Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json)
Hash identifier: uBQVFBCoh9lbkt/t++aax5M7foJAtq7+ZhFmbrTe5bw=
Subject key identifier: 67:97:2A:7E:5A:E1:83:22:1A:70:4E:5B:14:E7:8E:1B:5D:27:71:6E
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 019660CE385A6A9992F75122C9E099D899EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
Manifest number: 1513
Signing time: Wed 23 Apr 2025 04:00:49 +0000
Manifest this update: Wed 23 Apr 2025 04:00:49 +0000
Manifest next update: Thu 24 Apr 2025 04:00:49 +0000
Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=)
2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=)
3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=)
4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=)
5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=)
6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=)
7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=)
8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=)
9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: Bg8zpv3fVWrk1wtFIbnM3JyxKpswBHMqW5pzcY5ML+8=)
10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:38:5a:6a:99:92:f7:51:22:c9:e0:99:d8:99:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Apr 23 04:00:49 2025 GMT
Not After : Apr 24 04:00:49 2025 GMT
Subject: CN=67972a7e5ae183221a704e5b14e78e1b5d27716e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:16:a1:ec:50:6d:57:44:23:f1:69:c9:20:
cf:7d:77:5d:fb:03:01:16:8d:91:20:7f:e1:01:7c:
c4:d5:38:0d:60:4d:8d:db:30:11:03:4b:d8:f2:07:
79:13:bd:77:6f:3a:96:db:04:56:63:26:07:f0:14:
a7:3b:cb:0f:c2:24:f0:3f:76:96:b6:4c:58:72:65:
37:d4:ba:9e:83:7f:5a:27:38:b1:6d:fe:c5:4e:78:
a1:4a:02:8b:68:2a:38:8b:62:80:de:2c:0a:f8:eb:
00:67:8a:ab:63:86:22:b3:32:37:97:fa:93:83:ba:
06:fd:51:b9:8f:f9:b2:66:19:96:67:26:76:2b:e2:
f6:01:db:e6:54:56:a9:98:a0:62:d8:1b:25:da:fe:
dc:9f:b1:9f:a5:dd:0d:a9:ee:04:2a:b2:ad:71:56:
65:d0:58:db:62:1f:b7:9b:57:61:f5:e1:77:19:12:
55:81:e2:69:24:2b:dd:f6:51:fe:f8:97:90:27:ba:
a1:96:57:5d:29:47:05:6a:21:ea:fe:d6:91:09:10:
58:c9:91:f9:56:b1:b6:cb:01:03:28:fc:45:47:cd:
1a:90:a9:e2:27:4c:9a:a9:5b:a6:9a:75:fe:5e:ab:
7b:f4:79:c9:d4:4a:91:33:69:9a:08:b3:90:0a:04:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:97:2A:7E:5A:E1:83:22:1A:70:4E:5B:14:E7:8E:1B:5D:27:71:6E
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f7:ba:d2:d4:48:81:da:97:b7:73:14:44:d8:48:91:ec:10:
bc:ef:7b:d4:6e:30:49:5d:cb:e8:04:08:6f:55:8b:9d:31:36:
7a:9c:84:9e:8f:36:e4:23:47:0f:59:75:75:fa:42:41:38:e1:
1c:f4:b7:42:c8:6c:a5:b3:7f:34:ef:d5:d1:9b:15:66:14:d7:
7f:90:28:50:a9:d4:62:d5:9f:7a:12:c9:0e:6f:f1:d4:b5:db:
4e:ba:d6:8a:cc:4d:d7:3b:23:ee:10:00:37:ae:d4:b9:ae:9c:
ae:6e:d7:88:6e:ca:c6:76:1a:6e:64:dd:7d:70:14:5e:d7:4f:
e3:0f:8e:7f:ea:9f:97:f1:57:da:a1:f9:10:10:29:1b:c4:76:
03:e1:7e:97:7b:1a:e5:be:81:6c:ba:f9:2f:52:54:ac:10:18:
e2:d7:2f:8f:0f:06:05:1a:94:50:b8:da:64:37:48:30:73:fb:
e7:65:c8:7d:d8:a7:90:74:8f:e5:5e:b2:e6:60:dd:f3:a5:2d:
7b:52:7e:5c:9d:59:68:97:07:76:fa:1d:1f:87:4f:f2:8d:65:
a7:70:e3:16:4a:8f:5e:84:f7:1e:bd:6e:3b:36:1f:10:00:00:
50:20:6f:3e:66:be:57:99:f9:b3:46:70:ae:4d:f5:65:ba:97:
07:50:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:51:58 2025 by rpki-client