Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: Ou5nDKp+dfSmM1psUHDcD8uivUZ2DI63mm3D/ZfGuTY=
Subject key identifier: D8:48:C6:BF:D1:67:FE:65:26:FD:24:68:7D:D7:22:6D:72:52:CD:98
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 019653EE3E7377FC9F9451C4625EDAA55672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0C09
Signing time: Sun 20 Apr 2025 16:00:44 +0000
Manifest this update: Sun 20 Apr 2025 16:00:44 +0000
Manifest next update: Mon 21 Apr 2025 16:00:44 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: 0QzpYnUluzz8WUctU4p8H4/UDGpkCuTN6YznFhwyDeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:3e:73:77:fc:9f:94:51:c4:62:5e:da:a5:56:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: Apr 20 16:00:44 2025 GMT
Not After : Apr 21 16:00:44 2025 GMT
Subject: CN=d848c6bfd167fe6526fd24687dd7226d7252cd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:af:7f:47:3c:8d:e8:d6:04:54:a3:05:0d:
4c:52:13:ab:d1:2c:44:d4:92:0c:d2:fe:9c:ad:7d:
bf:c6:2e:85:5b:ec:76:5c:f6:d7:4b:00:44:9e:c9:
8b:01:26:2c:e1:f3:f0:93:ec:1b:50:f1:59:29:0a:
0d:bc:c0:bc:57:f1:81:2d:2f:0b:ec:d7:c8:9c:95:
a0:78:aa:ec:be:d8:9f:65:f6:92:c5:e3:cb:86:ca:
81:83:55:3c:df:96:ee:d7:62:e9:53:a5:cc:5d:d4:
7f:4e:3a:d1:d3:00:7d:eb:47:f2:5a:f5:32:12:60:
c1:80:95:86:e5:03:e8:99:53:8b:45:3f:3e:04:20:
f0:7d:7e:93:de:e9:9e:8c:9b:6e:1c:9d:60:aa:c8:
c3:bb:52:1d:49:86:4b:5b:8f:47:da:58:b2:d6:2e:
4f:35:4d:b7:64:6d:6c:30:e7:a3:01:09:64:db:c8:
0b:c1:29:ea:81:9c:39:ba:d1:9c:6f:4e:1f:b2:68:
df:ca:2c:97:4f:64:a8:6a:63:76:fe:ad:be:88:73:
53:32:94:76:31:04:9e:95:38:6f:a1:33:4c:5d:59:
d8:10:30:ec:0d:58:d7:ba:ff:c8:dc:d9:7f:e2:a0:
87:9e:67:c3:9f:31:70:d3:88:ff:ac:10:58:f5:fc:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:C6:BF:D1:67:FE:65:26:FD:24:68:7D:D7:22:6D:72:52:CD:98
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:d4:0b:7f:7f:72:87:e6:00:81:52:a8:ee:a6:d6:3b:fc:
19:a6:78:17:a2:91:68:0c:4b:07:2f:b7:81:d2:f3:7e:2b:5e:
99:16:cf:75:3a:0e:f0:ff:e7:fc:fc:c8:3d:fa:1c:34:08:a7:
c1:89:78:f0:5f:6e:a1:8a:94:65:13:f5:5a:c1:84:81:8f:09:
13:7b:0b:48:30:0c:ed:5e:2c:56:c6:5c:6f:f9:60:ee:c0:a0:
87:4e:e0:da:d6:54:7f:e4:b2:53:22:4a:c6:4d:d0:a1:68:2f:
fa:2f:cb:93:5b:a3:b2:8d:a6:c3:13:a9:d9:f4:14:b5:40:85:
26:0e:af:76:4f:06:2c:8d:91:fe:0f:02:9c:26:10:75:05:8c:
27:a8:e0:5c:df:5a:6f:cc:71:fe:3a:fe:d3:0a:b5:8b:3e:b4:
c0:4a:76:c9:da:50:a9:dc:37:55:d6:1d:fb:d9:1c:37:6c:d8:
0b:84:94:47:9c:fd:66:35:0f:4b:da:b1:24:44:05:df:0e:e1:
49:d9:bd:f4:0b:b6:7c:c7:4c:8e:54:ab:86:83:9c:6d:fa:d4:
2f:53:1c:13:59:d9:80:e6:30:04:b4:9a:5f:46:1b:bb:5d:4f:
d7:92:6f:6f:62:48:26:01:62:37:26:11:e9:31:5f:8d:37:bf:
2f:ce:db:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7j5zd/yflFHEYl7apVZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTllZmFjNjdlMzRiYjhhYmEzODlmZjhmMGQ3YTFjNTY1
NDMzZmQwHhcNMjUwNDIwMTYwMDQ0WhcNMjUwNDIxMTYwMDQ0WjAzMTEwLwYDVQQD
EyhkODQ4YzZiZmQxNjdmZTY1MjZmZDI0Njg3ZGQ3MjI2ZDcyNTJjZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7evf0c8jejWBFSjBQ1MUhOr0SxE
1JIM0v6crX2/xi6FW+x2XPbXSwBEnsmLASYs4fPwk+wbUPFZKQoNvMC8V/GBLS8L
7NfInJWgeKrsvtifZfaSxePLhsqBg1U835bu12LpU6XMXdR/TjrR0wB960fyWvUy
EmDBgJWG5QPomVOLRT8+BCDwfX6T3umejJtuHJ1gqsjDu1IdSYZLW49H2liy1i5P
NU23ZG1sMOejAQlk28gLwSnqgZw5utGcb04fsmjfyiyXT2SoamN2/q2+iHNTMpR2
MQSelThvoTNMXVnYEDDsDVjXuv/I3Nl/4qCHnmfDnzFw04j/rBBY9fxpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhIxr/RZ/5lJv0kaH3XIm1yUs2YMB8GA1UdIwQY
MBaAFMap76xn40u4q6OJ/48NehxWVDP9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFudnJHZmpTN2lybzRuX2p3MTZIRlpVTV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYTcxYzQtM2Q1ZS00ZTY4LTg3Nzkt
ZGMzMzk0MmNhMTk3LzEveHFudnJHZmpTN2lybzRuX2p3MTZIRlpVTV8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYTcxYzQtM2Q1ZS00ZTY4LTg3NzktZGMzMzk0MmNhMTk3
LzEveHFudnJHZmpTN2lybzRuX2p3MTZIRlpVTV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0zUC39/
cofmAIFSqO6m1jv8GaZ4F6KRaAxLBy+3gdLzfitemRbPdToO8P/n/PzIPfocNAin
wYl48F9uoYqUZRP1WsGEgY8JE3sLSDAM7V4sVsZcb/lg7sCgh07g2tZUf+SyUyJK
xk3QoWgv+i/Lk1ujso2mwxOp2fQUtUCFJg6vdk8GLI2R/g8CnCYQdQWMJ6jgXN9a
b8xx/jr+0wq1iz60wEp2ydpQqdw3VdYd+9kcN2zYC4SUR5z9ZjUPS9qxJEQF3w7h
Sdm99Au2fMdMjlSrhoOcbfrUL1McE1nZgOYwBLSaX0Ybu11P15Jvb2JIJgFiNyYR
6TFfjTe/L87bnA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:38 2025 by rpki-client