Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: ZdOT8kyWoUfHpiGaJ5FzKA15AkDV79gb7c5fUFCgxig=
Subject key identifier: 00:9A:0F:B4:4E:43:B5:5A:B2:E9:35:16:94:B6:B1:40:B2:81:3C:86
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 01965CBA5C52B20131C62DFDE84AC6CF1164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 0E49
Signing time: Tue 22 Apr 2025 09:00:39 +0000
Manifest this update: Tue 22 Apr 2025 09:00:39 +0000
Manifest next update: Wed 23 Apr 2025 09:00:39 +0000
Files and hashes: 1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
2: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
3: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: jybPtwikmgAxX/69xzm4Vj0M59Bmz+Mxrr9qj1ezwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:5c:52:b2:01:31:c6:2d:fd:e8:4a:c6:cf:11:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Apr 22 09:00:39 2025 GMT
Not After : Apr 23 09:00:39 2025 GMT
Subject: CN=009a0fb44e43b55ab2e9351694b6b140b2813c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:1d:24:58:3b:ef:08:5c:4e:99:c6:b8:f6:
f8:4b:0c:26:a0:95:07:5d:b3:24:d3:06:bc:77:ab:
cd:7e:b6:42:9c:b8:b4:bd:22:a5:ee:c2:8a:8e:b8:
1c:b9:be:3b:0e:ab:41:4f:8e:84:c6:2e:fb:13:81:
d6:ef:2c:15:ea:57:02:ef:ce:eb:c4:d5:99:e5:e3:
16:e0:98:31:2d:c5:85:aa:82:81:4a:62:1e:7f:0e:
93:95:76:ec:78:fb:40:7e:90:68:ee:29:70:d6:00:
ea:45:02:1b:59:f7:66:8a:b1:3d:99:7e:d6:22:c2:
49:7e:0d:25:a6:b3:92:41:8b:cf:e0:2b:7a:52:e6:
b5:82:68:05:30:24:40:93:94:18:4e:a2:e4:f2:de:
bc:c7:ab:59:27:6a:c1:6d:8e:3f:6d:2b:0a:09:88:
24:50:ca:45:68:35:8d:a7:7f:b4:f1:4d:86:0c:0a:
3a:b8:21:98:2f:68:2b:cb:3d:25:67:07:5a:4f:fa:
9b:99:48:21:13:c2:26:e6:9e:d2:48:10:df:81:01:
1d:ca:93:db:4f:71:a8:db:23:6f:dc:4d:90:36:ab:
1c:e5:86:29:8f:4e:67:1c:53:f6:b6:34:72:df:3b:
6f:a7:44:0a:c2:da:0c:09:d0:2c:fa:80:2e:f6:16:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:0F:B4:4E:43:B5:5A:B2:E9:35:16:94:B6:B1:40:B2:81:3C:86
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:e0:5d:e4:d2:65:fc:8f:3b:31:ea:a1:ec:5d:ea:50:5a:
8f:6c:b9:f1:b2:cb:49:d9:b4:18:f0:e1:5c:a6:93:bc:f3:89:
a3:e8:86:e2:de:1e:0e:61:47:a9:79:62:b5:50:8d:36:7a:a3:
44:da:f9:d6:35:e0:af:a9:fa:3b:9f:26:c6:cf:51:7c:66:6d:
06:26:e9:b3:a6:af:c4:38:97:41:db:4d:eb:36:5f:b0:c5:c9:
a8:2c:e1:8c:f1:cb:e8:97:37:3b:14:30:cb:23:a0:45:90:11:
10:89:d2:02:c4:26:48:31:ae:73:08:36:3f:39:fb:4c:93:09:
02:da:5b:8e:f0:e7:72:36:6d:0d:cd:47:30:94:bf:15:bb:19:
97:3b:c3:77:5e:83:c6:4e:55:ab:ae:c5:de:98:19:13:5e:0a:
b2:26:60:d7:aa:53:f0:8b:3a:21:48:70:71:77:85:ac:97:52:
6c:ae:03:ff:9c:1e:6e:ee:a6:dc:85:0f:23:e7:70:1f:db:c9:
91:88:6b:c9:38:2b:56:74:b8:12:d5:1c:57:ad:a2:df:71:ce:
0c:f8:7c:f4:72:90:e7:55:67:fe:3c:a4:e3:20:51:e1:4a:db:
00:84:e7:a0:46:72:0c:f0:32:b1:fb:30:4c:f7:3b:65:9b:7c:
a7:38:f4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZculxSsgExxi396ErGzxFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjUwNDIyMDkwMDM5WhcNMjUwNDIzMDkwMDM5WjAzMTEwLwYDVQQD
EygwMDlhMGZiNDRlNDNiNTVhYjJlOTM1MTY5NGI2YjE0MGIyODEzYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNwdJFg77whcTpnGuPb4SwwmoJUH
XbMk0wa8d6vNfrZCnLi0vSKl7sKKjrgcub47DqtBT46Exi77E4HW7ywV6lcC787r
xNWZ5eMW4JgxLcWFqoKBSmIefw6TlXbsePtAfpBo7ilw1gDqRQIbWfdmirE9mX7W
IsJJfg0lprOSQYvP4Ct6Uua1gmgFMCRAk5QYTqLk8t68x6tZJ2rBbY4/bSsKCYgk
UMpFaDWNp3+08U2GDAo6uCGYL2gryz0lZwdaT/qbmUghE8Im5p7SSBDfgQEdypPb
T3Go2yNv3E2QNqsc5YYpj05nHFP2tjRy3ztvp0QKwtoMCdAs+oAu9hbCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACaD7ROQ7Vasuk1FpS2sUCygTyGMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkDgXeTS
ZfyPOzHqoexd6lBaj2y58bLLSdm0GPDhXKaTvPOJo+iG4t4eDmFHqXlitVCNNnqj
RNr51jXgr6n6O58mxs9RfGZtBibps6avxDiXQdtN6zZfsMXJqCzhjPHL6Jc3OxQw
yyOgRZAREInSAsQmSDGucwg2Pzn7TJMJAtpbjvDncjZtDc1HMJS/FbsZlzvDd16D
xk5Vq67F3pgZE14KsiZg16pT8Is6IUhwcXeFrJdSbK4D/5webu6m3IUPI+dwH9vJ
kYhryTgrVnS4EtUcV62i33HODPh89HKQ51Vn/jyk4yBR4UrbAITnoEZyDPAysfsw
TPc7ZZt8pzj0Ag==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:54 2025 by rpki-client