Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: fhTJMTCk3v/l9gd7nYzjgK57QqjyA61UAoQOZJYKY6A=
Subject key identifier: 6A:01:2B:51:F2:71:91:1C:6C:24:74:C3:70:3A:7D:AA:FE:F2:69:A2
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 01965538A05AC965C3C20F405277D029BBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 1359
Signing time: Sun 20 Apr 2025 22:01:36 +0000
Manifest this update: Sun 20 Apr 2025 22:01:36 +0000
Manifest next update: Mon 21 Apr 2025 22:01:36 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: Gl44U+EpIJ7jwR4uJ+yHQuAkrkw/+5MUdGXTpnnVrJs=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:a0:5a:c9:65:c3:c2:0f:40:52:77:d0:29:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Apr 20 22:01:36 2025 GMT
Not After : Apr 21 22:01:36 2025 GMT
Subject: CN=6a012b51f271911c6c2474c3703a7daafef269a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8a:93:37:b3:2a:e7:e8:74:62:cf:c1:de:de:
20:6b:cf:5d:16:11:70:f0:25:ed:c3:7d:21:c4:9f:
bc:4e:f3:57:7d:85:29:db:3a:3f:c1:8b:b7:77:d1:
52:4c:23:c5:70:55:04:85:c5:29:03:69:2c:d3:fb:
88:02:bb:4a:23:34:a7:cc:db:1e:45:0b:e0:c3:e9:
78:9c:45:ce:c1:53:8c:3e:2b:5a:56:c5:0c:c0:14:
13:b6:17:b0:f6:d0:e7:23:c7:72:8b:bc:64:7a:9a:
4a:ac:36:44:a9:af:40:bd:fb:ab:b5:54:38:0c:a6:
17:a3:45:69:88:d4:2b:60:8d:55:c2:ef:9d:1a:0b:
11:da:7b:d2:1f:08:44:3f:0f:11:d5:9e:b6:10:24:
ab:af:85:3d:b1:d3:b2:74:3f:b5:bf:5e:3b:d7:02:
a6:2a:a0:b1:44:9c:0d:5c:88:28:d5:25:10:ea:41:
f4:e9:4d:73:ac:8c:23:f9:36:8e:f5:f5:35:30:d7:
72:f1:96:67:37:6b:fa:f5:93:ce:4c:0f:6f:fc:79:
3c:c6:97:3a:af:90:7f:a3:00:0f:56:6e:24:dc:2b:
a6:17:04:9f:13:ce:b3:c4:c5:01:78:28:ef:45:94:
7e:1f:05:7e:b1:d3:4f:2c:fb:83:0f:2a:00:7d:43:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:2B:51:F2:71:91:1C:6C:24:74:C3:70:3A:7D:AA:FE:F2:69:A2
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b8:e0:d2:99:61:c7:e5:c1:10:c8:44:7f:83:5c:9e:fc:10:
0e:02:d5:c5:0a:a1:fe:f8:d6:b7:ee:79:ee:f6:2c:56:55:a9:
17:56:be:a3:88:15:bd:d8:13:be:35:6c:1d:83:2c:8d:3a:05:
4b:23:14:77:1e:6f:20:4c:fc:8a:76:45:50:ed:6c:4f:d7:8c:
82:2c:35:6e:4c:fe:73:2e:51:29:bb:20:c3:7f:48:ea:d7:23:
96:76:90:b0:24:1e:01:61:6e:c6:57:bd:ec:b2:d8:ea:2c:1f:
9e:eb:56:89:d9:8f:b6:d1:72:48:d1:db:0a:d0:33:87:a5:23:
b2:22:77:1c:6e:e7:28:c6:bf:23:1e:a7:f5:eb:3b:10:90:c8:
6a:4d:ad:e6:12:4a:6e:3e:d4:61:b6:c4:b2:f0:3f:8d:d3:b8:
43:22:0d:82:fd:84:dc:c4:2d:d3:87:36:c0:73:f4:11:d3:fa:
27:38:e8:7d:51:82:7c:fe:14:2c:3c:29:82:3c:4b:b0:9d:20:
80:6b:2a:9e:94:21:7a:c2:18:dc:e3:df:d7:86:a7:79:98:3f:
04:66:5d:7c:4b:d0:c1:9a:e8:ec:c5:16:91:f1:f5:9f:fb:71:
c3:ff:2a:3c:03:f8:51:ec:bf:cc:b2:a9:70:ac:a5:46:4f:8c:
56:4f:43:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOKBayWXDwg9AUnfQKbvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWMyMTg4MTFkOTI5NGFkNjMxMjUzYTQ0NWVkMWQzOTVh
OTYzOWYwHhcNMjUwNDIwMjIwMTM2WhcNMjUwNDIxMjIwMTM2WjAzMTEwLwYDVQQD
Eyg2YTAxMmI1MWYyNzE5MTFjNmMyNDc0YzM3MDNhN2RhYWZlZjI2OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54qTN7Mq5+h0Ys/B3t4ga89dFhFw
8CXtw30hxJ+8TvNXfYUp2zo/wYu3d9FSTCPFcFUEhcUpA2ks0/uIArtKIzSnzNse
RQvgw+l4nEXOwVOMPitaVsUMwBQTthew9tDnI8dyi7xkeppKrDZEqa9AvfurtVQ4
DKYXo0VpiNQrYI1Vwu+dGgsR2nvSHwhEPw8R1Z62ECSrr4U9sdOydD+1v1471wKm
KqCxRJwNXIgo1SUQ6kH06U1zrIwj+TaO9fU1MNdy8ZZnN2v69ZPOTA9v/Hk8xpc6
r5B/owAPVm4k3CumFwSfE86zxMUBeCjvRZR+HwV+sdNPLPuDDyoAfUN+pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoBK1HycZEcbCR0w3A6far+8mmiMB8GA1UdIwQY
MBaAFP8cIYgR2SlK1jElOkRe0dOVqWOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt
YTBhNjBiYjljZDliLzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli
LzEvX3h3aGlCSFpLVXJXTVNVNlJGN1IwNVdwWTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7jg0plh
x+XBEMhEf4NcnvwQDgLVxQqh/vjWt+557vYsVlWpF1a+o4gVvdgTvjVsHYMsjToF
SyMUdx5vIEz8inZFUO1sT9eMgiw1bkz+cy5RKbsgw39I6tcjlnaQsCQeAWFuxle9
7LLY6iwfnutWidmPttFySNHbCtAzh6UjsiJ3HG7nKMa/Ix6n9es7EJDIak2t5hJK
bj7UYbbEsvA/jdO4QyINgv2E3MQt04c2wHP0EdP6JzjofVGCfP4ULDwpgjxLsJ0g
gGsqnpQhesIY3OPf14aneZg/BGZdfEvQwZro7MUWkfH1n/txw/8qPAP4Uey/zLKp
cKylRk+MVk9Dhg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:34:59 2025 by rpki-client