Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: A0RQkyNUHCV00TDeZpAKplBG7gw/ivX7wI560J0+ZWU=
Subject key identifier: CF:5C:F0:77:02:7C:8B:AF:93:0F:BD:7B:AA:42:7E:54:27:94:05:48
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019640679FF61397EF4FE2B47F80B184F38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 11E1
Signing time: Wed 16 Apr 2025 21:00:55 +0000
Manifest this update: Wed 16 Apr 2025 21:00:55 +0000
Manifest next update: Thu 17 Apr 2025 21:00:55 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: ifjSBm1+8wxbGm8uobV1xHEbH1eaz3Lk5otFgaLW2uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:9f:f6:13:97:ef:4f:e2:b4:7f:80:b1:84:f3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Apr 16 21:00:55 2025 GMT
Not After : Apr 17 21:00:55 2025 GMT
Subject: CN=cf5cf077027c8baf930fbd7baa427e5427940548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:ab:bf:a3:1a:eb:40:7a:53:ae:60:86:66:
91:0e:37:1f:eb:9a:03:0d:b0:9c:4b:ba:e7:fd:19:
96:26:9b:61:ae:8b:f8:55:9f:0d:7a:49:a5:46:fb:
93:27:2d:3e:30:01:68:a2:53:d6:6a:e1:52:5a:d0:
65:c2:96:68:7a:fc:48:8d:02:1c:bb:4d:d4:cc:3c:
5d:3b:47:a7:b8:47:c1:cf:05:88:29:35:13:56:67:
72:56:0b:e6:ce:b6:f5:e9:1a:69:8a:07:f0:93:ad:
54:05:32:9f:ad:99:f4:5f:f4:df:0d:ce:e2:50:78:
42:44:e8:c5:f6:4c:43:b0:2c:73:b5:12:ae:fa:d8:
f3:5b:1a:49:3e:e2:e4:b8:c5:8f:12:be:e2:71:ba:
6c:33:89:88:1f:1a:d6:23:b9:53:9e:7a:69:50:cd:
80:77:cc:23:a9:ac:a7:d3:50:06:a3:c0:ae:8d:b7:
39:dc:cf:b9:f4:3e:12:7e:cd:97:63:31:36:41:97:
2a:64:40:f8:5f:3d:92:7a:10:07:47:4d:73:1a:77:
0e:5c:71:b1:d8:ac:99:f9:4e:28:ea:da:94:ff:fa:
23:a4:1b:e2:c9:19:05:44:b0:ae:6d:45:74:74:a7:
33:95:d3:ba:87:ea:d7:a4:59:f9:25:2e:e0:97:fc:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5C:F0:77:02:7C:8B:AF:93:0F:BD:7B:AA:42:7E:54:27:94:05:48
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:14:73:40:3d:a7:81:58:ef:75:87:db:12:31:e1:91:dd:
95:c8:6d:75:10:0d:24:39:f9:c7:00:8a:25:72:74:52:a3:fc:
43:09:fd:5c:cb:08:5c:9c:cb:df:fb:a4:2c:33:f8:a3:cf:74:
a2:c4:01:58:1f:fd:3b:8d:24:ee:c5:50:9a:12:2b:ee:e3:21:
7b:ae:13:92:c4:f4:95:5b:88:e9:15:b7:fc:ad:0e:06:e1:d8:
66:d0:9e:34:7b:0c:59:a8:e0:3f:87:ff:d4:21:83:2d:97:b1:
44:c9:80:b3:e3:73:83:d2:f2:4f:4f:04:cd:52:52:9e:14:04:
8d:cc:b6:62:7c:8f:cd:2b:e3:5d:53:ec:f3:92:87:7a:17:df:
dc:8f:90:b1:35:ce:0f:5f:1f:8a:7e:ea:bb:9e:7f:01:2b:26:
02:fd:3b:be:23:0b:de:a4:68:f4:eb:64:43:30:15:a5:9c:aa:
2a:51:9c:39:a2:91:c3:66:c1:47:a8:d9:33:54:bd:58:c8:95:
9d:68:9c:a4:e2:e9:5e:64:e9:e3:be:6e:6b:b7:e5:ee:1f:d6:
9c:1f:8a:c7:69:4e:02:67:15:34:71:88:14:44:84:53:b5:70:
c1:3a:23:d8:92:2e:2d:4f:d0:aa:43:77:16:6c:f7:fb:e3:86:
a6:b6:36:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZ5/2E5fvT+K0f4CxhPOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm
NTc4YjIwHhcNMjUwNDE2MjEwMDU1WhcNMjUwNDE3MjEwMDU1WjAzMTEwLwYDVQQD
EyhjZjVjZjA3NzAyN2M4YmFmOTMwZmJkN2JhYTQyN2U1NDI3OTQwNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmWrv6Ma60B6U65ghmaRDjcf65oD
DbCcS7rn/RmWJpthrov4VZ8NekmlRvuTJy0+MAFoolPWauFSWtBlwpZoevxIjQIc
u03UzDxdO0enuEfBzwWIKTUTVmdyVgvmzrb16Rppigfwk61UBTKfrZn0X/TfDc7i
UHhCROjF9kxDsCxztRKu+tjzWxpJPuLkuMWPEr7icbpsM4mIHxrWI7lTnnppUM2A
d8wjqayn01AGo8Cujbc53M+59D4Sfs2XYzE2QZcqZED4Xz2SehAHR01zGncOXHGx
2KyZ+U4o6tqU//ojpBviyRkFRLCubUV0dKczldO6h+rXpFn5JS7gl/z6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9c8HcCfIuvkw+9e6pCflQnlAVIMB8GA1UdIwQY
MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt
NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3
LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV0Uc0A9
p4FY73WH2xIx4ZHdlchtdRANJDn5xwCKJXJ0UqP8Qwn9XMsIXJzL3/ukLDP4o890
osQBWB/9O40k7sVQmhIr7uMhe64TksT0lVuI6RW3/K0OBuHYZtCeNHsMWajgP4f/
1CGDLZexRMmAs+Nzg9LyT08EzVJSnhQEjcy2YnyPzSvjXVPs85KHehff3I+QsTXO
D18fin7qu55/ASsmAv07viML3qRo9OtkQzAVpZyqKlGcOaKRw2bBR6jZM1S9WMiV
nWicpOLpXmTp475ua7fl7h/WnB+Kx2lOAmcVNHGIFESEU7VwwToj2JIuLU/QqkN3
Fmz3++OGprY29Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:17:40 2025 by rpki-client