Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: S9dOnJk4YAmVXVXWszWv72EagRSHxsa8hBVK+2gH500=
Subject key identifier: C0:E5:D7:E3:68:98:B2:96:CA:A7:44:B7:2F:A8:8A:07:64:60:E8:56
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 0196959720FE20C3206C2C9180D22785E175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 14B1
Signing time: Sat 03 May 2025 10:00:31 +0000
Manifest this update: Sat 03 May 2025 10:00:31 +0000
Manifest next update: Sun 04 May 2025 10:00:31 +0000
Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: e43De+qUqBE3N9ltrAe9uOplUWLxxJJ2zUUm8uoxXpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:97:20:fe:20:c3:20:6c:2c:91:80:d2:27:85:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: May 3 10:00:31 2025 GMT
Not After : May 4 10:00:31 2025 GMT
Subject: CN=c0e5d7e36898b296caa744b72fa88a076460e856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:5a:86:78:b4:49:3d:1c:82:63:57:b1:c9:
35:32:d8:14:33:2f:34:0a:8f:a7:a1:25:7a:da:65:
a2:16:76:ce:cd:84:f5:e9:68:08:27:39:ef:a4:e8:
86:3c:27:1d:7c:24:cd:8a:6f:bc:cd:44:c2:e3:ff:
20:b1:97:c4:1b:b8:1b:0c:97:10:b9:80:e8:5a:ab:
43:88:67:69:e7:95:03:fe:28:74:39:9e:9c:6f:58:
b2:69:60:f0:3a:d6:0a:64:06:99:c9:49:22:d3:38:
74:c0:15:54:e5:06:20:18:ec:19:62:d4:6e:d0:0a:
40:3a:a3:52:37:c2:87:d8:2a:65:72:7c:79:dd:7c:
76:0f:4c:c3:06:26:fd:b5:67:db:28:cd:69:fe:d1:
23:3e:ab:e5:72:e0:ba:bb:e0:b5:e3:02:c0:24:01:
8e:74:3b:1c:d1:37:95:06:d6:e6:64:7b:88:0f:18:
74:98:23:a0:bb:18:13:e9:33:9a:a8:25:5f:cf:35:
9d:8e:7b:4d:00:e8:70:ca:17:c8:f1:17:89:a2:09:
c9:24:fc:6d:b9:4f:82:02:05:5b:4a:55:83:48:88:
e0:60:25:b4:35:2c:9b:66:c7:5e:68:ef:ab:d7:95:
e8:2e:6a:51:3d:88:ac:cd:7b:48:12:98:f7:e8:90:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E5:D7:E3:68:98:B2:96:CA:A7:44:B7:2F:A8:8A:07:64:60:E8:56
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:33:b0:80:c5:34:2b:be:0e:c3:fb:5d:eb:fd:a9:cb:18:
e3:2e:ec:36:ae:1d:61:45:c7:ea:08:e1:2a:64:8b:6b:3b:72:
2b:ec:fe:30:5d:59:6e:8f:a4:88:89:64:a6:69:f8:c8:41:f0:
55:c9:94:e3:48:e1:50:12:e6:96:d6:78:f4:da:46:a7:5a:41:
d0:bd:99:e5:bc:3b:93:7f:f7:95:8f:f3:cf:e4:34:c7:ad:bf:
8c:92:2c:be:b1:28:17:c0:2d:24:4f:ea:76:5a:c1:c9:43:22:
3b:d1:d5:56:ca:e5:40:d4:6a:53:ec:fc:08:44:98:b4:e3:71:
3e:ac:e2:6c:a4:6c:3a:09:5a:4e:4e:03:68:c5:35:ec:93:06:
a7:3e:7a:2e:b1:14:8b:cc:d3:49:8d:5d:43:92:d3:43:d0:02:
81:f9:de:92:3b:5f:7e:77:4a:3a:d3:fd:01:ee:95:eb:82:80:
32:7d:91:3a:17:dd:4f:34:01:b1:1b:29:0c:19:31:ec:d8:41:
8a:72:eb:6a:ae:32:ea:38:33:72:f4:35:02:8a:ee:58:ee:ce:
70:ad:d9:59:2e:a4:b7:54:96:74:eb:58:26:bd:1d:6a:91:08:
8e:31:7e:b0:01:c9:d1:66:ed:ee:11:db:05:01:54:0f:42:3d:
bc:04:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:28:30 2025 by rpki-client