:97:f6:25:86:a8:50:66:c3:e0:a3:d2:bd:04:
a1:90:d7:cb:93:5d:a4:5a:9d:84:8b:73:5f:09:a9:d1:2d:79:
f5:b8:ef:23:08:16:6f:3e:5d:d7:d6:67:26:2b:f4:c0:b4:5c:
c8:51:9c:8b:59:46:e9:2b:5f:6a:46:dc:76:1c:52:4d:8d:09:
45:64:bf:66:d0:8a:46:1b:43:2e:fb:b8:58:d5:0e:29:d3:ca:
c1:1d:af:a8:03:48:9d:14:1d:b5:5e:a9:83:c0:e0:4f:b1:f4:
d2:f2:8f:31:b6:d7:d2:2a:98:cc:aa:dc:94:6a:26:5f:06:9a:
93:2a:4e:6e:8d:a2:63:2c:95:5a:b5:40:a2:d5:e7:f7:44:df:
37:4e:6f:e9:01:db:ec:fc:ed:a6:42:d1:7b:88:dc:c9:73:d5:
fa:16:82:0b:db:05:db:4c:38:40:9a:e6:18:fd:69:47:f3:3a:
0e:43:7b:cf:73:5e:fe:08:91:e4:4d:4f:d8:44:67:6e:99:a1:
c7:e6:8d:b6:54:62:81:b0:0a:bc:82:33:b2:9b:3d:85:10:4f:
f5:d1:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:55:20 2025 by rpki-client