Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
File: XzoD6voEyDkjvYaTJGGFDfX3gUY.mft (raw, json)
Hash identifier: RaLQOoAf//SwzHCxn6CVUqQirZDdtSRE9p3516yaxWc=
Subject key identifier: B3:1A:41:CE:FF:D8:9A:CC:BD:CF:87:5B:69:9C:27:22:A2:DD:D4:51
Authority key identifier: 5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
Certificate issuer: /CN=5f3a03eafa04c83923bd86932461850df5f78146
Certificate serial: 01965C4C1D4D8C54746C8AE5A32BA73ECD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
Manifest number: 115C
Signing time: Tue 22 Apr 2025 07:00:14 +0000
Manifest this update: Tue 22 Apr 2025 07:00:14 +0000
Manifest next update: Wed 23 Apr 2025 07:00:14 +0000
Files and hashes: 1: XzoD6voEyDkjvYaTJGGFDfX3gUY.crl (hash: hFNdRNWY/I3lmB0ou8JOQqb1NHVRctmAjhgJBoCadZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:1d:4d:8c:54:74:6c:8a:e5:a3:2b:a7:3e:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a03eafa04c83923bd86932461850df5f78146
Validity
Not Before: Apr 22 07:00:14 2025 GMT
Not After : Apr 23 07:00:14 2025 GMT
Subject: CN=b31a41ceffd89accbdcf875b699c2722a2ddd451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:02:17:84:78:e3:69:ce:ef:08:ff:d8:a2:
64:91:d7:92:f9:ec:39:55:72:42:bb:a8:27:55:f0:
f7:03:f6:c4:01:b3:5b:7b:d0:52:fc:b3:cf:51:80:
33:60:74:77:fd:33:62:d0:ad:5d:63:cb:65:b4:7b:
68:26:5c:24:2e:12:ee:a1:de:78:f6:f2:b5:1e:f0:
93:88:93:a9:6c:03:88:ca:b1:f2:83:bb:3b:dd:f7:
5d:89:d7:19:87:6f:94:4f:88:89:5e:c6:f0:61:97:
dd:0b:39:b4:57:8d:2d:35:51:95:df:ec:01:54:a0:
86:7d:ec:bc:3c:c3:6f:6e:99:e8:c2:6c:79:86:1e:
af:b8:81:c6:ec:35:4d:58:ad:bf:2f:7d:86:46:9f:
c5:73:5a:97:8c:17:ea:89:00:08:37:f6:2e:bc:35:
e9:b0:4f:9f:63:01:32:cb:a3:fb:e2:e6:87:2b:46:
cb:ea:a0:17:e1:90:d7:b3:46:eb:95:4e:49:ca:61:
45:78:d9:c4:4b:bf:80:66:a0:b5:23:f0:91:f4:fc:
c0:7e:eb:82:f8:b5:88:8b:3e:8f:4b:5c:1e:0b:ca:
e5:a0:78:15:5b:76:7a:34:46:38:1d:f1:21:77:a7:
69:fa:91:2c:c9:c9:f1:70:62:4d:67:f5:fb:42:a9:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:41:CE:FF:D8:9A:CC:BD:CF:87:5B:69:9C:27:22:A2:DD:D4:51
X509v3 Authority Key Identifier:
keyid:5F:3A:03:EA:FA:04:C8:39:23:BD:86:93:24:61:85:0D:F5:F7:81:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzoD6voEyDkjvYaTJGGFDfX3gUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1bafe1-6996-4dcf-8752-d540e8b13f7d/1/XzoD6voEyDkjvYaTJGGFDfX3gUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ea:29:5c:78:09:fe:d4:f5:48:43:0d:8c:ee:04:9d:10:5a:
71:17:a0:b2:21:5e:7f:44:86:4b:7b:e8:db:b2:e7:dc:1c:86:
e9:85:18:5e:ab:ae:6b:c1:59:a3:42:24:e4:74:b8:0e:d0:62:
c6:f4:e9:92:97:b5:44:9f:e0:c0:07:71:dc:db:9c:1a:af:e7:
51:6a:f8:63:a7:40:1c:f7:dc:5f:60:c3:7b:01:42:14:27:a0:
de:d6:f0:60:4c:53:2d:3f:c7:82:8e:2c:4d:df:e5:20:7e:ce:
9b:8d:79:1c:9b:ab:e7:26:b8:42:aa:0a:c1:28:76:62:4d:ac:
1c:c5:90:c0:2b:85:ce:ac:c4:17:22:e8:0d:2b:6c:78:27:8b:
b1:43:79:a7:c9:4d:2f:7a:8f:6c:a1:cc:b0:8e:f9:a1:8c:6f:
c9:25:3c:d8:08:28:a3:73:b0:04:2f:3a:d5:5f:44:85:b6:bf:
23:28:04:03:8f:a4:3f:02:b1:e7:3e:8c:a6:5e:26:b2:80:3e:
33:a1:11:40:0a:4d:1e:db:24:d3:b6:f5:6a:a1:15:af:f3:da:
88:bb:40:88:87:c8:de:df:29:29:8a:bb:f3:3a:11:25:a3:8c:
46:95:91:c8:4a:e8:96:85:f7:f6:5e:cd:a2:60:41:4a:f0:0b:
97:77:e3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcTB1NjFR0bIrloyunPs0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmM2EwM2VhZmEwNGM4MzkyM2JkODY5MzI0NjE4NTBkZjVm
NzgxNDYwHhcNMjUwNDIyMDcwMDE0WhcNMjUwNDIzMDcwMDE0WjAzMTEwLwYDVQQD
EyhiMzFhNDFjZWZmZDg5YWNjYmRjZjg3NWI2OTljMjcyMmEyZGRkNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zwCF4R442nO7wj/2KJkkdeS+ew5
VXJCu6gnVfD3A/bEAbNbe9BS/LPPUYAzYHR3/TNi0K1dY8tltHtoJlwkLhLuod54
9vK1HvCTiJOpbAOIyrHyg7s73fddidcZh2+UT4iJXsbwYZfdCzm0V40tNVGV3+wB
VKCGfey8PMNvbpnowmx5hh6vuIHG7DVNWK2/L32GRp/Fc1qXjBfqiQAIN/YuvDXp
sE+fYwEyy6P74uaHK0bL6qAX4ZDXs0brlU5JymFFeNnES7+AZqC1I/CR9PzAfuuC
+LWIiz6PS1weC8rloHgVW3Z6NEY4HfEhd6dp+pEsycnxcGJNZ/X7QqlStwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMaQc7/2JrMvc+HW2mcJyKi3dRRMB8GA1UdIwQY
MBaAFF86A+r6BMg5I72GkyRhhQ3194FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpvRDZ2b0V5RGtqdllhVEpHR0ZEZlgzZ1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xYmFmZTEtNjk5Ni00ZGNmLTg3NTIt
ZDU0MGU4YjEzZjdkLzEvWHpvRDZ2b0V5RGtqdllhVEpHR0ZEZlgzZ1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xYmFmZTEtNjk5Ni00ZGNmLTg3NTItZDU0MGU4YjEzZjdk
LzEvWHpvRDZ2b0V5RGtqdllhVEpHR0ZEZlgzZ1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOopXHgJ
/tT1SEMNjO4EnRBacRegsiFef0SGS3vo27Ln3ByG6YUYXquua8FZo0Ik5HS4DtBi
xvTpkpe1RJ/gwAdx3NucGq/nUWr4Y6dAHPfcX2DDewFCFCeg3tbwYExTLT/Hgo4s
Td/lIH7Om415HJur5ya4QqoKwSh2Yk2sHMWQwCuFzqzEFyLoDStseCeLsUN5p8lN
L3qPbKHMsI75oYxvySU82Agoo3OwBC861V9Ehba/IygEA4+kPwKx5z6Mpl4msoA+
M6ERQApNHtsk07b1aqEVr/PaiLtAiIfI3t8pKYq78zoRJaOMRpWRyEroloX39l7N
omBBSvALl3fjNw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:44:10 2025 by rpki-client