Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: uAVjY503FrBp4T7WR/2oflETmwS0LjeZtOyMJHAO91g=
Subject key identifier: EB:F2:ED:F6:55:FB:9B:2D:8F:A9:6B:F8:33:11:DF:DA:BB:2E:12:72
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0196545C44E06158F57B4B32C6757F2C5509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 0172
Signing time: Sun 20 Apr 2025 18:00:55 +0000
Manifest this update: Sun 20 Apr 2025 18:00:55 +0000
Manifest next update: Mon 21 Apr 2025 18:00:55 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: 9aPBm3yN+Weq0cEZxOCQv/JEIYUiJDMnTJj1xdast3o=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:44:e0:61:58:f5:7b:4b:32:c6:75:7f:2c:55:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Apr 20 18:00:55 2025 GMT
Not After : Apr 21 18:00:55 2025 GMT
Subject: CN=ebf2edf655fb9b2d8fa96bf83311dfdabb2e1272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:11:d7:fb:7d:7e:51:55:14:d9:7e:f3:c8:
06:58:41:67:a7:72:c2:8b:26:73:dc:ab:86:2f:2b:
da:01:c2:f1:7a:7d:08:db:80:58:a1:4f:3f:19:a7:
1d:e6:02:fe:71:5b:39:a6:69:af:d8:a5:68:98:a0:
a5:7c:ef:5a:e3:b3:1e:2b:13:89:0f:9a:a0:10:62:
a2:0d:b0:80:aa:30:82:78:9c:2a:21:4c:b0:61:31:
73:b5:48:7f:fb:7e:f8:03:bc:4a:9a:9f:50:29:31:
58:d7:d7:5e:42:cd:58:8f:01:29:28:47:b5:51:9c:
a0:f7:33:f6:40:2c:9b:59:3a:16:8d:a8:96:be:60:
37:6c:a9:af:6a:70:aa:af:12:c8:d5:86:20:1b:45:
5e:b3:46:1c:19:45:23:96:69:a7:09:7a:d8:08:e7:
3b:59:9e:ad:b2:92:12:50:b5:29:8f:f0:65:28:9a:
34:ae:c7:9c:5f:e4:1e:07:ba:09:42:a3:81:49:df:
f8:9d:e9:ec:7f:0d:f6:d8:2a:ce:be:fe:86:86:98:
80:ae:99:06:59:a7:f3:93:a0:14:32:e7:cf:b6:1e:
af:a5:22:25:9f:2b:6a:b7:59:59:de:71:e5:e1:5d:
c7:d2:b1:11:a2:73:bf:ce:9a:7e:67:40:2a:49:6f:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F2:ED:F6:55:FB:9B:2D:8F:A9:6B:F8:33:11:DF:DA:BB:2E:12:72
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1c:15:f9:dc:ae:05:4e:82:f7:96:5a:65:b1:5a:e3:a1:37:
84:44:d0:bc:f6:e3:cf:2f:6a:79:91:3b:b2:70:d3:a2:e0:99:
c3:e5:3c:29:a1:71:91:36:f9:f9:42:00:20:38:e8:8f:e3:88:
5e:87:68:20:fa:3b:85:06:2a:1c:f6:cf:c6:51:43:22:3e:97:
0c:c3:94:c1:4d:d7:b9:c9:09:72:ad:2e:18:94:2e:c6:3d:ba:
cf:8a:51:c2:5a:6e:1a:a8:52:8b:d3:94:e9:32:5d:bd:3b:51:
f5:8d:63:fb:8a:7a:21:32:51:e8:7a:8e:94:61:28:08:65:d1:
65:3a:00:b2:aa:bb:2c:74:5a:d0:ef:f4:e2:b6:2a:cc:5b:ca:
ab:a9:52:db:6a:e4:82:01:4c:67:58:08:14:c9:74:cf:b9:21:
14:f3:0e:28:07:67:1d:2d:e9:b7:f3:26:bc:3e:14:4f:a7:11:
63:51:e5:ba:fd:0b:5b:61:d5:bc:8c:db:31:9c:cd:44:a7:eb:
2a:0f:c0:e5:80:6c:ab:aa:79:08:3a:fa:e9:50:5b:b1:4d:55:
84:40:83:98:c0:de:cb:5f:8c:08:52:9e:ee:14:aa:ec:07:8c:
da:74:06:cc:f9:6a:f5:3e:31:65:91:1c:9f:91:e8:68:14:08:
8d:fe:b4:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXETgYVj1e0syxnV/LFUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNmU5Yzk0MmNmNTZiZWI4NjkyYzVkNTYyZWQ4ZWFkNjk0
NTI4ZWQwHhcNMjUwNDIwMTgwMDU1WhcNMjUwNDIxMTgwMDU1WjAzMTEwLwYDVQQD
EyhlYmYyZWRmNjU1ZmI5YjJkOGZhOTZiZjgzMzExZGZkYWJiMmUxMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd8R1/t9flFVFNl+88gGWEFnp3LC
iyZz3KuGLyvaAcLxen0I24BYoU8/Gacd5gL+cVs5pmmv2KVomKClfO9a47MeKxOJ
D5qgEGKiDbCAqjCCeJwqIUywYTFztUh/+374A7xKmp9QKTFY19deQs1YjwEpKEe1
UZyg9zP2QCybWToWjaiWvmA3bKmvanCqrxLI1YYgG0Ves0YcGUUjlmmnCXrYCOc7
WZ6tspISULUpj/BlKJo0rsecX+QeB7oJQqOBSd/4nensfw322CrOvv6GhpiArpkG
Wafzk6AUMufPth6vpSIlnytqt1lZ3nHl4V3H0rERonO/zpp+Z0AqSW/R/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvy7fZV+5stj6lr+DMR39q7LhJyMB8GA1UdIwQY
MBaAFF5unJQs9WvrhpLF1WLtjq1pRSjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMt
ZTM0Mzc3N2MzOTczLzEvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYWIxMmEtNDQ0Yy00NzRhLTg2ZjMtZTM0Mzc3N2MzOTcz
LzEvWG02Y2xDejFhLXVHa3NYVll1Mk9yV2xGS08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShwV+dyu
BU6C95ZaZbFa46E3hETQvPbjzy9qeZE7snDTouCZw+U8KaFxkTb5+UIAIDjoj+OI
XodoIPo7hQYqHPbPxlFDIj6XDMOUwU3XuckJcq0uGJQuxj26z4pRwlpuGqhSi9OU
6TJdvTtR9Y1j+4p6ITJR6HqOlGEoCGXRZToAsqq7LHRa0O/04rYqzFvKq6lS22rk
ggFMZ1gIFMl0z7khFPMOKAdnHS3pt/MmvD4UT6cRY1Hluv0LW2HVvIzbMZzNRKfr
Kg/A5YBsq6p5CDr66VBbsU1VhECDmMDey1+MCFKe7hSq7AeM2nQGzPlq9T4xZZEc
n5HoaBQIjf60TA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:46 2025 by rpki-client