Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: L5WbHOel18Hl8vgOz7MePggmhudZR8K8/YYOGONDsNU=
Subject key identifier: 81:9C:01:32:B6:5F:AA:A9:1F:DE:38:88:93:93:7C:9A:08:D8:F0:08
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 0196BFA5C5CFBAD66E8E774D6361D5CF2A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 0F25
Signing time: Sun 11 May 2025 14:00:34 +0000
Manifest this update: Sun 11 May 2025 14:00:34 +0000
Manifest next update: Mon 12 May 2025 14:00:34 +0000
Files and hashes: 1: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
2: ER1ViB51eK3GNYidlFyIU5pz7pA.roa (hash: LuGe00nbcrMZ8l+kp9f/ed4A210HJbkXpcki+PgU3DU=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
5: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
6: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
7: q2LaCm30bgdcmQ_KQ1x35ingWH8.roa (hash: U37N/CIim8sCoTJAFcqUrio7zaI1taunVmGNkj25lQI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: dUZw+XsJjWIXKBgH1GTXMS/Sko9MeGSNUqYfrHxwJE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:c5:cf:ba:d6:6e:8e:77:4d:63:61:d5:cf:2a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: May 11 14:00:34 2025 GMT
Not After : May 12 14:00:34 2025 GMT
Subject: CN=819c0132b65faaa91fde388893937c9a08d8f008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:d5:fd:90:53:b4:8d:0d:47:75:eb:b9:1d:
8e:ef:ae:0c:1b:c0:08:eb:89:a8:11:46:17:02:ea:
3b:30:de:ba:b1:f4:63:c3:65:af:f7:04:9c:03:83:
a8:c0:eb:a9:f8:90:c0:01:88:fd:23:d5:ab:99:bf:
6f:f2:b4:7d:f7:7e:6a:09:ec:0c:76:32:b1:c3:44:
f9:30:8b:db:d5:6e:37:5c:44:14:47:fe:16:c3:c9:
35:e8:aa:8c:c4:69:fd:09:bf:f5:b4:d2:8b:ed:05:
c1:d0:e7:33:11:4b:3b:49:34:05:f2:36:67:50:ca:
d1:d3:a5:36:cb:6a:b8:ff:75:46:8a:d4:c8:14:e1:
0a:02:d7:0f:84:32:99:9c:86:2b:4a:85:a6:08:1a:
4f:88:78:d2:df:06:2f:1a:7b:b8:ca:37:30:e5:5b:
17:36:b6:f4:ca:44:48:8c:ad:58:16:19:8d:79:b1:
eb:88:d7:88:3e:31:5e:89:ec:26:04:4b:15:7e:b2:
01:00:36:8f:44:72:58:a1:e4:8f:9c:36:14:51:a8:
d7:d7:66:b7:b2:62:a9:3c:40:d5:b2:7d:0a:97:ca:
82:02:b6:26:eb:57:64:4e:f3:39:8b:a9:32:a2:51:
6e:5e:f7:0d:eb:36:b3:40:c4:e2:79:cf:82:ff:3d:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:01:32:B6:5F:AA:A9:1F:DE:38:88:93:93:7C:9A:08:D8:F0:08
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cb:a0:3b:18:03:3b:ce:f4:e5:fc:77:82:c0:9c:aa:17:81:
09:e7:8a:53:97:e1:cd:10:6d:f9:b3:e0:cb:e3:c4:53:73:0a:
ef:22:80:76:bf:07:66:78:9d:ed:92:0d:84:a5:43:ca:82:de:
b3:68:3b:4c:7f:4a:38:7c:17:f3:5e:97:17:4e:6d:75:78:c5:
ba:0f:d4:57:06:5b:99:6e:12:87:32:dc:c0:59:37:aa:bf:8c:
d7:ec:41:9e:3e:9f:67:9f:76:0f:4b:4a:ab:67:45:ba:77:77:
8e:f0:29:11:b6:b8:7b:a0:9e:0c:65:72:5d:57:14:33:2f:35:
98:3c:97:28:e2:e9:dc:39:0e:47:a7:43:54:63:04:d0:8d:e1:
b6:ad:51:f2:c5:05:38:d4:5c:b5:57:98:99:f7:da:dd:14:96:
72:0c:37:d3:56:a0:cc:50:f9:b2:0d:a9:74:10:60:f3:75:0c:
49:3a:34:b8:6b:7c:ad:1a:4e:ca:0d:37:e9:da:fd:ce:dd:b5:
63:b2:28:18:14:96:1d:fc:9b:27:49:17:9b:fd:15:2d:cb:03:
d5:26:bc:1c:2a:e3:04:bf:3a:6d:3f:de:70:07:e2:5b:e0:38:
ef:d1:a6:26:c5:e6:49:78:83:00:27:8a:75:76:bd:d2:6e:13:
f8:9d:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:15:46 2025 by rpki-client