Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
File: XKiGCq68SoHT0ibUI4c-M8OICqo.mft (raw, json)
Hash identifier: 7M8BsdQ7C7yk+87PYGpB6BzpgnK0+xns1D60TBMEs9M=
Subject key identifier: 52:36:58:CC:34:47:BD:C5:9E:25:76:07:B1:32:0E:B4:EB:BC:97:53
Authority key identifier: 5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
Certificate issuer: /CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Certificate serial: 01965538248E1AB9242D317EF522E3BB9751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
Manifest number: 0976
Signing time: Sun 20 Apr 2025 22:01:04 +0000
Manifest this update: Sun 20 Apr 2025 22:01:04 +0000
Manifest next update: Mon 21 Apr 2025 22:01:04 +0000
Files and hashes: 1: XKiGCq68SoHT0ibUI4c-M8OICqo.crl (hash: IbWLQDWk7iurZ5KQD7OgwtI1XQypugE27Smkz7FG7Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:24:8e:1a:b9:24:2d:31:7e:f5:22:e3:bb:97:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca8860aaebc4a81d3d226d423873e33c3880aaa
Validity
Not Before: Apr 20 22:01:04 2025 GMT
Not After : Apr 21 22:01:04 2025 GMT
Subject: CN=523658cc3447bdc59e257607b1320eb4ebbc9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:4a:e5:e2:7f:9e:c1:7f:42:58:3e:a3:3f:
fb:d6:85:44:34:36:5c:d0:d4:bd:f4:0c:6c:a5:eb:
ed:7d:e3:d0:37:de:85:f3:80:72:7f:c2:ce:af:05:
78:e2:e8:ac:2a:ae:c2:0e:34:e2:63:f2:a6:6e:d3:
e0:59:4c:1f:18:8e:6a:51:4e:60:04:84:19:2a:48:
15:6e:82:b5:38:4a:74:23:f1:ae:d1:4b:32:08:68:
7a:5f:04:db:72:a4:0d:ad:25:bc:a1:82:ab:c8:29:
a9:dd:8a:6c:e4:56:45:5f:93:55:ee:e7:06:ef:e4:
f9:00:f7:20:8a:ba:d1:1f:43:2e:19:c6:28:ab:86:
33:03:5c:40:96:25:f9:e5:0d:de:78:c2:7e:1f:eb:
8c:99:df:80:a5:4b:27:53:35:0a:bc:3b:91:73:96:
f1:0f:de:a8:5e:7a:74:72:d5:5e:1f:aa:c7:94:81:
f7:52:e2:cb:92:86:ff:5d:6b:74:25:05:ac:04:8e:
49:4b:85:ec:83:00:13:01:a1:03:55:d0:70:2d:3e:
ff:ea:c7:90:50:d4:a9:c6:ae:0d:69:78:7b:aa:41:
3f:82:63:99:cd:b4:54:33:60:d3:f9:31:2b:d8:d6:
90:f0:e8:ac:3a:21:54:87:59:ef:d3:06:4d:1e:c7:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:36:58:CC:34:47:BD:C5:9E:25:76:07:B1:32:0E:B4:EB:BC:97:53
X509v3 Authority Key Identifier:
keyid:5C:A8:86:0A:AE:BC:4A:81:D3:D2:26:D4:23:87:3E:33:C3:88:0A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKiGCq68SoHT0ibUI4c-M8OICqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7980b4-cd44-4597-857d-62d13b031419/1/XKiGCq68SoHT0ibUI4c-M8OICqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3e:37:2a:83:b7:b4:e7:bb:cd:16:7d:38:0b:9d:4d:56:dc:
9c:9e:fd:cd:4f:49:a8:44:85:bf:51:fe:38:33:5e:ed:04:6b:
e2:41:6b:a1:4a:69:a5:8a:50:20:0b:ff:1c:cb:97:13:65:07:
c1:f5:79:ab:c2:f1:e3:5b:11:d4:c4:4b:60:ed:55:fd:fc:5a:
ff:67:0a:2e:9b:76:05:1d:f4:e3:d5:8b:e1:26:42:36:61:3c:
49:bb:fd:61:0f:07:f9:0c:ab:51:ea:fc:3d:03:3d:f9:49:ea:
5f:55:af:e7:34:54:96:7c:a2:0c:44:b0:19:f2:fe:31:da:03:
50:bc:7f:45:cf:1f:5e:40:62:45:00:03:17:8a:f1:e4:2e:d7:
e3:04:9c:ef:25:ed:07:51:97:b9:d8:61:39:d5:dd:7b:01:f5:
55:a1:be:62:82:73:f1:9a:a5:e3:87:77:a2:9f:56:e0:52:bd:
ca:3b:4b:c3:2d:9b:a4:c2:32:1b:0c:ff:25:64:b2:6a:f4:93:
b0:c6:79:89:b2:53:90:f5:5f:9a:67:c5:26:6b:71:73:59:c5:
95:f1:e2:ad:ba:47:1a:7a:fa:11:32:11:41:58:e4:fd:4f:7d:
10:9d:8f:d2:8d:dd:df:e0:bd:58:2a:53:63:e2:e2:0d:b7:78:
a2:3a:79:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOCSOGrkkLTF+9SLju5dRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTg4NjBhYWViYzRhODFkM2QyMjZkNDIzODczZTMzYzM4
ODBhYWEwHhcNMjUwNDIwMjIwMTA0WhcNMjUwNDIxMjIwMTA0WjAzMTEwLwYDVQQD
Eyg1MjM2NThjYzM0NDdiZGM1OWUyNTc2MDdiMTMyMGViNGViYmM5NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RNK5eJ/nsF/Qlg+oz/71oVENDZc
0NS99AxspevtfePQN96F84Byf8LOrwV44uisKq7CDjTiY/KmbtPgWUwfGI5qUU5g
BIQZKkgVboK1OEp0I/Gu0UsyCGh6XwTbcqQNrSW8oYKryCmp3Yps5FZFX5NV7ucG
7+T5APcgirrRH0MuGcYoq4YzA1xAliX55Q3eeMJ+H+uMmd+ApUsnUzUKvDuRc5bx
D96oXnp0ctVeH6rHlIH3UuLLkob/XWt0JQWsBI5JS4XsgwATAaEDVdBwLT7/6seQ
UNSpxq4NaXh7qkE/gmOZzbRUM2DT+TEr2NaQ8OisOiFUh1nv0wZNHscJWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFI2WMw0R73FniV2B7EyDrTrvJdTMB8GA1UdIwQY
MBaAFFyohgquvEqB09Im1COHPjPDiAqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtpR0NxNjhTb0hUMGliVUk0Yy1NOE9JQ3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTgwYjQtY2Q0NC00NTk3LTg1N2Qt
NjJkMTNiMDMxNDE5LzEvWEtpR0NxNjhTb0hUMGliVUk0Yy1NOE9JQ3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83OTgwYjQtY2Q0NC00NTk3LTg1N2QtNjJkMTNiMDMxNDE5
LzEvWEtpR0NxNjhTb0hUMGliVUk0Yy1NOE9JQ3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHj43KoO3
tOe7zRZ9OAudTVbcnJ79zU9JqESFv1H+ODNe7QRr4kFroUpppYpQIAv/HMuXE2UH
wfV5q8Lx41sR1MRLYO1V/fxa/2cKLpt2BR3049WL4SZCNmE8Sbv9YQ8H+QyrUer8
PQM9+UnqX1Wv5zRUlnyiDESwGfL+MdoDULx/Rc8fXkBiRQADF4rx5C7X4wSc7yXt
B1GXudhhOdXdewH1VaG+YoJz8Zql44d3op9W4FK9yjtLwy2bpMIyGwz/JWSyavST
sMZ5ibJTkPVfmmfFJmtxc1nFlfHirbpHGnr6ETIRQVjk/U99EJ2P0o3d3+C9WCpT
Y+LiDbd4ojp5Aw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:11 2025 by rpki-client