Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: E4tT2tqahOLQOLdAFxrP9aBFTByGR7EJj3I7Ks8NRwQ=
Subject key identifier: 3A:0D:13:3B:BF:EE:AF:85:16:92:88:A3:05:09:32:84:E3:8A:06:C7
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 0197C9F08C686DC0BC1C44C14C9FBFF39206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1521
Signing time: Wed 02 Jul 2025 07:01:14 +0000
Manifest this update: Wed 02 Jul 2025 07:01:14 +0000
Manifest next update: Thu 03 Jul 2025 07:01:14 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: Df3WMW31LTwOzudCtaPwgKpBB4ivmoqi2NlE7PiJWxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:8c:68:6d:c0:bc:1c:44:c1:4c:9f:bf:f3:92:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jul 2 07:01:14 2025 GMT
Not After : Jul 3 07:01:14 2025 GMT
Subject: CN=3a0d133bbfeeaf85169288a305093284e38a06c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:74:fb:81:5a:16:47:6e:33:1c:16:f7:ae:
27:83:cb:9d:72:71:90:e7:70:73:66:83:5d:9b:ba:
bf:95:83:b2:50:68:85:85:ee:b2:46:43:c5:fe:e8:
d0:e1:cb:d2:1d:9b:39:54:5e:29:1c:b7:da:d3:6f:
95:61:08:97:3f:ee:d2:57:72:30:67:64:60:6c:68:
48:a1:8a:0c:ef:d5:a1:d2:77:98:d9:46:eb:51:4c:
5d:40:45:80:e3:0e:c0:fe:b7:ff:91:0e:37:f0:fc:
ea:5b:7d:ac:23:d0:bc:c4:d4:e3:c3:c8:55:0b:bb:
4b:e1:30:03:c3:ae:2e:b3:bb:06:15:6b:98:fc:52:
12:f3:e6:cc:02:c4:6a:31:58:36:3e:25:7e:86:12:
ba:0c:1f:fe:8d:eb:4c:79:c9:3f:f9:ab:64:47:f8:
ab:f7:0f:26:9a:aa:80:2c:83:1c:05:d6:83:2d:69:
f0:9c:37:e1:58:5a:a8:32:27:89:ea:f3:e1:8d:69:
4a:03:e4:09:db:c2:7f:88:5c:27:f3:8e:97:cf:26:
93:c8:c7:bf:b9:1f:43:76:d0:ba:5d:da:68:d0:10:
72:c1:f5:a4:06:c5:23:ab:9e:12:11:a2:4e:c3:db:
ab:24:f8:6e:d4:fd:e2:88:09:de:9b:ad:b4:0d:e5:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0D:13:3B:BF:EE:AF:85:16:92:88:A3:05:09:32:84:E3:8A:06:C7
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:83:38:05:ba:2a:c2:73:50:a6:37:92:5b:f3:ce:6b:b5:65:
12:e8:9d:1e:5a:ea:a9:de:7c:af:b5:e4:09:d8:d8:7e:6b:d1:
e2:00:19:7b:62:d1:be:c6:74:78:76:a1:ff:92:02:65:65:74:
1f:c9:fd:d2:95:56:63:aa:e8:01:e6:a6:00:87:e8:3f:4c:e8:
39:e8:bb:7f:4c:c7:0e:44:9a:8b:46:e2:74:6b:5e:3a:ef:8a:
01:22:fd:e7:5f:54:31:d1:49:d5:3b:71:11:6d:ce:92:c6:b9:
39:d8:3f:d9:eb:a2:70:98:cd:44:bb:d2:b7:eb:52:21:e2:48:
b4:fa:48:e7:70:06:81:86:cd:70:67:e1:ad:46:22:ef:8a:44:
81:a7:70:f8:dc:75:38:b4:14:62:8e:a6:45:bb:18:b7:f4:f1:
9c:ec:3a:c3:f7:3e:99:03:82:84:8a:89:cb:31:32:ba:2f:12:
d3:a7:70:60:51:ba:b7:77:59:0f:43:39:f3:ee:c0:38:58:59:
ee:d6:5c:dc:d0:28:e7:6e:de:25:14:e9:f6:5c:33:5c:42:97:
85:bb:c6:14:ed:76:02:66:df:33:67:17:48:b3:d0:b4:bd:05:
ca:b3:be:cb:9b:59:f3:eb:a9:11:f5:ec:4c:f9:cc:03:a6:3f:
88:3b:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:10:53 2025 by rpki-client