Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier: Gvu+Xe+Bw/hQy4PlZmmqPUAOkcbLmL7NkOFMfOmQbHQ=
Subject key identifier: E9:C5:82:5D:6F:EF:E2:CF:CF:36:D0:62:86:AA:38:36:05:41:86:3A
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 019659822AD3B055481F26EC1143A3EAB141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number: 11DE
Signing time: Mon 21 Apr 2025 18:00:24 +0000
Manifest this update: Mon 21 Apr 2025 18:00:24 +0000
Manifest next update: Tue 22 Apr 2025 18:00:24 +0000
Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=)
2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: CHjhPxqCmieOeZF2wlQae/WSFiwBICQXd7HCbzCCzVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:2a:d3:b0:55:48:1f:26:ec:11:43:a3:ea:b1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Apr 21 18:00:24 2025 GMT
Not After : Apr 22 18:00:24 2025 GMT
Subject: CN=e9c5825d6fefe2cfcf36d06286aa38360541863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:0b:7e:fa:ef:50:10:76:3f:75:84:c6:95:
12:02:ce:b5:5e:fc:98:a8:f0:da:46:c4:e7:6a:8b:
9a:eb:44:ca:6a:6c:3c:b3:cc:41:d9:9b:8c:2d:ce:
26:95:b9:48:2b:69:e3:45:4d:e5:42:ec:7e:dd:ef:
32:05:59:ae:85:48:90:a8:c8:c9:f1:77:46:01:cc:
ef:28:01:5f:19:c6:f7:61:08:60:5b:14:70:dd:dc:
90:8a:92:4c:62:b2:4b:f9:10:77:31:9b:24:7f:a1:
f3:a6:71:f1:f2:e2:7b:1d:81:ae:37:a0:07:71:28:
4f:fa:3d:c6:76:39:a2:e6:a6:f1:b0:c7:a4:aa:64:
17:ad:2f:3b:13:f2:48:0c:bd:ac:27:3f:d9:43:c1:
e5:85:52:62:f6:96:a5:4c:7f:44:86:73:41:69:77:
dc:74:a7:db:18:d5:c6:d8:25:fc:e4:54:bd:e0:fd:
42:ac:80:b0:c0:97:5c:e0:c1:96:8f:a4:c2:a6:be:
20:71:70:a4:a0:05:6e:2e:d4:b8:7c:04:f5:eb:95:
ec:59:b6:88:19:1d:3d:3f:7f:0b:c3:f4:a1:1a:9d:
b8:e3:ff:c9:54:e9:fa:bd:58:32:18:ff:00:a1:0f:
2a:39:3f:98:d0:b3:42:cd:5c:8f:3b:bb:0f:f4:7a:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C5:82:5D:6F:EF:E2:CF:CF:36:D0:62:86:AA:38:36:05:41:86:3A
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9d:9a:5b:a1:24:49:82:ee:d3:8a:19:66:c0:4e:e2:37:78:
3a:c4:a5:ea:0c:91:bf:aa:b4:7d:b9:f4:a7:73:b3:ac:bd:31:
bb:6e:a4:d8:31:d2:68:0d:75:c0:dd:7c:8e:d1:e7:27:bb:40:
d2:90:e3:cb:8d:55:e5:16:ea:0e:31:5e:1f:cb:f8:0f:a4:ee:
b7:13:19:17:cb:dc:11:69:c6:af:c1:18:4a:ff:c4:cd:5a:35:
2a:90:a9:92:59:ce:b0:60:5d:10:01:41:62:4f:50:2a:2e:fc:
a9:ff:44:b4:11:e1:8a:8a:0f:f5:51:12:75:34:4c:25:bd:0e:
59:51:79:2d:f6:80:c5:28:72:8c:8c:52:50:aa:18:1e:9a:a5:
89:2f:0b:c9:30:b4:79:3e:21:f2:1b:c3:b6:00:cf:cb:a3:df:
24:93:57:29:d5:d9:0f:f9:50:52:49:0e:eb:31:80:07:e4:cc:
92:44:63:e2:e7:44:15:9d:3d:8a:80:e7:6c:9a:de:65:eb:0f:
75:47:da:79:88:65:e9:ba:d3:e4:8d:50:5b:20:25:85:b3:34:
0e:8f:f8:cf:be:3c:9f:5d:09:fc:92:61:3f:c1:8c:c1:43:7d:
d5:64:d5:3b:95:19:76:bc:02:ec:84:5e:c3:12:ba:5a:c5:e1:
e9:b9:30:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZgirTsFVIHybsEUOj6rFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OGI1MmRkZmQwYmU1NjFkNDEwY2E4ODQ2ZmM3OTdlMjI5
OGIzY2MwHhcNMjUwNDIxMTgwMDI0WhcNMjUwNDIyMTgwMDI0WjAzMTEwLwYDVQQD
EyhlOWM1ODI1ZDZmZWZlMmNmY2YzNmQwNjI4NmFhMzgzNjA1NDE4NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKgLfvrvUBB2P3WExpUSAs61XvyY
qPDaRsTnaoua60TKamw8s8xB2ZuMLc4mlblIK2njRU3lQux+3e8yBVmuhUiQqMjJ
8XdGAczvKAFfGcb3YQhgWxRw3dyQipJMYrJL+RB3MZskf6HzpnHx8uJ7HYGuN6AH
cShP+j3Gdjmi5qbxsMekqmQXrS87E/JIDL2sJz/ZQ8HlhVJi9palTH9EhnNBaXfc
dKfbGNXG2CX85FS94P1CrICwwJdc4MGWj6TCpr4gcXCkoAVuLtS4fAT165XsWbaI
GR09P38Lw/ShGp244//JVOn6vVgyGP8AoQ8qOT+Y0LNCzVyPO7sP9Ho/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnFgl1v7+LPzzbQYoaqODYFQYY6MB8GA1UdIwQY
MBaAFMeLUt39C+Vh1BDKiEb8eX4imLPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MjU3MDctMWExMi00MTM4LWFlNDYt
OWY3ZThhNjEyMmEzLzEveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81MjU3MDctMWExMi00MTM4LWFlNDYtOWY3ZThhNjEyMmEz
LzEveDR0UzNmMEw1V0hVRU1xSVJ2eDVmaUtZczh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJ2aW6Ek
SYLu04oZZsBO4jd4OsSl6gyRv6q0fbn0p3OzrL0xu26k2DHSaA11wN18jtHnJ7tA
0pDjy41V5RbqDjFeH8v4D6TutxMZF8vcEWnGr8EYSv/EzVo1KpCpklnOsGBdEAFB
Yk9QKi78qf9EtBHhiooP9VESdTRMJb0OWVF5LfaAxShyjIxSUKoYHpqliS8LyTC0
eT4h8hvDtgDPy6PfJJNXKdXZD/lQUkkO6zGAB+TMkkRj4udEFZ09ioDnbJreZesP
dUfaeYhl6brT5I1QWyAlhbM0Do/4z748n10J/JJhP8GMwUN91WTVO5UZdrwC7IRe
wxK6WsXh6bkwtQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:26 2025 by rpki-client