Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: 3Xp58H0ryXhTookdnynjU8Hegc8BGhL/D5sm06PRv18=
Subject key identifier: 19:F2:D3:94:96:E1:B5:B7:B5:41:4B:F4:83:9A:F0:C3:01:7B:31:F3
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 0196545BCE5B8B466D19244445160D3171B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: C6
Signing time: Sun 20 Apr 2025 18:00:24 +0000
Manifest this update: Sun 20 Apr 2025 18:00:24 +0000
Manifest next update: Mon 21 Apr 2025 18:00:24 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: LrctZEijBB76NmY4Yxs5cGfmokg78VGU8x3+Fkw92WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:ce:5b:8b:46:6d:19:24:44:45:16:0d:31:71:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: Apr 20 18:00:24 2025 GMT
Not After : Apr 21 18:00:24 2025 GMT
Subject: CN=19f2d39496e1b5b7b5414bf4839af0c3017b31f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:25:00:05:e8:10:87:e2:2e:21:a9:6a:b4:
ab:b5:50:3d:a9:5f:de:aa:93:9d:2c:74:e7:a1:a4:
3b:e1:b1:4c:ea:19:5e:e6:4c:9c:ec:a3:ef:d6:01:
a2:27:5c:b9:96:02:cb:8f:ec:51:45:53:21:70:41:
1e:81:a3:d9:43:3c:56:36:62:c6:69:e2:39:ea:14:
41:1f:35:3f:ff:80:c1:c0:76:6c:0c:bf:1c:12:05:
a0:6d:05:ef:fc:f8:c6:7f:cb:f0:8f:e3:f4:b4:58:
42:87:fc:84:53:3e:55:f9:be:e0:3f:f4:ce:a1:41:
95:d8:c2:f4:1c:0d:b8:da:47:f2:00:1b:b6:5c:d8:
41:38:62:ba:bb:57:c8:d7:ac:fe:d2:dd:da:82:09:
a0:ec:2a:5f:c8:3b:b1:b7:5d:93:45:32:9e:ca:9d:
67:e0:d5:1d:fe:a2:9e:ce:91:2a:62:30:4b:ec:99:
3c:3b:7a:97:b8:16:11:b4:39:57:49:a3:2c:48:bf:
69:c2:87:4c:28:f1:47:0e:8c:55:2e:aa:db:d1:13:
ce:43:3b:02:ad:17:4e:0b:d7:d4:63:49:91:0c:23:
83:89:50:17:90:bb:62:a7:b5:7d:c9:da:43:99:62:
2c:75:d5:cb:85:f4:d9:1e:78:e6:7d:f8:dc:e0:d0:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:D3:94:96:E1:B5:B7:B5:41:4B:F4:83:9A:F0:C3:01:7B:31:F3
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ce:1d:51:f1:dc:87:19:51:d4:ae:83:ab:38:6d:0e:ac:88:
6c:75:13:a7:c3:e0:1c:ac:ab:82:5f:ae:bd:9b:50:19:46:1f:
97:44:59:cb:a7:a3:3c:9c:72:5a:85:59:9b:1e:c4:86:fa:59:
a1:6f:12:1b:d9:5c:bf:d2:6c:29:bb:25:54:6e:0e:97:f2:5c:
48:e5:ec:cc:ac:ba:56:cb:aa:ae:70:f1:0d:3d:97:59:b9:6e:
d0:23:8d:a8:95:0f:7d:56:de:ad:9a:fb:9c:e2:06:55:a1:9b:
ef:2c:7a:7f:95:61:bd:fe:7e:f4:ff:a0:86:5e:da:74:ed:dc:
7b:db:f4:5f:cd:1a:62:45:3f:e6:33:0c:b7:85:68:11:6a:4e:
77:6c:93:31:d4:b1:fe:1e:7c:50:a5:84:fa:89:68:1b:c5:47:
2b:b6:9e:37:c4:8f:2b:6a:d9:2f:08:13:10:17:14:e7:2e:f5:
1f:0c:95:92:34:2c:d7:b1:14:03:ab:51:27:2d:87:33:81:f7:
87:51:12:c1:ec:bd:6f:14:9f:9a:e4:76:a5:4a:10:b0:05:67:
99:6a:39:5a:61:64:2a:16:3a:77:a4:fe:a3:14:eb:a7:03:50:
e3:6e:5f:e1:0e:cb:4d:a3:70:8c:1b:a2:7d:94:32:dc:83:58:
cd:1e:23:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUW85bi0ZtGSRERRYNMXG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTcxNzQ1MDE4N2ZmZDM4ZWY0MWI3MWFiYzAxZGNlZDhi
YmJlNjQwHhcNMjUwNDIwMTgwMDI0WhcNMjUwNDIxMTgwMDI0WjAzMTEwLwYDVQQD
EygxOWYyZDM5NDk2ZTFiNWI3YjU0MTRiZjQ4MzlhZjBjMzAxN2IzMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa8lAAXoEIfiLiGparSrtVA9qV/e
qpOdLHTnoaQ74bFM6hle5kyc7KPv1gGiJ1y5lgLLj+xRRVMhcEEegaPZQzxWNmLG
aeI56hRBHzU//4DBwHZsDL8cEgWgbQXv/PjGf8vwj+P0tFhCh/yEUz5V+b7gP/TO
oUGV2ML0HA242kfyABu2XNhBOGK6u1fI16z+0t3aggmg7CpfyDuxt12TRTKeyp1n
4NUd/qKezpEqYjBL7Jk8O3qXuBYRtDlXSaMsSL9pwodMKPFHDoxVLqrb0RPOQzsC
rRdOC9fUY0mRDCODiVAXkLtip7V9ydpDmWIsddXLhfTZHnjmffjc4NC/TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBny05SW4bW3tUFL9IOa8MMBezHzMB8GA1UdIwQY
MBaAFMWXF0UBh//TjvQbcavAHc7Yu75kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQt
YTgwMmQ5ZTZiYzE2LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQtYTgwMmQ5ZTZiYzE2
LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs4dUfHc
hxlR1K6DqzhtDqyIbHUTp8PgHKyrgl+uvZtQGUYfl0RZy6ejPJxyWoVZmx7EhvpZ
oW8SG9lcv9JsKbslVG4Ol/JcSOXszKy6VsuqrnDxDT2XWblu0CONqJUPfVberZr7
nOIGVaGb7yx6f5Vhvf5+9P+ghl7adO3ce9v0X80aYkU/5jMMt4VoEWpOd2yTMdSx
/h58UKWE+oloG8VHK7aeN8SPK2rZLwgTEBcU5y71HwyVkjQs17EUA6tRJy2HM4H3
h1ESwey9bxSfmuR2pUoQsAVnmWo5WmFkKhY6d6T+oxTrpwNQ425f4Q7LTaNwjBui
fZQy3INYzR4jhw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:27:49 2025 by rpki-client