Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: vSnJP4GBfPzd9Um1WtB3KT6ncVNdzhv1GSNw+6Jkw/w=
Subject key identifier: E2:1B:B6:DF:5F:00:A6:49:27:57:06:2B:8C:3B:CF:33:93:CD:0E:A1
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 0196B7475DDF7F88481364E06C2C04FD449E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 0D8F
Signing time: Fri 09 May 2025 23:00:29 +0000
Manifest this update: Fri 09 May 2025 23:00:29 +0000
Manifest next update: Sat 10 May 2025 23:00:29 +0000
Files and hashes: 1: P2NRYwvD64-ChL8WHsL3n2VNc0o.roa (hash: ieevRAfzDccOVGuN3ZGz3jBO2k67pRtiKtsN5CR5hf4=)
2: WePWXi4BVJvCbK70G_Bl8LvCy1A.roa (hash: KcxOlT86bPrqOuZYUTgExqyOPNUmMSnB0pr0K4kluRk=)
3: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: CzIvCnRmcWcN50qOvoCdIpHtxsWQbn4HZfotojGsXXU=)
4: ZN7LHZSqu6VYidqfpIPOfCxL2L4.roa (hash: HOkUkg1LrwSaHvSseUfJQzAJzpgcTNuaZCYPqCnldN0=)
5: fm5A4Lmh3Dyoqm8phCUbdJ-SJ50.roa (hash: y1l9jzGOcVZ0GENozcALgbMdp6ZfPx8sRn42vZfb0eg=)
6: mOQsXh6W-nguYweUEP-GggtQ8co.roa (hash: BRX6qGv8sEq7HbLRmf+hKda82RdBa8GI6j+263A+qA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:5d:df:7f:88:48:13:64:e0:6c:2c:04:fd:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: May 9 23:00:29 2025 GMT
Not After : May 10 23:00:29 2025 GMT
Subject: CN=e21bb6df5f00a6492757062b8c3bcf3393cd0ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:dc:38:67:fc:e4:b3:d6:3a:5f:06:e0:bf:
ca:c1:75:ef:de:8d:30:79:e2:37:15:72:5e:23:6d:
4b:30:d7:f8:98:52:9d:b1:7c:fa:d4:c9:36:9f:05:
c5:c9:b0:47:a1:3a:90:b8:28:cd:1c:62:92:18:da:
28:5e:72:19:24:e7:31:57:9f:a4:ac:b2:c0:a8:bd:
44:c4:5d:b6:2a:b7:1c:6e:dd:d7:ee:c4:74:24:7d:
bc:42:7b:44:8b:b9:3e:7a:08:33:30:de:a7:78:58:
7d:aa:aa:ea:ef:b1:fc:76:65:25:b8:b9:10:df:57:
03:c4:01:05:4f:a7:e5:d7:cb:7e:0b:b3:fa:89:ce:
cd:c8:28:02:f2:f4:32:a9:2f:af:ac:01:92:4b:93:
73:6d:46:d4:71:5b:99:f4:48:7a:0e:58:67:fd:72:
b9:f0:b5:44:79:66:38:f6:64:a4:80:c4:10:90:b4:
11:24:d8:75:51:ca:ec:07:f0:bd:86:62:7a:1f:a8:
e0:97:9a:b5:9b:19:6a:b3:05:ad:d0:51:a7:32:db:
bb:03:b8:50:2d:d7:13:a4:15:e1:0d:97:34:c9:bc:
e5:24:09:0f:39:51:f7:9f:cc:a6:fa:55:b3:98:78:
bc:78:23:a0:6c:89:56:03:30:b6:55:25:0f:c9:d1:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:B6:DF:5F:00:A6:49:27:57:06:2B:8C:3B:CF:33:93:CD:0E:A1
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cf:c4:bf:78:ae:34:ff:9d:69:0d:04:80:3d:a8:62:2a:88:
51:cb:0f:5d:da:b1:d0:c9:5c:59:00:84:9a:da:c5:21:ec:48:
0e:a2:4f:12:f4:90:20:94:88:32:83:ce:11:e1:da:55:a5:3d:
09:95:8f:ea:c7:ba:bc:ec:10:40:e4:1a:a8:d9:05:be:f0:c0:
44:e3:0d:d5:da:9d:b5:c0:bc:d5:eb:a8:79:8e:af:50:c4:c8:
b4:36:c1:3c:c5:e0:a2:7d:b4:6c:7a:3f:e9:c0:a0:5f:e7:4f:
c3:47:46:35:36:36:be:92:47:ed:d1:c8:03:42:ed:e6:61:56:
68:b1:c5:78:90:ed:a0:8d:1c:ea:fb:11:27:ee:44:f4:2d:12:
d7:9b:00:e4:36:b0:7b:f5:4c:b9:8e:59:75:a3:fa:59:90:89:
89:8e:2c:75:91:6b:77:35:b8:48:d7:db:1f:12:a4:39:26:18:
da:c8:c6:26:78:c3:40:f2:5f:bc:9b:bf:ed:7f:4f:c3:38:8b:
88:91:0c:c6:be:91:5b:52:d2:9f:0d:1d:be:7d:cb:6d:f0:b9:
37:45:95:e8:70:d6:30:3a:2d:89:af:0c:69:6a:ca:29:38:33:
46:de:4f:9d:49:5f:a1:2d:e7:8f:5d:4b:3a:ba:13:d9:bd:c4:
b7:88:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:23 2025 by rpki-client