Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File: xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier: k8k1IMOJXLgUpKDbBP1zZwY1p+N1fz77OM7rn/ogw5Q=
Subject key identifier: 15:B1:DA:08:18:64:E1:9A:95:0E:72:92:0F:91:7D:3E:EC:F4:98:75
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 01965793C0FB6AAC1A6FAF607F867011A5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number: 0435
Signing time: Mon 21 Apr 2025 09:00:22 +0000
Manifest this update: Mon 21 Apr 2025 09:00:22 +0000
Manifest next update: Tue 22 Apr 2025 09:00:22 +0000
Files and hashes: 1: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (hash: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=)
2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: PImZa5/OxRf49pJEAi22Gf/GAos53QMV9hTWuvS3BBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:c0:fb:6a:ac:1a:6f:af:60:7f:86:70:11:a5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: Apr 21 09:00:22 2025 GMT
Not After : Apr 22 09:00:22 2025 GMT
Subject: CN=15b1da081864e19a950e72920f917d3eecf49875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:da:00:21:01:af:4c:95:ca:5c:e4:6c:05:
cf:88:c4:6d:be:50:cd:92:27:ca:dc:d3:2a:0e:5e:
67:ec:4f:02:fd:be:7e:30:b5:7e:b4:af:9b:0c:a5:
a4:12:13:68:45:78:9b:93:4d:94:ff:9f:5f:9c:3e:
1f:57:59:28:a4:07:75:08:d3:3a:d0:92:1d:51:52:
56:44:5b:72:47:44:a6:a3:20:b9:1c:a8:21:4d:8e:
31:42:fc:50:d3:0b:df:38:8d:90:49:89:7e:ec:d0:
72:42:d0:90:d0:9a:2c:2e:2a:ba:38:7a:cd:45:d0:
a6:20:0c:c3:79:3b:bd:90:2e:f3:1c:d0:e0:db:83:
1f:1b:0a:86:57:1d:b4:1c:a4:1c:17:09:5c:49:6e:
6c:e5:37:0c:cd:c8:ae:f7:93:7c:ab:7d:9d:3d:6e:
9c:cf:d7:5e:7d:a4:c4:cb:b1:6f:4f:a3:d1:77:79:
18:40:fc:b4:c0:7d:18:b4:34:a2:ac:06:d2:4a:a3:
fc:65:54:37:bd:5e:2e:02:fc:e1:b1:b6:a5:9b:ae:
62:01:d0:62:f5:22:67:b0:70:81:6a:80:ec:eb:e6:
9d:11:11:d8:cb:4c:0f:d1:a9:f7:e3:26:86:ea:6f:
ae:4c:fa:3a:4e:38:b6:dd:ed:d4:d9:68:9e:3b:2c:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:DA:08:18:64:E1:9A:95:0E:72:92:0F:91:7D:3E:EC:F4:98:75
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f3:1e:ed:6b:08:47:2d:06:dd:1f:de:b9:77:a0:a8:5e:34:
9c:64:29:2c:e2:ae:0e:1e:98:1b:23:ac:db:a0:0f:b0:d5:fb:
f6:6e:e9:5e:cf:ec:d8:9d:6e:8e:d2:77:f2:2e:0c:b1:92:01:
e0:47:2b:23:57:7a:14:87:a6:24:55:7a:89:15:22:7d:5a:e6:
1c:4a:61:50:ac:b3:62:40:9a:b4:9f:a5:d4:09:71:7e:d3:19:
53:7c:5c:51:3c:6c:59:b0:f5:ba:14:04:c9:19:5e:4d:9d:87:
60:c9:ae:cf:d4:d2:7d:d6:84:07:2f:ae:6e:6f:d8:44:83:43:
45:e2:54:a3:b3:46:e8:78:b4:fd:f9:5d:8b:13:19:32:87:b8:
6f:ae:bc:fa:a2:27:51:da:01:27:af:db:1c:24:db:83:d3:b3:
f7:48:68:43:ce:4d:13:f0:37:81:6e:67:f4:5f:14:fc:c0:93:
42:f5:35:9c:26:c6:fe:a6:cb:aa:ff:ac:c3:ee:c0:da:26:31:
c5:76:4e:30:30:d4:82:6e:ec:76:d2:46:e9:a8:bf:86:d9:cb:
a5:f0:1d:fe:d5:e3:bc:af:0e:e6:ec:28:de:d8:6f:16:75:93:
12:e4:44:5d:7d:a5:ea:be:13:2b:ea:b5:7e:c2:a4:2a:c2:18:
e3:2d:4d:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk8D7aqwab69gf4ZwEaW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZDc2YzFhZjhmYWQyZWJjNjM0ZWEyZTIzMzcwZjEwYzVj
NTlkMGIwHhcNMjUwNDIxMDkwMDIyWhcNMjUwNDIyMDkwMDIyWjAzMTEwLwYDVQQD
EygxNWIxZGEwODE4NjRlMTlhOTUwZTcyOTIwZjkxN2QzZWVjZjQ5ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsevaACEBr0yVylzkbAXPiMRtvlDN
kifK3NMqDl5n7E8C/b5+MLV+tK+bDKWkEhNoRXibk02U/59fnD4fV1kopAd1CNM6
0JIdUVJWRFtyR0SmoyC5HKghTY4xQvxQ0wvfOI2QSYl+7NByQtCQ0JosLiq6OHrN
RdCmIAzDeTu9kC7zHNDg24MfGwqGVx20HKQcFwlcSW5s5TcMzciu95N8q32dPW6c
z9defaTEy7FvT6PRd3kYQPy0wH0YtDSirAbSSqP8ZVQ3vV4uAvzhsbalm65iAdBi
9SJnsHCBaoDs6+adERHYy0wP0an34yaG6m+uTPo6Tji23e3U2WieOyxNzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWx2ggYZOGalQ5ykg+RfT7s9Jh1MB8GA1UdIwQY
MBaAFMXXbBr4+tLrxjTqLiM3DxDFxZ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQt
ZmRlNmZiOWFmMjMwLzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQtZmRlNmZiOWFmMjMw
LzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfMe7WsI
Ry0G3R/euXegqF40nGQpLOKuDh6YGyOs26APsNX79m7pXs/s2J1ujtJ38i4MsZIB
4EcrI1d6FIemJFV6iRUifVrmHEphUKyzYkCatJ+l1AlxftMZU3xcUTxsWbD1uhQE
yRleTZ2HYMmuz9TSfdaEBy+ubm/YRINDReJUo7NG6Hi0/fldixMZMoe4b668+qIn
UdoBJ6/bHCTbg9Oz90hoQ85NE/A3gW5n9F8U/MCTQvU1nCbG/qbLqv+sw+7A2iYx
xXZOMDDUgm7sdtJG6ai/htnLpfAd/tXjvK8O5uwo3thvFnWTEuREXX2l6r4TK+q1
fsKkKsIY4y1NZg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:07 2025 by rpki-client