Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: STIoEFZV5n6cHNWmQWPrzRs2mlaiDF5dMdsx03uhmM8=
Subject key identifier: C2:2A:C9:06:78:37:41:76:63:AD:FC:82:2D:69:3A:86:61:24:50:D9
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 0196451F71D4676A615E2FA8C965313B3C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 11FE
Signing time: Thu 17 Apr 2025 19:00:10 +0000
Manifest this update: Thu 17 Apr 2025 19:00:10 +0000
Manifest next update: Fri 18 Apr 2025 19:00:10 +0000
Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=)
2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=)
3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: aaz1a5DmOYrbBJNLvBBmRpFf2Q9Y82mqWPl5fptIRLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:71:d4:67:6a:61:5e:2f:a8:c9:65:31:3b:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Apr 17 19:00:10 2025 GMT
Not After : Apr 18 19:00:10 2025 GMT
Subject: CN=c22ac9067837417663adfc822d693a86612450d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:40:88:be:f1:42:9e:83:cb:0c:29:55:7e:
d0:27:80:13:fc:79:94:7d:ca:ca:2a:92:f1:7a:31:
1a:56:d2:36:f4:6f:b1:d0:ad:47:4a:e1:5f:b4:6a:
e8:c0:7a:2c:eb:44:dd:7c:be:34:c3:0e:53:cc:a2:
bd:ae:aa:2f:78:52:bc:28:de:71:b2:be:bb:66:0a:
9c:cb:6f:2d:db:cf:64:ad:fc:89:b8:b4:62:cf:d0:
36:ea:db:0a:d0:74:17:27:7f:10:a9:c0:5b:02:0e:
b2:4f:86:59:f1:47:c5:83:9f:9f:af:ce:bf:d0:9f:
e4:a5:a2:ba:99:48:19:af:47:50:e9:52:43:8a:ba:
05:ae:7b:10:48:33:92:64:84:95:88:4e:57:ef:e1:
12:13:67:41:5b:cb:86:10:74:3b:bd:8e:92:26:b9:
09:13:02:b6:44:f5:13:a0:46:5a:f2:b2:bc:53:04:
84:08:16:87:b6:60:72:71:0b:aa:18:43:2d:e6:10:
75:2c:89:d3:ed:b0:31:a6:b2:b4:d6:bd:7a:96:47:
cf:c1:89:91:03:e6:74:3e:ed:37:17:2d:95:ec:65:
5b:09:55:db:44:ae:64:de:44:68:38:cf:ef:15:e9:
48:cf:ad:d1:95:2a:2f:39:e7:02:06:39:d6:8e:55:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:C9:06:78:37:41:76:63:AD:FC:82:2D:69:3A:86:61:24:50:D9
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:bd:f5:c9:2f:0d:65:f7:41:2b:e1:e9:e4:68:1f:92:1f:
43:d1:94:84:40:52:5a:e3:b1:bb:64:54:a3:e2:04:a5:5c:6a:
94:3b:4d:27:9a:27:0c:1a:70:18:cb:f9:5c:f3:5f:7e:6d:ee:
fd:a2:9e:4d:da:72:3e:30:cd:7f:18:c8:03:d1:ff:42:1e:e2:
52:85:2c:6c:0e:23:8d:76:04:06:9a:92:bd:b7:2c:5a:9f:62:
37:42:ff:13:90:b9:96:ae:e5:b6:21:73:3e:bf:1f:4c:94:9d:
2e:70:07:b5:fc:30:63:7a:84:4a:b7:84:94:23:b0:88:45:09:
eb:dc:bd:aa:81:7b:17:9c:c3:12:fe:37:30:ec:2e:df:76:93:
c0:aa:ee:9d:78:5b:42:d5:df:2d:6a:06:67:23:3e:50:05:07:
17:b9:be:2c:33:f5:e3:f0:55:72:a1:6d:d9:7f:7f:d1:9a:42:
58:97:0a:a3:a6:0d:bb:ef:10:4c:c3:2c:12:58:f4:b0:3b:1b:
a2:e8:d0:08:22:3e:6c:31:2d:6b:ff:5e:39:84:5d:35:60:c6:
ca:6e:0e:30:da:dd:74:37:6a:c7:1d:fe:cd:29:f5:e7:d3:c8:
45:8a:8c:b0:b8:43:5c:85:ae:a6:ba:13:69:2f:7f:e1:d5:d4:
b5:0a:47:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFH3HUZ2phXi+oyWUxOzxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzcwYTQ4YjU5ZmI4MTE0OTVmMTFjNDk3MzQ0ODJmMjJi
MWEzOTIwHhcNMjUwNDE3MTkwMDEwWhcNMjUwNDE4MTkwMDEwWjAzMTEwLwYDVQQD
EyhjMjJhYzkwNjc4Mzc0MTc2NjNhZGZjODIyZDY5M2E4NjYxMjQ1MGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdlAiL7xQp6DywwpVX7QJ4AT/HmU
fcrKKpLxejEaVtI29G+x0K1HSuFftGrowHos60TdfL40ww5TzKK9rqoveFK8KN5x
sr67Zgqcy28t289krfyJuLRiz9A26tsK0HQXJ38QqcBbAg6yT4ZZ8UfFg5+fr86/
0J/kpaK6mUgZr0dQ6VJDiroFrnsQSDOSZISViE5X7+ESE2dBW8uGEHQ7vY6SJrkJ
EwK2RPUToEZa8rK8UwSECBaHtmBycQuqGEMt5hB1LInT7bAxprK01r16lkfPwYmR
A+Z0Pu03Fy2V7GVbCVXbRK5k3kRoOM/vFelIz63RlSovOecCBjnWjlXfcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIqyQZ4N0F2Y638gi1pOoZhJFDZMB8GA1UdIwQY
MBaAFF03Cki1n7gRSV8RxJc0SC8isaOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2Ut
ZTI3MjAxMzAyNmI0LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2UtZTI3MjAxMzAyNmI0
LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItG99ckv
DWX3QSvh6eRoH5IfQ9GUhEBSWuOxu2RUo+IEpVxqlDtNJ5onDBpwGMv5XPNffm3u
/aKeTdpyPjDNfxjIA9H/Qh7iUoUsbA4jjXYEBpqSvbcsWp9iN0L/E5C5lq7ltiFz
Pr8fTJSdLnAHtfwwY3qESreElCOwiEUJ69y9qoF7F5zDEv43MOwu33aTwKrunXhb
QtXfLWoGZyM+UAUHF7m+LDP14/BVcqFt2X9/0ZpCWJcKo6YNu+8QTMMsElj0sDsb
oujQCCI+bDEta/9eOYRdNWDGym4OMNrddDdqxx3+zSn159PIRYqMsLhDXIWuproT
aS9/4dXUtQpHmA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:14:12 2025 by rpki-client