Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: G4AevQY+yRS7Ut+dV12C1ILMa124Uzjr+/U41mMj9jA=
Subject key identifier: D7:AC:40:FB:FA:14:EE:82:95:BA:7E:7D:81:D7:02:02:86:B5:7A:3E
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019658016DEBFA81141480A5907D625493DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 0FAE
Signing time: Mon 21 Apr 2025 11:00:10 +0000
Manifest this update: Mon 21 Apr 2025 11:00:10 +0000
Manifest next update: Tue 22 Apr 2025 11:00:10 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: ZjHkE6XSccpoc3glsrjchQZQtY5Z0XK4qE+0AuS+0zs=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:6d:eb:fa:81:14:14:80:a5:90:7d:62:54:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Apr 21 11:00:10 2025 GMT
Not After : Apr 22 11:00:10 2025 GMT
Subject: CN=d7ac40fbfa14ee8295ba7e7d81d7020286b57a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:61:7f:8d:ee:1e:42:85:fd:36:b7:95:90:
c6:5b:d4:34:1f:fd:8d:fe:12:65:73:9f:e2:ce:00:
da:03:25:c0:bb:7f:21:0e:68:63:05:be:8a:20:38:
e5:11:6a:cd:a2:2a:8a:85:44:c7:14:05:35:eb:20:
18:22:70:33:d2:f3:f2:0d:d7:81:5c:aa:93:65:76:
91:a8:df:3d:d6:f6:aa:db:7c:33:91:39:a3:6c:b8:
57:75:c6:00:2e:17:60:1d:cd:c0:af:cc:70:a5:73:
e0:b5:0b:1b:87:aa:2b:7b:14:b5:74:3c:d0:8d:c5:
ee:8c:41:c1:69:d3:a6:36:26:73:27:f0:a1:fd:6e:
8c:df:2f:03:22:8c:89:db:3e:7a:3b:f3:11:2b:40:
48:5f:44:7b:f5:85:da:2f:fe:fb:7a:72:45:b5:09:
e2:52:a4:d8:ce:b5:f8:08:f7:12:3b:39:95:b1:7b:
51:04:a8:3a:4f:01:45:75:37:0a:90:bf:f1:b1:70:
69:7c:60:ed:c3:4c:bc:49:48:83:69:9e:bf:ab:aa:
d4:ed:3a:2d:c8:99:bb:6b:33:1d:f8:27:bf:e5:cd:
00:84:45:23:e3:04:75:f7:da:4f:0b:b5:85:03:a1:
88:59:52:dc:97:a1:bc:be:c9:20:54:43:1a:f5:2d:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:40:FB:FA:14:EE:82:95:BA:7E:7D:81:D7:02:02:86:B5:7A:3E
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c4:3e:a4:cf:25:7a:ca:03:e1:c2:3f:9a:e7:fc:62:c7:d8:
2a:59:15:cb:c1:b0:9c:e7:d5:38:98:14:31:ac:c1:c2:e6:eb:
95:9d:bb:33:1a:79:e8:d5:7f:89:a7:ec:4d:c5:98:a8:a1:61:
20:5e:7f:5b:4a:f8:ac:97:19:f8:9a:47:08:fc:d8:1e:ef:4e:
e2:e3:c7:9f:bb:b5:97:ba:9f:14:16:75:85:22:59:f3:e9:37:
86:28:ea:93:5a:96:43:5c:37:30:51:31:a1:8c:a1:70:d3:cc:
44:8c:18:01:9f:2d:87:4d:50:57:83:17:3d:54:b6:2f:91:57:
37:15:c7:63:cf:a3:b5:03:5e:9f:17:0a:e1:2e:bf:89:ed:c5:
c4:40:19:78:56:07:ef:33:09:25:da:29:f1:63:5a:f5:08:65:
38:7a:08:6e:a5:b5:d6:94:a6:ff:50:0d:03:f7:8d:8f:2c:08:
7b:8c:c8:fa:12:01:86:fd:22:06:f0:6f:ab:90:26:f6:5d:4a:
f8:90:5f:96:08:2c:6f:f0:ef:36:b8:7b:b0:06:40:6b:04:6e:
56:ea:1d:da:e0:06:66:14:63:6d:82:30:dc:be:da:cd:0b:d8:
17:43:18:c1:19:9c:c4:29:f2:ba:f5:43:f2:09:0f:f3:99:d7:
de:c2:4a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAW3r+oEUFIClkH1iVJPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Zjg4YjVjNmU1MTE2ZTUwY2YyYjViZGY0M2U4NzIwZjFk
OGM2MGYwHhcNMjUwNDIxMTEwMDEwWhcNMjUwNDIyMTEwMDEwWjAzMTEwLwYDVQQD
EyhkN2FjNDBmYmZhMTRlZTgyOTViYTdlN2Q4MWQ3MDIwMjg2YjU3YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof5hf43uHkKF/Ta3lZDGW9Q0H/2N
/hJlc5/izgDaAyXAu38hDmhjBb6KIDjlEWrNoiqKhUTHFAU16yAYInAz0vPyDdeB
XKqTZXaRqN891vaq23wzkTmjbLhXdcYALhdgHc3Ar8xwpXPgtQsbh6orexS1dDzQ
jcXujEHBadOmNiZzJ/Ch/W6M3y8DIoyJ2z56O/MRK0BIX0R79YXaL/77enJFtQni
UqTYzrX4CPcSOzmVsXtRBKg6TwFFdTcKkL/xsXBpfGDtw0y8SUiDaZ6/q6rU7Tot
yJm7azMd+Ce/5c0AhEUj4wR199pPC7WFA6GIWVLcl6G8vskgVEMa9S2uSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNesQPv6FO6Clbp+fYHXAgKGtXo+MB8GA1UdIwQY
MBaAFMT4i1xuURblDPK1vfQ+hyDx2MYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjct
MDczNjM5OTM4NDM3LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjctMDczNjM5OTM4NDM3
LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8Q+pM8l
esoD4cI/muf8YsfYKlkVy8GwnOfVOJgUMazBwubrlZ27Mxp56NV/iafsTcWYqKFh
IF5/W0r4rJcZ+JpHCPzYHu9O4uPHn7u1l7qfFBZ1hSJZ8+k3hijqk1qWQ1w3MFEx
oYyhcNPMRIwYAZ8th01QV4MXPVS2L5FXNxXHY8+jtQNenxcK4S6/ie3FxEAZeFYH
7zMJJdop8WNa9QhlOHoIbqW11pSm/1ANA/eNjywIe4zI+hIBhv0iBvBvq5Am9l1K
+JBflggsb/DvNrh7sAZAawRuVuod2uAGZhRjbYIw3L7azQvYF0MYwRmcxCnyuvVD
8gkP85nX3sJK1g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:38 2025 by rpki-client