Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
File: XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json)
Hash identifier: y+y84mp8yEjF2N3QleX1Xjyxp4thGFAAZkR+jBoOLKI=
Subject key identifier: 49:92:76:E3:1E:62:8D:30:1A:31:0C:A1:41:AC:A9:86:29:40:68:0E
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial: 01965BA7F9475F6BA5F10E15F412CFA3EA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
Manifest number: 1504
Signing time: Tue 22 Apr 2025 04:00:57 +0000
Manifest this update: Tue 22 Apr 2025 04:00:57 +0000
Manifest next update: Wed 23 Apr 2025 04:00:57 +0000
Files and hashes: 1: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: 8egP5uR62YlYCcTopPVPcCiMEKW2yHQ5SY5oDEiMNjo=)
2: auYlcZnEp-yqavQsok9_TPLHAq0.roa (hash: kbe3quRrlIxTjuDhfKrAisNkV8HOTBuxWR/raJshlU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:f9:47:5f:6b:a5:f1:0e:15:f4:12:cf:a3:ea:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
Validity
Not Before: Apr 22 04:00:57 2025 GMT
Not After : Apr 23 04:00:57 2025 GMT
Subject: CN=499276e31e628d301a310ca141aca9862940680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:5b:a3:be:19:d0:11:22:6e:76:25:2e:9a:
39:82:32:d6:27:ef:c8:f1:00:bd:1b:3b:06:5e:37:
3c:20:58:64:bb:8d:86:d4:e8:a5:1e:11:4e:63:27:
b4:1d:38:81:9f:09:b7:5c:c0:54:0b:e9:80:d4:a4:
0a:a8:96:66:ee:c1:fb:79:f3:ce:1a:ad:6f:47:05:
f2:8f:3e:b7:da:12:ec:7c:db:2f:8a:ba:da:76:02:
05:be:da:3e:f9:a8:ec:96:96:15:70:89:1b:7a:6d:
48:54:2f:eb:e2:b2:1f:f4:4e:23:0e:6e:cc:a1:b6:
78:e9:6a:e3:5f:5d:50:9c:bd:a4:86:d4:8f:d1:59:
7b:23:aa:8c:cc:29:bf:80:40:47:21:b1:f9:c1:09:
f0:cc:a1:dc:63:b7:d7:97:a9:f3:21:c0:46:ca:fa:
93:a6:72:38:af:b7:9e:d0:81:c2:11:2c:d8:6f:fb:
63:1e:43:05:ef:8e:dc:7c:ad:90:5e:f9:cf:21:aa:
1a:68:64:e7:6d:f3:69:76:4c:18:23:f9:a1:de:84:
85:bd:0a:d9:9c:28:44:7e:d8:2d:ce:b6:d7:f1:e7:
f7:3e:29:27:c4:d9:90:d6:b8:46:40:14:b3:9a:3a:
48:b1:79:07:c0:b0:6a:e6:ad:1f:49:10:e5:17:bb:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:92:76:E3:1E:62:8D:30:1A:31:0C:A1:41:AC:A9:86:29:40:68:0E
X509v3 Authority Key Identifier:
keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:eb:e6:44:b9:b8:30:d3:a4:c2:69:fc:67:25:31:31:18:1b:
b9:56:f8:ca:27:04:2d:2d:84:d2:71:f5:60:bd:19:ae:1a:b4:
50:2d:d4:13:43:15:f2:72:f5:9a:ec:86:50:bf:d7:65:0c:a7:
5c:8f:1b:91:0d:7c:51:9f:a3:a5:2c:d1:81:29:b6:b3:df:21:
b1:a6:dc:ce:96:66:70:40:62:47:7e:62:91:d4:70:2a:07:c5:
fe:14:92:ba:59:d4:8f:81:b8:f6:e4:d1:9b:8f:40:05:11:15:
bc:ca:11:d0:8b:c4:e3:6b:e7:e2:a9:6f:f0:d8:ae:2e:54:11:
4d:ca:8a:1f:26:af:13:94:41:37:74:5b:e9:10:6b:7e:e2:4d:
5f:99:76:88:58:a3:7e:c8:7b:04:55:3f:e0:2f:47:0b:ff:bd:
57:b4:2d:82:26:94:e7:e4:56:9b:14:3b:d5:3c:0f:d9:4c:a1:
c2:ec:25:0b:d3:34:9b:69:e2:17:38:f0:a1:5b:16:00:d7:c7:
d0:0d:05:8b:34:13:66:5e:aa:41:bb:f6:d8:e2:69:fd:f0:2e:
7c:57:3c:37:04:fd:9d:be:2f:5f:68:88:0d:7c:fc:f6:d0:ec:
8d:f6:9a:7c:18:e5:7f:1a:c4:cb:92:ab:4f:ba:7e:db:b1:05:
6d:61:af:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbp/lHX2ul8Q4V9BLPo+p/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTYxMzY4MjU1MjAxMDI5OGYzYTY5NGEwMGQ3YzU5MDYw
NjBiOTUwHhcNMjUwNDIyMDQwMDU3WhcNMjUwNDIzMDQwMDU3WjAzMTEwLwYDVQQD
Eyg0OTkyNzZlMzFlNjI4ZDMwMWEzMTBjYTE0MWFjYTk4NjI5NDA2ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7pbo74Z0BEibnYlLpo5gjLWJ+/I
8QC9GzsGXjc8IFhku42G1OilHhFOYye0HTiBnwm3XMBUC+mA1KQKqJZm7sH7efPO
Gq1vRwXyjz632hLsfNsvirradgIFvto++ajslpYVcIkbem1IVC/r4rIf9E4jDm7M
obZ46WrjX11QnL2khtSP0Vl7I6qMzCm/gEBHIbH5wQnwzKHcY7fXl6nzIcBGyvqT
pnI4r7ee0IHCESzYb/tjHkMF747cfK2QXvnPIaoaaGTnbfNpdkwYI/mh3oSFvQrZ
nChEftgtzrbX8ef3PiknxNmQ1rhGQBSzmjpIsXkHwLBq5q0fSRDlF7sBpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmSduMeYo0wGjEMoUGsqYYpQGgOMB8GA1UdIwQY
MBaAFF3mE2glUgECmPOmlKANfFkGBguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVZVGFDVlNBUUtZODZhVW9BMThXUVlHQzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzIzMjAtYmE5NS00NTMxLThjODEt
MjIyOTVkZjEyYjI3LzEvWGVZVGFDVlNBUUtZODZhVW9BMThXUVlHQzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wYzIzMjAtYmE5NS00NTMxLThjODEtMjIyOTVkZjEyYjI3
LzEvWGVZVGFDVlNBUUtZODZhVW9BMThXUVlHQzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWevmRLm4
MNOkwmn8ZyUxMRgbuVb4yicELS2E0nH1YL0Zrhq0UC3UE0MV8nL1muyGUL/XZQyn
XI8bkQ18UZ+jpSzRgSm2s98hsabczpZmcEBiR35ikdRwKgfF/hSSulnUj4G49uTR
m49ABREVvMoR0IvE42vn4qlv8NiuLlQRTcqKHyavE5RBN3Rb6RBrfuJNX5l2iFij
fsh7BFU/4C9HC/+9V7QtgiaU5+RWmxQ71TwP2UyhwuwlC9M0m2niFzjwoVsWANfH
0A0FizQTZl6qQbv22OJp/fAufFc8NwT9nb4vX2iIDXz89tDsjfaafBjlfxrEy5Kr
T7p+27EFbWGvqA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:37:23 2025 by rpki-client