Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: KFX4E7w+dqH2gHiM9vA64YgvRXgpnF4fjrtVHxFWiw4=
Subject key identifier: 87:10:B5:A3:DE:C8:A3:70:4E:25:5C:D6:41:9F:DD:72:BE:C1:71:C8
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0196564A11199A1C1F60564155016E123D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 0485
Signing time: Mon 21 Apr 2025 03:00:16 +0000
Manifest this update: Mon 21 Apr 2025 03:00:16 +0000
Manifest next update: Tue 22 Apr 2025 03:00:16 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: Ayylo+alziQzZ6HRGz5Jy1Tgg2zaJoB2ZOwFrhmxTVQ=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:11:19:9a:1c:1f:60:56:41:55:01:6e:12:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Apr 21 03:00:16 2025 GMT
Not After : Apr 22 03:00:16 2025 GMT
Subject: CN=8710b5a3dec8a3704e255cd6419fdd72bec171c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:44:f4:32:ce:50:ec:6e:a7:b1:27:e9:f7:
d4:4e:b0:28:9c:de:5a:7e:3c:de:e6:0d:c5:e7:7d:
fc:cf:78:61:1f:9d:c8:29:c4:f9:5f:f4:6c:ac:b4:
46:0e:b1:21:e8:b4:d8:3f:2d:e7:f0:0a:09:1c:eb:
cc:0c:cb:87:fe:14:e0:f3:9c:5a:d4:2d:68:6d:4f:
66:df:01:fa:42:cf:91:fb:b1:cc:a8:05:6e:1f:75:
84:d5:38:63:b5:68:97:6b:5d:1f:14:fc:70:e5:67:
1f:59:bf:f7:93:18:4d:81:e3:6a:a7:f8:8f:85:90:
0e:76:cf:73:49:fd:f3:f7:4d:a0:24:87:06:d6:73:
d5:3e:6e:7f:3d:9d:37:ba:22:a6:ea:5f:34:75:72:
6f:f5:0f:3b:03:11:fa:b4:67:d6:0a:f7:28:36:71:
4b:56:07:38:a3:7d:8a:c6:5d:0c:dd:06:15:d9:a9:
1a:79:c2:b5:dd:f9:a8:ae:b6:1a:2f:17:4e:66:97:
37:98:1c:87:43:2c:3e:f5:e3:ff:20:84:9e:34:62:
f6:50:55:f1:93:54:16:4c:8b:04:12:3d:2d:34:3c:
1d:ca:8a:65:28:fb:05:84:3d:5a:52:dc:2a:8d:5e:
49:8f:35:13:7f:6a:f6:a1:42:67:d0:e2:8a:18:4a:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:B5:A3:DE:C8:A3:70:4E:25:5C:D6:41:9F:DD:72:BE:C1:71:C8
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3b:b7:c7:f2:11:8b:41:65:8c:40:33:3d:ee:4c:5d:7d:df:
62:07:b5:97:47:06:b2:96:d2:22:21:b0:ec:3b:0d:a1:be:19:
08:64:66:77:d7:2c:73:9d:18:24:7d:28:cd:50:a8:68:1b:eb:
a7:36:4e:70:67:2d:86:71:fd:a2:a1:65:12:c7:49:2b:0b:c2:
e5:b4:04:e3:63:aa:5f:4f:ec:b5:99:e5:dd:f1:96:70:fd:54:
b4:71:21:c7:3a:e1:8d:56:4a:0a:ff:51:25:1f:3f:9d:51:98:
35:74:3d:1c:71:b7:7c:2e:15:02:5d:08:de:fa:4b:0c:35:0f:
4a:ba:08:57:f7:c5:1d:69:e6:7a:7e:1b:08:41:6b:ac:ec:b1:
d4:3c:b2:ef:40:7b:c2:56:e7:10:62:f9:d6:c6:1c:35:53:9e:
23:ae:c0:c3:18:46:1e:b1:8d:0b:09:6d:2f:29:37:5d:95:e0:
ba:14:bf:96:7c:10:f2:4e:61:ce:69:91:97:8c:d4:d4:ba:5e:
29:e6:4a:2f:25:58:2d:96:73:1a:08:fe:03:1f:7c:bc:7a:5e:
50:90:46:53:23:8a:07:c2:a5:28:83:92:b1:70:94:b6:e6:a8:
dc:27:29:1b:c1:8d:6d:40:29:61:44:b1:44:a3:fe:e5:66:64:
78:12:19:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWShEZmhwfYFZBVQFuEj2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjUwNDIxMDMwMDE2WhcNMjUwNDIyMDMwMDE2WjAzMTEwLwYDVQQD
Eyg4NzEwYjVhM2RlYzhhMzcwNGUyNTVjZDY0MTlmZGQ3MmJlYzE3MWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/tE9DLOUOxup7En6ffUTrAonN5a
fjze5g3F5338z3hhH53IKcT5X/RsrLRGDrEh6LTYPy3n8AoJHOvMDMuH/hTg85xa
1C1obU9m3wH6Qs+R+7HMqAVuH3WE1ThjtWiXa10fFPxw5WcfWb/3kxhNgeNqp/iP
hZAOds9zSf3z902gJIcG1nPVPm5/PZ03uiKm6l80dXJv9Q87AxH6tGfWCvcoNnFL
Vgc4o32Kxl0M3QYV2akaecK13fmorrYaLxdOZpc3mByHQyw+9eP/IISeNGL2UFXx
k1QWTIsEEj0tNDwdyoplKPsFhD1aUtwqjV5JjzUTf2r2oUJn0OKKGEoFQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcQtaPeyKNwTiVc1kGf3XK+wXHIMB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDu3x/IR
i0FljEAzPe5MXX3fYge1l0cGspbSIiGw7DsNob4ZCGRmd9csc50YJH0ozVCoaBvr
pzZOcGcthnH9oqFlEsdJKwvC5bQE42OqX0/stZnl3fGWcP1UtHEhxzrhjVZKCv9R
JR8/nVGYNXQ9HHG3fC4VAl0I3vpLDDUPSroIV/fFHWnmen4bCEFrrOyx1Dyy70B7
wlbnEGL51sYcNVOeI67AwxhGHrGNCwltLyk3XZXguhS/lnwQ8k5hzmmRl4zU1Lpe
KeZKLyVYLZZzGgj+Ax98vHpeUJBGUyOKB8KlKIOSsXCUtuao3CcpG8GNbUApYUSx
RKP+5WZkeBIZyg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:14 2025 by rpki-client