Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: Vgeh6omrOr8nn06BsfvSFhC2eAX+TfoRpHpVGfp+quo=
Subject key identifier: 9C:86:64:3C:8A:58:82:4C:15:D2:93:24:66:0D:B8:B6:52:B5:AA:6A
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 01964BFDD765006E133C2CE4B6D930ADE09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 10B7
Signing time: Sat 19 Apr 2025 03:00:49 +0000
Manifest this update: Sat 19 Apr 2025 03:00:49 +0000
Manifest next update: Sun 20 Apr 2025 03:00:49 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: LKecUZO1NTVvpwrWah9vxkUhQYJqctDQuc33xnHTUYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:d7:65:00:6e:13:3c:2c:e4:b6:d9:30:ad:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Apr 19 03:00:49 2025 GMT
Not After : Apr 20 03:00:49 2025 GMT
Subject: CN=9c86643c8a58824c15d29324660db8b652b5aa6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:88:3c:5c:34:c9:16:3d:89:6f:17:43:0f:
5f:6f:6b:ee:d1:e5:c3:a5:df:4b:e5:e2:7e:4d:07:
f6:38:ff:22:99:d5:d9:36:ef:21:2c:de:43:3f:81:
63:41:51:74:e7:02:13:0a:07:48:0c:c0:68:81:4b:
03:41:0a:50:25:35:33:6b:de:17:00:88:44:56:ea:
a3:7a:0a:a6:55:c9:7a:d9:ef:b5:f5:73:e5:67:f6:
64:f6:81:02:a3:8a:e1:60:8c:dc:09:00:9e:84:f2:
f2:83:83:35:8f:f5:1d:ec:a3:8c:a1:e4:1d:ae:43:
40:d1:f7:b4:bd:e0:d0:cc:40:81:37:1d:65:3a:9e:
f6:03:5f:49:1a:97:9f:35:85:c7:fe:fd:04:6c:58:
f9:aa:75:85:c7:9f:fc:03:da:74:a0:e0:cc:be:63:
fd:21:7a:06:c4:e5:2e:96:09:75:38:3c:22:5d:ba:
e0:0b:7e:81:b2:18:c8:d2:f9:0f:59:07:7f:ca:c3:
e1:67:3f:10:05:9a:70:72:71:66:6f:97:67:49:59:
1f:40:33:c2:d3:22:c9:7b:07:ab:79:76:fc:ce:88:
64:65:10:c9:3f:d7:b8:e0:56:1c:3b:9e:0f:64:3f:
cf:e7:22:ee:60:0d:7d:d8:c2:4f:39:ba:39:a6:88:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:64:3C:8A:58:82:4C:15:D2:93:24:66:0D:B8:B6:52:B5:AA:6A
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c6:2c:db:1f:df:ea:37:ae:b9:e4:03:bf:8d:96:3a:15:9f:
8b:7c:b6:97:f3:b7:08:34:57:ea:7c:de:a0:d2:83:b7:bd:d7:
35:10:40:cb:6e:4a:34:83:c8:15:74:ce:06:a3:14:15:a0:14:
91:5a:ac:59:f3:89:7c:ad:ef:70:45:08:ca:09:07:d5:5b:ae:
de:7a:08:0c:f0:e2:92:9a:f8:38:99:91:09:92:81:90:39:86:
1c:77:e6:9d:bc:b4:02:83:b0:e0:21:a7:40:41:20:0c:3d:5a:
aa:32:dd:4b:d8:84:e7:46:e3:8a:87:fd:46:bf:82:7f:24:41:
fb:1f:6f:97:20:2e:61:92:d2:cc:a5:c2:22:94:2e:aa:7d:66:
81:60:6d:76:99:9d:0f:2b:54:1e:0f:3e:97:89:8c:c0:b5:14:
31:34:e8:d4:b1:83:09:ca:51:8f:dc:23:be:bd:23:f3:39:3a:
7e:c6:9f:7c:46:8a:f1:c4:83:04:ca:db:64:98:48:98:bb:c3:
35:23:89:4f:33:68:f0:48:00:78:0a:4d:b9:bd:b7:ae:0e:27:
95:3c:14:eb:ec:11:06:45:38:7d:c1:f1:d4:f7:df:b6:04:17:
95:26:99:68:74:4e:0f:ec:04:e5:1a:41:96:0f:82:b6:45:df:
7a:b5:80:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/ddlAG4TPCzkttkwreCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1
MDhkNTcwHhcNMjUwNDE5MDMwMDQ5WhcNMjUwNDIwMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg5Yzg2NjQzYzhhNTg4MjRjMTVkMjkzMjQ2NjBkYjhiNjUyYjVhYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW2IPFw0yRY9iW8XQw9fb2vu0eXD
pd9L5eJ+TQf2OP8imdXZNu8hLN5DP4FjQVF05wITCgdIDMBogUsDQQpQJTUza94X
AIhEVuqjegqmVcl62e+19XPlZ/Zk9oECo4rhYIzcCQCehPLyg4M1j/Ud7KOMoeQd
rkNA0fe0veDQzECBNx1lOp72A19JGpefNYXH/v0EbFj5qnWFx5/8A9p0oODMvmP9
IXoGxOUulgl1ODwiXbrgC36BshjI0vkPWQd/ysPhZz8QBZpwcnFmb5dnSVkfQDPC
0yLJewereXb8zohkZRDJP9e44FYcO54PZD/P5yLuYA192MJPObo5pohx+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyGZDyKWIJMFdKTJGYNuLZStapqMB8GA1UdIwQY
MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt
ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx
LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsYs2x/f
6jeuueQDv42WOhWfi3y2l/O3CDRX6nzeoNKDt73XNRBAy25KNIPIFXTOBqMUFaAU
kVqsWfOJfK3vcEUIygkH1Vuu3noIDPDikpr4OJmRCZKBkDmGHHfmnby0AoOw4CGn
QEEgDD1aqjLdS9iE50bjiof9Rr+CfyRB+x9vlyAuYZLSzKXCIpQuqn1mgWBtdpmd
DytUHg8+l4mMwLUUMTTo1LGDCcpRj9wjvr0j8zk6fsaffEaK8cSDBMrbZJhImLvD
NSOJTzNo8EgAeApNub23rg4nlTwU6+wRBkU4fcHx1PfftgQXlSaZaHROD+wE5RpB
lg+CtkXferWARQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:08 2025 by rpki-client