Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File: x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier: RE96Wo9TjE42WDh9ZHfWDrEeS+nWQS4qL+zY22kJE2Q=
Subject key identifier: 05:4F:BE:F1:38:C8:17:F4:4F:49:22:C4:23:33:03:3E:73:FC:FD:55
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer: /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial: 01965B707FCBB4284D63BF64F273A38D9FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number: 0530
Signing time: Tue 22 Apr 2025 03:00:21 +0000
Manifest this update: Tue 22 Apr 2025 03:00:21 +0000
Manifest next update: Wed 23 Apr 2025 03:00:21 +0000
Files and hashes: 1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: wv2LkHO8nyvLv7HYjm7SNU8FU4sCBV9gxyWjUlOddI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:7f:cb:b4:28:4d:63:bf:64:f2:73:a3:8d:9f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Validity
Not Before: Apr 22 03:00:21 2025 GMT
Not After : Apr 23 03:00:21 2025 GMT
Subject: CN=054fbef138c817f44f4922c42333033e73fcfd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:0e:60:66:46:57:33:84:c2:49:dd:2a:d7:
11:57:61:eb:99:a1:81:3d:27:00:7f:ca:73:f7:c2:
68:c3:1f:b6:da:37:b0:e5:ca:7d:73:1e:90:42:a5:
51:53:f5:81:1e:73:4f:f8:15:a5:54:a0:d8:ca:20:
5c:f6:3f:9f:45:53:41:7f:6d:fa:6f:0b:52:a1:56:
23:70:6d:62:49:c3:6f:df:bb:94:91:f2:78:e8:c9:
a0:04:d6:5e:64:58:85:19:c8:0d:e2:85:a5:48:8e:
0c:0c:b4:02:23:80:37:9e:36:91:0f:5e:c2:81:5f:
b4:eb:87:4d:de:54:32:3a:ff:4b:b2:5b:c1:5a:5d:
31:03:a3:53:5b:e6:c7:af:fe:07:89:99:fe:0b:06:
68:2d:7d:22:47:10:89:47:d0:1c:67:5f:24:27:09:
d2:63:d8:26:98:e3:e0:24:11:f5:f0:60:a4:56:72:
cb:2b:da:56:11:39:e1:9f:02:62:30:63:c7:ca:9f:
ce:3f:ca:f9:71:bd:f2:8e:3d:28:f0:8a:e4:8e:1c:
66:8b:60:0a:db:17:da:92:8a:67:7c:48:b2:e3:95:
8b:22:01:8a:32:32:7b:b3:33:bf:af:cb:85:a9:b0:
01:fc:f3:a8:2b:62:ab:e7:35:05:d5:17:98:0d:e4:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:BE:F1:38:C8:17:F4:4F:49:22:C4:23:33:03:3E:73:FC:FD:55
X509v3 Authority Key Identifier:
keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1c:33:12:3e:e3:e1:ac:ae:aa:50:51:ed:18:81:e7:25:2d:
e9:f6:30:48:7c:c4:57:2a:a9:eb:ce:9e:4f:42:fb:dd:41:bb:
9e:c3:68:50:8d:87:ab:19:a2:c1:6c:b9:9d:bd:00:74:5d:7f:
25:e4:51:4c:0d:8e:8f:f1:c6:a7:47:f5:3f:66:8f:7d:d7:99:
c4:a0:26:11:5e:29:85:84:85:7d:c2:8e:f2:38:f6:40:88:69:
fc:13:e0:93:83:49:46:5d:b0:b7:c6:b8:7a:a2:ac:61:fa:68:
3a:fb:1d:6c:94:7c:f7:23:c6:37:83:87:b1:63:a0:4f:20:eb:
ae:5f:e1:bc:8c:93:b3:4a:25:10:5d:be:9f:08:b5:33:42:99:
b5:fc:ef:a3:53:70:e1:f6:e0:06:ba:14:c9:34:1a:3c:c6:55:
85:92:6c:de:08:c4:f9:b0:97:57:38:33:45:e4:77:87:66:0d:
fc:66:d7:00:7b:06:d7:7e:f7:7d:67:24:30:9e:bb:73:53:5b:
01:3e:00:0c:65:62:9c:fe:87:03:a7:6d:52:e7:7e:e2:38:c1:
4b:f5:fd:2a:86:12:a8:e1:e7:9d:6e:30:93:12:c8:ad:53:8b:
c8:53:1c:25:22:35:84:bf:11:66:b5:51:83:cb:3a:d2:d5:98:
a5:2e:29:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbcH/LtChNY79k8nOjjZ/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz
MGM5OTMwHhcNMjUwNDIyMDMwMDIxWhcNMjUwNDIzMDMwMDIxWjAzMTEwLwYDVQQD
EygwNTRmYmVmMTM4YzgxN2Y0NGY0OTIyYzQyMzMzMDMzZTczZmNmZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfIOYGZGVzOEwkndKtcRV2HrmaGB
PScAf8pz98Jowx+22jew5cp9cx6QQqVRU/WBHnNP+BWlVKDYyiBc9j+fRVNBf236
bwtSoVYjcG1iScNv37uUkfJ46MmgBNZeZFiFGcgN4oWlSI4MDLQCI4A3njaRD17C
gV+064dN3lQyOv9LslvBWl0xA6NTW+bHr/4HiZn+CwZoLX0iRxCJR9AcZ18kJwnS
Y9gmmOPgJBH18GCkVnLLK9pWETnhnwJiMGPHyp/OP8r5cb3yjj0o8Irkjhxmi2AK
2xfakopnfEiy45WLIgGKMjJ7szO/r8uFqbAB/POoK2Kr5zUF1ReYDeRyYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVPvvE4yBf0T0kixCMzAz5z/P1VMB8GA1UdIwQY
MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt
MDkwZTViZDU4MGIzLzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz
LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxwzEj7j
4ayuqlBR7RiB5yUt6fYwSHzEVyqp686eT0L73UG7nsNoUI2HqxmiwWy5nb0AdF1/
JeRRTA2Oj/HGp0f1P2aPfdeZxKAmEV4phYSFfcKO8jj2QIhp/BPgk4NJRl2wt8a4
eqKsYfpoOvsdbJR89yPGN4OHsWOgTyDrrl/hvIyTs0olEF2+nwi1M0KZtfzvo1Nw
4fbgBroUyTQaPMZVhZJs3gjE+bCXVzgzReR3h2YN/GbXAHsG1373fWckMJ67c1Nb
AT4ADGVinP6HA6dtUud+4jjBS/X9KoYSqOHnnW4wkxLIrVOLyFMcJSI1hL8RZrVR
g8s60tWYpS4pwg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:32:01 2025 by rpki-client