Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File: xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier: OYgcp8buGPPh+hFIULPIh/miZlGbQYznTSDCzf6jg68=
Subject key identifier: 0C:53:92:19:D9:EC:50:DB:75:65:9A:DE:CD:73:2F:06:0F:DF:34:61
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 019578A23B1231E585556841DC4011352EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number: FA
Signing time: Sun 09 Mar 2025 02:00:52 +0000
Manifest this update: Sun 09 Mar 2025 02:00:52 +0000
Manifest next update: Mon 10 Mar 2025 02:00:52 +0000
Files and hashes: 1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: SVMjhrC0r0oilydQm1TJh4KvnoHdZ1aIGh06fdoruFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:a2:3b:12:31:e5:85:55:68:41:dc:40:11:35:2e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Mar 9 02:00:52 2025 GMT
Not After : Mar 10 02:00:52 2025 GMT
Subject: CN=0c539219d9ec50db75659adecd732f060fdf3461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:88:b0:f1:80:50:0e:50:bf:dc:2f:b9:b5:
98:78:5d:53:9b:d9:52:21:90:f0:2c:27:8c:44:39:
a3:5f:88:a0:ff:05:95:a0:d2:8a:bf:bf:b5:55:00:
c5:b9:89:c0:69:3a:1d:50:4a:c4:b4:a8:75:c5:05:
cc:b2:2d:24:10:ee:6b:38:07:67:47:8b:2b:42:d7:
f0:6d:c5:81:26:46:fe:86:da:10:ef:e8:39:97:aa:
09:16:b7:a1:7d:8b:ef:38:69:3a:53:2f:f2:76:13:
7c:ed:6b:b0:c5:1e:d0:c7:e9:f5:47:46:c2:c3:18:
b8:32:4d:66:38:13:17:73:2b:31:d9:dc:06:3a:62:
5b:84:3c:68:cb:a6:22:d8:4a:6a:6e:89:2a:ab:75:
20:1a:16:a1:18:64:06:cf:b3:bd:46:17:d9:45:1d:
ed:a1:03:08:d4:61:02:d5:73:b6:98:8e:c1:60:82:
d9:1b:61:05:e7:47:c4:02:f6:1c:ed:4d:5c:f4:b6:
66:4a:2d:2e:f8:08:15:22:07:42:99:04:36:b4:0b:
6f:ea:b4:9a:a2:0f:95:d7:f4:de:1c:5c:50:18:d8:
e7:4a:e0:cf:3e:f1:c1:ac:ee:c5:52:00:12:d1:ce:
94:51:70:f3:a1:ae:22:86:29:8b:0a:bc:35:0d:fa:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:53:92:19:D9:EC:50:DB:75:65:9A:DE:CD:73:2F:06:0F:DF:34:61
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:91:90:dd:3b:0a:35:7e:26:9d:6e:63:f8:6a:a3:ba:ac:
42:a0:3d:32:77:16:a6:79:6d:3c:d3:14:1a:b5:20:c8:ce:1c:
d6:78:66:90:aa:5d:89:69:4e:f5:f5:e4:fb:52:f9:48:21:e3:
99:93:93:d1:a2:9a:52:71:34:2f:f5:8b:af:54:ca:9d:96:65:
38:b3:ab:c8:9c:f2:31:85:0b:37:4d:d1:ad:0b:95:d5:f2:9a:
70:2e:de:40:ed:f1:41:64:fc:e0:98:d2:c3:75:90:54:0f:fc:
50:e6:4c:12:c9:6d:c7:0a:75:88:29:71:02:7c:98:4d:51:fb:
1a:df:16:6b:4b:63:b1:96:29:f9:54:17:0b:fc:f8:0a:2e:3d:
f5:4e:51:e4:e8:98:fb:e6:f4:df:c1:54:7b:32:76:5e:14:d0:
19:b1:17:7b:7d:20:38:e5:3e:09:06:9f:67:8b:70:21:ed:d7:
af:1b:d2:c6:41:23:0b:15:d9:21:c8:84:80:26:77:3a:7f:95:
53:2c:6a:69:a9:23:cb:1e:92:9d:4d:b3:09:4c:27:8b:79:82:
07:b0:bc:81:08:c3:d9:dc:de:46:c7:ee:df:02:5a:7b:4e:11:
7c:10:da:30:d7:6e:08:40:f8:5e:fb:43:5c:42:82:59:89:bb:
ed:6e:e1:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV4ojsSMeWFVWhB3EARNS6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx
NDAzOGEwHhcNMjUwMzA5MDIwMDUyWhcNMjUwMzEwMDIwMDUyWjAzMTEwLwYDVQQD
EygwYzUzOTIxOWQ5ZWM1MGRiNzU2NTlhZGVjZDczMmYwNjBmZGYzNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL2IsPGAUA5Qv9wvubWYeF1Tm9lS
IZDwLCeMRDmjX4ig/wWVoNKKv7+1VQDFuYnAaTodUErEtKh1xQXMsi0kEO5rOAdn
R4srQtfwbcWBJkb+htoQ7+g5l6oJFrehfYvvOGk6Uy/ydhN87WuwxR7Qx+n1R0bC
wxi4Mk1mOBMXcysx2dwGOmJbhDxoy6Yi2Epqbokqq3UgGhahGGQGz7O9RhfZRR3t
oQMI1GEC1XO2mI7BYILZG2EF50fEAvYc7U1c9LZmSi0u+AgVIgdCmQQ2tAtv6rSa
og+V1/TeHFxQGNjnSuDPPvHBrO7FUgAS0c6UUXDzoa4ihimLCrw1DfpB7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxTkhnZ7FDbdWWa3s1zLwYP3zRhMB8GA1UdIwQY
MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt
MmE1ZTk4YWJkMWYzLzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz
LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOmRkN07
CjV+Jp1uY/hqo7qsQqA9MncWpnltPNMUGrUgyM4c1nhmkKpdiWlO9fXk+1L5SCHj
mZOT0aKaUnE0L/WLr1TKnZZlOLOryJzyMYULN03RrQuV1fKacC7eQO3xQWT84JjS
w3WQVA/8UOZMEsltxwp1iClxAnyYTVH7Gt8Wa0tjsZYp+VQXC/z4Ci499U5R5OiY
++b038FUezJ2XhTQGbEXe30gOOU+CQafZ4twIe3XrxvSxkEjCxXZIciEgCZ3On+V
Uyxqaakjyx6SnU2zCUwni3mCB7C8gQjD2dzeRsfu3wJae04RfBDaMNduCED4XvtD
XEKCWYm77W7hTA==
-----END CERTIFICATE-----
Generated at Sun Mar 9 07:31:27 2025 by rpki-client