Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: hQOugGQex5aO3fRZ10BND9/wAnxL51nk+zvJti/xplc=
Subject key identifier: 59:F5:A3:07:EC:09:A7:82:3E:ED:12:0E:49:F0:D1:E6:96:BF:51:22
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01968924D865578CAB4604EC79C5A5D62DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 147B
Signing time: Thu 01 May 2025 00:00:15 +0000
Manifest this update: Thu 01 May 2025 00:00:15 +0000
Manifest next update: Fri 02 May 2025 00:00:15 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: nChtiZ76H+5jTnR4or/sN0vsTbtU4re/gMD/kK6mlIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:d8:65:57:8c:ab:46:04:ec:79:c5:a5:d6:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: May 1 00:00:15 2025 GMT
Not After : May 2 00:00:15 2025 GMT
Subject: CN=59f5a307ec09a7823eed120e49f0d1e696bf5122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:b7:3e:b4:32:87:02:ec:fc:53:6a:97:1c:
d6:d5:37:b5:12:fc:df:a7:2c:00:54:5a:d5:13:c0:
c4:02:dd:28:58:94:79:01:2d:7d:82:43:d5:e3:5b:
3e:99:c4:f9:1b:34:08:7b:91:87:88:96:92:d2:29:
f6:c5:72:96:54:22:79:c9:63:67:6b:2b:2e:03:9d:
dc:25:a1:e9:18:55:13:3c:03:02:fc:b8:1b:d4:37:
74:c5:29:29:e8:6e:25:00:16:04:ee:97:82:8c:9f:
e7:7b:40:3d:b7:ec:36:62:9e:8e:ae:7e:c1:74:1d:
54:f5:a4:0a:a5:64:11:87:fd:c3:df:ba:61:c2:82:
95:4c:1e:04:ac:63:10:d1:2d:9c:1f:bd:80:63:22:
79:45:ea:70:41:2e:a0:19:ef:3e:42:9d:04:2f:a5:
d6:cb:48:79:f6:b2:33:e6:5b:8b:88:e8:8f:b3:17:
f2:6a:a9:11:73:01:83:f9:3e:65:c8:dc:3f:37:32:
95:5e:99:e8:67:62:c1:97:70:d0:96:f0:32:c8:c9:
69:5a:86:0b:62:4c:d5:55:9d:f7:18:ee:a2:1a:3d:
f7:a2:3c:a1:d0:97:bb:e0:b0:5a:21:57:bf:3b:80:
2c:1c:2e:48:66:d9:10:56:2f:5d:f7:9c:b3:10:81:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F5:A3:07:EC:09:A7:82:3E:ED:12:0E:49:F0:D1:E6:96:BF:51:22
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4f:ca:9e:45:8f:2a:96:79:5f:5b:83:d0:97:9a:b0:84:d0:
a7:f5:8a:d2:eb:59:74:d5:be:e9:e2:1c:a9:bd:e2:6f:39:cd:
da:ba:07:49:e1:86:c9:54:c1:8b:1e:65:de:bd:05:89:b3:26:
03:00:83:c5:7d:93:66:6c:48:df:03:b6:19:88:0c:30:b8:60:
cf:6f:f1:10:ef:aa:0a:f0:cd:b6:41:31:fb:86:b6:b4:8b:50:
82:6e:d8:72:0e:4c:2f:ad:2e:14:6b:56:fb:e4:60:50:7b:d5:
8a:1a:6f:06:df:a9:64:d0:26:a8:c2:d9:4d:2d:e4:3c:08:77:
62:82:9b:f4:a2:21:11:5d:e2:e3:46:7f:4d:72:52:68:87:f3:
d8:40:13:76:a1:bc:59:70:f1:26:81:81:b9:a8:8c:30:35:59:
b2:a4:98:ff:27:e9:c0:40:27:81:72:78:8b:ef:bb:99:d3:1a:
d8:b9:95:88:c0:9e:b8:e7:35:5e:4d:22:aa:aa:1e:dd:48:6b:
66:bf:49:d4:68:f9:d9:f1:6d:f9:a1:4f:9b:47:a8:74:74:a7:
ac:ed:de:80:2a:ae:8b:8a:d4:63:ec:bc:3d:b5:4b:1e:4b:04:
35:13:a2:77:3a:55:31:c5:c1:0b:54:6a:a4:30:30:bd:91:a3:
67:b9:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:01:18 2025 by rpki-client