Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: CkWIi59VYemfA/rj/n8b4DsR8CsKRa60AeDk9OBXDys=
Subject key identifier: 33:1F:29:45:1E:D9:13:F1:7A:1F:29:64:8E:A3:D5:0A:61:2D:BA:37
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 01974DE98CDD34C0E92A2BCA9B3089178F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 05:00:40 +0000
Manifest this update: Sun 08 Jun 2025 05:00:40 +0000
Manifest next update: Mon 09 Jun 2025 05:00:40 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: Ut65JBAPIkXNzROoy8z4F99TwIezO47IudE7lrSW24A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:8c:dd:34:c0:e9:2a:2b:ca:9b:30:89:17:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Jun 8 05:00:40 2025 GMT
Not After : Jun 9 05:00:40 2025 GMT
Subject: CN=331f29451ed913f17a1f29648ea3d50a612dba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:4e:57:d5:46:05:50:f2:ae:40:82:4b:15:
52:45:70:b3:d0:77:9c:75:ad:4d:54:60:db:9a:20:
b0:89:c2:fc:f4:df:16:74:64:54:40:19:19:79:81:
fd:19:32:0a:70:87:a9:10:ff:e9:ad:eb:03:5d:ec:
5a:55:5f:7c:db:a6:d3:5c:b5:de:89:f3:c1:f9:56:
dc:98:a3:21:b5:ad:2a:71:43:36:58:16:95:9a:4b:
f9:fa:50:13:f1:ea:04:95:54:4a:50:57:91:85:10:
ad:ee:2f:6c:60:1b:6f:29:87:66:8a:d7:e0:f0:85:
ed:eb:15:54:72:02:5d:69:a3:67:f0:94:e6:ee:df:
72:6a:3b:5f:69:ef:45:23:db:00:5d:1f:c6:fb:f7:
6c:bb:67:b1:76:3c:ef:c9:fc:57:08:97:c7:9e:88:
71:78:df:0b:86:39:1d:94:11:33:20:c5:fe:64:11:
61:e7:9f:9c:66:da:56:43:fe:6c:96:0e:bf:2d:d9:
78:aa:03:d1:0d:d5:b5:a3:23:ad:21:b7:c7:d9:7f:
79:1b:2c:8a:78:3d:fc:e1:30:17:85:36:13:43:03:
f0:d4:0a:ca:3f:27:20:aa:24:97:fb:2c:d2:96:38:
42:60:4a:ae:38:ac:3f:e7:74:b5:dd:df:72:b1:bc:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1F:29:45:1E:D9:13:F1:7A:1F:29:64:8E:A3:D5:0A:61:2D:BA:37
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:76:6a:a3:9a:8c:6c:dc:6b:31:c7:b4:7c:87:50:8c:e2:95:
1b:2a:f9:ad:ca:b5:da:76:65:7d:c1:90:24:fd:3e:1f:a4:a4:
c3:88:5a:0a:f7:0f:53:c4:f5:68:81:2f:49:43:e9:44:8d:f6:
eb:7c:24:39:13:a4:e5:e6:01:a8:f6:19:1c:fd:ac:cf:3e:4c:
0a:f1:53:ef:e0:a2:9c:92:41:be:75:51:85:6e:f7:68:ca:db:
ba:6e:15:16:9e:ad:d8:73:87:6c:8e:d0:87:d3:53:4f:24:dc:
0b:3c:fb:d0:3b:88:0c:85:d0:78:98:71:f7:39:54:b6:6b:34:
78:dd:d9:26:3a:40:05:60:f0:a1:03:9a:f2:ee:2e:2a:d4:4d:
6f:58:4c:08:d3:fa:15:ab:e8:38:b4:ec:09:70:3a:9b:b7:97:
77:eb:14:bd:09:43:52:19:b8:34:02:9f:4c:8d:95:93:c3:7f:
c2:9e:3c:24:b1:6c:91:36:08:33:84:55:43:3b:d9:54:26:d3:
a2:4e:41:76:e4:9f:96:54:7f:f6:92:e1:98:18:fb:6f:a0:b8:
0e:f9:36:84:15:fc:0c:fc:25:db:57:51:5f:82:e0:1f:74:28:
50:7e:76:3f:f6:16:16:4b:1c:47:fa:50:22:3a:96:6d:29:c1:
ba:82:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:48:29 2025 by rpki-client