Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: lHzoW411BymMOp7TWi6FYKgk1udzyEdLK/37a2Au2NM=
Subject key identifier: 2C:A8:B3:E2:5B:62:75:20:1D:54:DA:9C:ED:9C:F0:45:A9:CC:B5:09
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019750B40958B1242810EF85AF74FB1F2A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 126E
Signing time: Sun 08 Jun 2025 18:01:05 +0000
Manifest this update: Sun 08 Jun 2025 18:01:05 +0000
Manifest next update: Mon 09 Jun 2025 18:01:05 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: syv6AJpBkbsBNIgss5BL6DOaW79oLGQY4uQFfgPsiEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:09:58:b1:24:28:10:ef:85:af:74:fb:1f:2a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Jun 8 18:01:05 2025 GMT
Not After : Jun 9 18:01:05 2025 GMT
Subject: CN=2ca8b3e25b6275201d54da9ced9cf045a9ccb509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:82:6a:dd:66:94:6f:a6:6f:05:a2:39:ff:
8a:d2:da:d2:3d:4e:b0:9f:58:06:cb:ae:ff:8d:5f:
bc:7d:3a:64:19:96:4d:8a:d4:1c:de:e6:af:88:3f:
7b:ec:14:87:3d:88:40:a3:3c:6d:ca:32:f5:fc:96:
cf:ba:75:f3:36:d9:85:6f:40:2d:4c:ed:22:8e:a5:
91:a2:72:b1:94:bc:cc:a6:c9:91:65:20:e0:f7:34:
fa:cf:c5:30:0d:ba:53:f4:c3:a9:0d:eb:a3:11:82:
f9:d5:3d:b0:66:6f:a6:96:50:d0:af:00:2a:7c:9e:
25:e7:d3:ff:32:b9:5e:94:27:9a:8b:6d:47:30:5b:
8e:ce:97:4a:5f:d1:96:0c:83:8c:f3:c8:c0:9c:e4:
03:8a:a1:06:15:63:b6:0b:b1:e5:d4:36:2a:ca:2e:
2b:3e:22:b8:70:14:81:c3:ab:fc:a1:30:21:3c:7c:
f9:44:34:6c:45:2b:54:a5:57:ec:74:cd:9a:8f:d0:
8b:48:96:99:2d:d1:cc:06:8d:cf:cd:37:c3:eb:4e:
8b:97:0f:1b:01:86:e8:70:59:a4:7c:db:30:9e:4b:
46:9e:2e:84:33:df:51:9c:81:aa:d9:5f:30:dc:2e:
fd:2a:d5:a4:ab:74:3d:00:b6:f3:8f:5f:f8:e0:d3:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:B3:E2:5B:62:75:20:1D:54:DA:9C:ED:9C:F0:45:A9:CC:B5:09
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:69:0b:22:f8:18:22:94:ff:74:6c:77:53:a0:0e:e5:67:
32:ce:6e:3c:c4:c3:2f:04:e9:a7:46:47:92:8b:94:87:53:45:
84:fb:a0:7a:ff:f4:40:d5:c6:84:a3:4c:3a:8d:60:7c:84:d6:
19:f0:c0:ec:f0:30:21:3b:5b:e9:36:ee:6a:e2:27:f4:8a:3e:
f0:b6:0b:53:83:92:93:f9:2d:c3:c2:37:b8:b6:5e:8b:c5:6c:
6e:86:1f:fe:bc:02:d8:e7:fb:d8:a5:79:6d:48:a7:29:cf:c7:
b6:09:40:16:09:6b:87:e9:02:e8:e1:f1:9b:a8:e1:7c:67:35:
e0:73:d5:8b:66:12:57:49:00:e2:21:3e:0d:78:27:5a:35:3e:
d8:68:bf:7c:46:af:52:44:61:10:c9:17:23:ef:bb:4a:b1:bf:
31:95:be:b2:d6:03:8b:e4:fd:fa:56:f8:b1:f0:7b:bd:13:42:
6f:00:8b:e3:86:3e:66:ad:59:40:a6:b4:64:f7:8c:70:00:ab:
39:6a:e7:05:75:c0:fe:ef:ea:c2:67:7b:94:6b:1f:01:b7:11:
b2:b5:23:43:85:6a:04:18:83:a7:58:99:8f:c6:b6:51:a2:f2:
ed:b9:a8:87:d5:fd:47:00:a3:5b:c2:0a:81:b2:3a:7c:fc:29:
3e:d6:7e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtAlYsSQoEO+Fr3T7HypZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Mjk3OGQ1MzI2OThmYjIwODQwZjk0MmIwMjQ3YzAxYzhm
NTc4YjIwHhcNMjUwNjA4MTgwMTA1WhcNMjUwNjA5MTgwMTA1WjAzMTEwLwYDVQQD
EygyY2E4YjNlMjViNjI3NTIwMWQ1NGRhOWNlZDljZjA0NWE5Y2NiNTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2qCat1mlG+mbwWiOf+K0trSPU6w
n1gGy67/jV+8fTpkGZZNitQc3uaviD977BSHPYhAozxtyjL1/JbPunXzNtmFb0At
TO0ijqWRonKxlLzMpsmRZSDg9zT6z8UwDbpT9MOpDeujEYL51T2wZm+mllDQrwAq
fJ4l59P/MrlelCeai21HMFuOzpdKX9GWDIOM88jAnOQDiqEGFWO2C7Hl1DYqyi4r
PiK4cBSBw6v8oTAhPHz5RDRsRStUpVfsdM2aj9CLSJaZLdHMBo3PzTfD606Llw8b
AYbocFmkfNswnktGni6EM99RnIGq2V8w3C79KtWkq3Q9ALbzj1/44NO7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyos+JbYnUgHVTanO2c8EWpzLUJMB8GA1UdIwQY
MBaAFMQpeNUyaY+yCED5QrAkfAHI9XiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGIt
NzdkNTE2YmU3YTg3LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZGQ3YWYtMmZmMC00NWRjLWIxNGItNzdkNTE2YmU3YTg3
LzEveENsNDFUSnBqN0lJUVBsQ3NDUjhBY2oxZUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGFpCyL4
GCKU/3Rsd1OgDuVnMs5uPMTDLwTpp0ZHkouUh1NFhPugev/0QNXGhKNMOo1gfITW
GfDA7PAwITtb6TbuauIn9Io+8LYLU4OSk/ktw8I3uLZei8VsboYf/rwC2Of72KV5
bUinKc/HtglAFglrh+kC6OHxm6jhfGc14HPVi2YSV0kA4iE+DXgnWjU+2Gi/fEav
UkRhEMkXI++7SrG/MZW+stYDi+T9+lb4sfB7vRNCbwCL44Y+Zq1ZQKa0ZPeMcACr
OWrnBXXA/u/qwmd7lGsfAbcRsrUjQ4VqBBiDp1iZj8a2UaLy7bmoh9X9RwCjW8IK
gbI6fPwpPtZ+vQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:40 2025 by rpki-client