Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
File: xBxyIe3jr17pLjIGry8YvQENXdk.mft (raw, json)
Hash identifier: 5gb13zZ4wIoLOW/c3wliZvOM4OeJPl9Ok7YQj1HJ9VM=
Subject key identifier: 70:C6:49:3C:16:D3:1C:ED:4E:62:13:93:A0:44:7D:78:82:37:AB:E5
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 019757C80DED0D8FA6222BDF60C92155BB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
Manifest number: 14E6
Signing time: Tue 10 Jun 2025 03:00:17 +0000
Manifest this update: Tue 10 Jun 2025 03:00:17 +0000
Manifest next update: Wed 11 Jun 2025 03:00:17 +0000
Files and hashes: 1: 7m2aFO8pW7sBeWI83RHNCyNBIdU.roa (hash: lGieElbJHSGh8Oz/Vk9H/zKdS/a3TENEBsREcLzSjK0=)
2: KpNDBUO4DrOuUMY4bYxc6mf9M84.roa (hash: /TtjRiKKiuCXSfe3cAbNi8t4pi1t9WsO7+lwemiTx14=)
3: LUT3_8WWrIc05qWZKWLQFjt60KI.roa (hash: 4MmEr/LuJfq6eDUj7eLPFo2AuG/83fKPUQ56fOfaCms=)
4: POocYv1wetN-gx-1qj1qZZS3uqM.roa (hash: QPzZ93NpFMrdFUyKi10vst5PYHPiD7E4p6r5DEZS8oM=)
5: aeq0M_Wlrma2wrWV2KK3our1J68.roa (hash: cB9AVSumNIn7tIPt4nPlnxcQS8vWgLkGe6b+JNzdHyY=)
6: kkZSypYh8F9rNNfSPrJybh1ufOA.roa (hash: OZKYjqnuTNpwjIeUjKQ7WdVuUS4XIuXxtQYLs+UNNBw=)
7: ozcLkAz45fg2XiPfdbNY66acf7g.roa (hash: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=)
8: xBxyIe3jr17pLjIGry8YvQENXdk.crl (hash: l/1poPAMADhaKXX1gY3/bHykIHhXQJ8T/QQz+rRSkTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:0d:ed:0d:8f:a6:22:2b:df:60:c9:21:55:bb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jun 10 03:00:17 2025 GMT
Not After : Jun 11 03:00:17 2025 GMT
Subject: CN=70c6493c16d31ced4e621393a0447d788237abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:82:f6:9b:a3:c4:36:90:51:24:6f:94:79:
ae:90:d9:4c:3f:a7:90:84:23:be:34:a3:af:8f:ed:
83:0c:f6:6c:76:d6:4a:e7:e9:4e:ab:bf:2f:52:63:
28:2d:98:da:6f:af:64:8d:9c:c1:95:bf:71:1a:d6:
c4:2d:d2:9e:02:00:73:bc:4b:2a:6c:5c:b8:1a:ba:
c3:55:cf:97:5f:40:d7:15:5a:12:ee:4b:0e:37:21:
de:dc:c4:5e:75:67:eb:6e:74:85:75:32:22:e1:60:
76:88:17:7c:71:8d:6c:a8:7b:11:a1:b9:cb:99:9a:
92:a9:e7:c8:84:3f:6d:29:15:3f:18:67:58:c7:ff:
6e:43:2a:9b:02:36:fe:10:ea:58:84:a2:a1:ca:1e:
46:2b:10:17:91:5e:ae:05:dd:fd:ac:91:fa:48:bd:
e4:54:89:ac:fe:4c:e5:a2:da:49:d0:d8:d7:49:13:
52:c3:3f:d1:38:5c:e4:59:9b:50:aa:9b:04:a0:ea:
a7:c4:96:b6:01:77:27:2a:ab:d3:91:11:b4:d5:3b:
1a:62:b8:5f:ec:e1:7a:66:64:be:d6:36:28:ae:ca:
75:73:b5:9b:a9:ff:90:24:43:bc:30:13:1f:47:5f:
2c:d0:f2:a9:9c:05:71:8b:65:0d:27:00:06:fe:5a:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C6:49:3C:16:D3:1C:ED:4E:62:13:93:A0:44:7D:78:82:37:AB:E5
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d4:63:e2:25:f8:c5:dc:d9:e5:cc:39:71:cc:d7:ba:81:c6:
bc:9f:29:b4:98:35:b4:52:33:88:98:6a:68:c0:d7:5e:73:2a:
4d:8a:42:b0:84:10:64:4a:d1:cd:be:6e:9f:5d:79:a5:7d:fc:
52:8f:c4:f4:81:c7:80:8d:58:10:b9:0b:66:83:60:97:64:e6:
48:5c:d3:77:2f:3a:47:af:e1:d4:15:db:51:97:27:98:c4:29:
23:5d:e3:51:b5:d9:0b:ff:d8:37:c2:99:c6:80:83:d5:b8:ed:
65:dd:cd:db:cc:b1:86:90:ee:5f:84:a6:36:af:f1:08:b1:d6:
b7:9a:e4:cb:b8:f0:b2:e5:a0:40:cf:d4:70:70:7e:83:7c:8b:
b0:3f:59:8f:e9:08:84:32:b7:c9:a1:59:09:a2:e5:68:d9:4d:
44:25:87:a0:0a:c0:7b:43:25:7d:0f:3d:ca:a1:00:fc:d5:a3:
6f:76:22:42:25:d2:ea:c0:09:80:a3:da:e1:12:16:78:63:6f:
ff:f3:83:f7:8b:b4:7f:70:de:8b:de:bf:47:d6:8a:c8:94:be:
ea:f0:43:52:0f:83:08:59:c4:3c:c8:86:d3:f3:17:f6:f5:7a:
52:1d:7f:8d:f7:dd:23:28:ac:0d:81:cd:2a:63:a2:fc:1e:cf:
67:7f:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:09:14 2025 by rpki-client