Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: HZFZJEgbYsvLDumDu8XpU8lmXrxRkTGMnkLV69X6S78=
Subject key identifier: 32:F5:95:2A:AE:AE:C2:C7:74:53:67:01:33:D2:D4:B4:F1:90:12:48
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 0196C125F12C27CFB52E2327E5B8A0D500E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1498
Signing time: Sun 11 May 2025 21:00:11 +0000
Manifest this update: Sun 11 May 2025 21:00:11 +0000
Manifest next update: Mon 12 May 2025 21:00:11 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: NbI+AuuqFMjMJwHfE9vWOQH2rthxhvOeceodomrwCwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:25:f1:2c:27:cf:b5:2e:23:27:e5:b8:a0:d5:00:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: May 11 21:00:11 2025 GMT
Not After : May 12 21:00:11 2025 GMT
Subject: CN=32f5952aaeaec2c77453670133d2d4b4f1901248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:57:db:fa:90:5e:54:15:a0:78:64:e7:a7:
2f:22:d0:a3:d0:58:c3:98:64:37:c2:65:4e:d2:39:
1c:04:65:e7:69:b1:30:35:13:38:fb:56:da:bd:a9:
6e:76:0d:70:03:76:84:3f:73:17:47:ce:4f:37:89:
e7:8f:84:40:1e:70:63:60:99:63:90:d4:25:9d:8a:
5c:f2:4a:ad:c5:e9:74:ac:c6:e1:20:11:7e:af:65:
13:f9:ad:45:da:11:15:e0:b8:63:2b:7d:d0:01:32:
7d:f8:90:d2:8a:bf:d0:db:34:36:ee:5b:ce:19:65:
bc:90:8f:46:1b:61:a1:63:6b:9f:ef:7f:4d:3d:7e:
73:16:87:e0:1b:bf:a4:b6:99:ba:2a:82:c4:bc:db:
f5:f2:de:0f:27:dd:16:24:fc:18:05:24:bc:f2:ff:
53:99:35:06:6b:41:87:82:99:28:05:e6:50:29:97:
2e:19:df:6f:c8:f1:76:98:8a:11:37:58:be:d2:11:
1e:c9:1d:df:e9:6e:9d:13:e0:d5:5f:63:20:30:69:
ad:76:04:03:56:da:43:e5:66:2a:2b:64:d6:ee:0f:
25:48:d5:62:91:0e:54:33:fb:29:a4:2c:17:70:f1:
de:2d:27:53:eb:2a:3d:e7:db:5c:5e:20:b0:4b:b3:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:95:2A:AE:AE:C2:C7:74:53:67:01:33:D2:D4:B4:F1:90:12:48
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:90:de:f5:4c:eb:3d:65:13:e7:e2:bb:ef:41:bc:94:f2:
cf:ae:d3:c4:35:5c:17:9b:d7:43:56:82:1a:25:1f:89:68:c2:
94:26:67:7f:cb:ff:78:92:01:f7:59:82:05:fe:02:de:89:d0:
b9:d6:06:97:8f:ba:6f:97:de:45:20:a3:a5:61:cd:b3:70:71:
84:2a:21:fa:18:d8:85:95:7b:03:96:b1:4d:79:c1:42:37:21:
02:d5:0f:48:6b:de:95:03:b2:73:2d:70:75:b0:f7:a7:4b:59:
bb:9d:54:fb:0f:54:e7:9c:c9:63:4e:b1:92:98:ca:76:a6:e2:
cb:30:d1:ff:8f:6c:1c:5f:57:06:83:42:94:a3:c5:6c:a7:53:
ef:ec:26:ef:24:97:8f:73:9a:d3:6f:dc:86:68:85:8e:a4:73:
74:33:cd:3e:f5:a4:5e:9b:f4:bb:39:c6:c7:72:76:be:1b:cb:
b7:f3:59:7b:c3:b5:67:29:3e:83:37:f1:c0:21:47:9a:41:fe:
c6:0b:a6:af:a5:cf:aa:27:f9:21:a5:7b:41:9b:9b:8b:df:5e:
7b:f7:4e:e9:08:eb:67:6e:db:41:69:f9:73:7f:51:88:07:ac:
0e:eb:c2:e9:a1:58:ae:ce:01:4d:57:83:a8:61:c6:ab:22:ad:
ff:bb:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:14 2025 by rpki-client