Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: a6aWQ+pkWy7nGTcf3beC2qK2Ff2nNrocvndsoKI151g=
Subject key identifier: 8B:43:F1:69:87:5E:C4:DC:3B:AC:26:F8:B8:7B:8A:5C:43:C5:43:09
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01965ACC1259A7EC6EF4D1F7B7576BA6D88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 1463
Signing time: Tue 22 Apr 2025 00:00:45 +0000
Manifest this update: Tue 22 Apr 2025 00:00:45 +0000
Manifest next update: Wed 23 Apr 2025 00:00:45 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: lg/ks7J1xhWMnswpjbwLOo1gSB72WrkMlyLFUep7ROE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cc:12:59:a7:ec:6e:f4:d1:f7:b7:57:6b:a6:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Apr 22 00:00:45 2025 GMT
Not After : Apr 23 00:00:45 2025 GMT
Subject: CN=8b43f169875ec4dc3bac26f8b87b8a5c43c54309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:c1:d1:5a:3d:b8:7e:6d:ff:3e:80:ac:4b:
d6:3c:5b:e2:f4:32:0c:ac:9e:85:da:5c:fc:5c:27:
d0:a2:07:21:2f:96:be:57:50:a5:69:db:1c:57:ec:
3c:bf:b3:25:be:42:0f:eb:0a:6e:ad:6a:7e:71:d2:
ea:f7:9e:16:58:32:f0:07:d6:bb:a8:18:ea:9e:e8:
81:7d:a1:c0:5c:16:10:20:98:a1:12:76:27:d7:d8:
fe:4b:82:c7:d0:b2:fe:04:6e:5a:15:2d:6f:5d:e6:
d2:c6:5a:71:04:45:3c:34:f0:11:bf:7b:db:70:9d:
be:ac:97:83:fa:e1:84:a5:d2:6b:63:94:46:3e:7f:
60:13:84:1b:f9:90:b4:7f:28:67:3d:ca:7f:da:b0:
ef:03:2b:45:aa:86:96:21:33:6b:61:b8:a8:a9:55:
c7:c5:0b:ab:59:d0:95:5b:07:09:9f:3b:6e:b6:14:
c1:ea:cb:dc:02:b3:71:9d:ad:a5:de:7c:e5:93:79:
43:1b:84:e6:d0:e4:e0:9e:3b:3c:1d:39:e1:eb:af:
0d:e5:48:4c:8e:47:55:a1:3e:cf:00:a2:1c:cb:34:
90:87:68:6d:bd:bb:7a:97:e7:30:36:b5:18:fb:f8:
64:3c:35:74:c6:03:56:80:f0:ac:fb:6f:f1:8a:b9:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:F1:69:87:5E:C4:DC:3B:AC:26:F8:B8:7B:8A:5C:43:C5:43:09
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cc:14:f7:a1:72:f4:56:b8:32:bc:21:00:6d:af:11:90:65:
d6:8e:e8:71:29:c0:f2:af:3c:a0:c9:35:d6:a9:a9:1d:7e:2b:
e3:88:c9:69:f6:1e:89:1d:d9:2f:f2:e8:c3:ce:d0:35:aa:c2:
a9:af:8d:f5:ba:2c:a5:40:3e:91:95:71:17:47:d2:94:e1:56:
4e:dd:0e:7c:ed:d2:9e:d4:50:bd:83:23:ad:40:d5:cb:75:f4:
ad:b4:71:c1:66:fc:e3:9b:3a:97:42:f7:8c:bf:87:89:c6:2b:
a9:39:a5:fd:6f:39:52:d1:66:55:f5:b6:6c:7a:c0:f0:bc:50:
37:45:08:29:6d:33:e6:3d:e9:6b:0a:64:f5:3f:79:a1:14:8b:
e3:dd:32:31:2d:04:9d:fa:6e:34:a9:58:be:06:95:9e:c0:68:
d2:53:02:88:60:a9:04:39:d2:4a:9a:25:56:59:7a:5d:cb:2a:
bb:2e:f7:59:52:4d:0c:43:2f:37:c1:57:c5:f5:50:3f:a5:87:
3a:6b:c2:49:1d:dc:ce:4b:27:02:60:df:88:d3:98:d9:4a:dc:
2e:d9:77:b6:42:57:ca:5f:2f:ce:24:af:9e:9a:68:db:9f:74:
6f:1c:04:5b:2b:ce:b2:de:76:d4:49:d3:8a:77:16:61:35:4d:
c1:df:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:40 2025 by rpki-client