Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: ifill4QDYzm4SDS7YMXW3OhwKEtCTqrMi9QfootCiiQ=
Subject key identifier: A8:A8:C1:3A:0D:3E:BE:5C:7F:12:3A:DD:4F:D1:1F:9D:C0:1E:01:72
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 0196CEAAE062466CCD62F59A117512B63DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 1325
Signing time: Wed 14 May 2025 12:00:27 +0000
Manifest this update: Wed 14 May 2025 12:00:27 +0000
Manifest next update: Thu 15 May 2025 12:00:27 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: CvQDrZQkndUbVcuH9nKkcDpTMMJjuNwXZx72FPtzyLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:e0:62:46:6c:cd:62:f5:9a:11:75:12:b6:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: May 14 12:00:27 2025 GMT
Not After : May 15 12:00:27 2025 GMT
Subject: CN=a8a8c13a0d3ebe5c7f123add4fd11f9dc01e0172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:d0:a4:72:d6:27:23:13:04:0a:fc:f7:70:
71:b5:7d:a3:f0:72:84:83:39:d8:28:67:31:f0:bd:
cc:14:3c:97:07:34:7f:fc:9c:89:da:9c:d9:e4:12:
18:43:ee:c2:59:06:41:d8:fe:8c:5c:16:31:25:f3:
a2:fb:40:cf:e6:d1:16:e9:55:d1:44:da:83:54:a1:
f9:89:3b:fc:40:04:d0:a2:fc:3a:af:e9:4c:da:b7:
15:d5:96:48:6f:bb:e2:5b:46:e1:79:43:7c:92:80:
7f:c4:8b:7c:e3:0f:65:1a:fd:c3:cd:1e:c6:fa:b1:
70:f8:37:45:b2:03:e6:1a:41:a1:8f:73:65:66:39:
ef:19:0b:bb:82:cc:b1:13:6f:ed:72:62:d8:68:93:
98:78:39:2b:6e:b2:fc:90:ba:3d:35:9f:2d:1d:a7:
33:f9:a9:01:88:a7:7a:62:a7:d9:ea:62:47:89:41:
16:2b:dc:53:ff:53:4e:20:8f:2f:cc:29:5f:a6:ac:
1c:8d:f1:aa:a6:e3:80:35:09:a7:07:14:9e:87:38:
91:a2:13:7b:a5:c7:7f:4a:a4:b2:67:fa:2f:a6:eb:
6b:37:65:65:9c:b4:4b:3e:b5:11:f9:64:80:42:b6:
fa:25:53:6d:aa:21:9f:68:a6:ba:e2:2a:e6:4e:2d:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A8:C1:3A:0D:3E:BE:5C:7F:12:3A:DD:4F:D1:1F:9D:C0:1E:01:72
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d1:e5:32:03:e9:98:58:1e:cb:fd:9c:f5:11:cb:f6:c9:1c:
0e:ef:cc:01:be:53:3f:e7:df:15:c9:2c:b4:89:a4:c1:a4:c0:
15:17:b7:82:97:39:81:af:96:39:ee:71:e3:be:3d:86:db:0c:
97:b6:27:43:8b:18:3d:d7:b7:47:79:fb:29:c8:79:28:4b:c0:
2c:66:6e:ca:69:a6:50:bd:eb:ed:10:54:dd:b6:19:5e:df:c0:
cc:e1:4c:1c:df:e8:cc:a7:23:4c:3d:c2:35:b6:55:9d:f2:af:
6b:2b:8a:f9:7b:b7:5d:72:a9:98:a3:56:ee:91:d1:5f:b8:1c:
da:b4:f3:f2:70:4b:ae:41:49:16:b7:f6:da:e0:1c:a8:0f:77:
97:b5:02:92:15:62:11:d7:a6:c6:a9:7e:d6:9c:70:99:2b:dc:
b6:36:37:25:53:84:cc:84:89:74:c5:05:d7:b4:57:e2:4e:70:
8a:c8:50:0a:c1:6d:23:68:a8:1e:ba:70:75:59:fd:fa:05:fc:
15:d3:6a:4b:23:e0:28:6a:c1:93:61:b0:1f:96:47:fd:db:ce:
16:74:54:ae:39:3e:60:c7:64:b9:bb:3b:da:7d:ea:14:59:b3:
95:ea:87:c2:7f:98:a8:72:2d:ca:13:ab:d0:23:c1:fa:4a:08:
87:2d:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:38:58 2025 by rpki-client