Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: E3LWTIieCuJEQtznhE7Lrj4O1YjIzW2bezn+rReWUcM=
Subject key identifier: B2:00:DB:C1:4E:08:A1:CB:64:73:51:30:B6:5C:94:F9:62:56:0D:9B
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 019654C99086C34D54DB2FF8988AD3B2900D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:17 +0000
Manifest this update: Sun 20 Apr 2025 20:00:17 +0000
Manifest next update: Mon 21 Apr 2025 20:00:17 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: u0ZofGHf83G1qCaTrX4AmUjMgM43/v6X/ce8q+WYH+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:90:86:c3:4d:54:db:2f:f8:98:8a:d3:b2:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Apr 20 20:00:17 2025 GMT
Not After : Apr 21 20:00:17 2025 GMT
Subject: CN=b200dbc14e08a1cb64735130b65c94f962560d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:48:cb:45:b7:5a:71:0f:66:d0:88:20:e0:
75:37:00:85:4c:65:2f:51:37:3e:75:c4:6d:67:03:
fd:ee:68:d8:ed:66:79:88:6e:97:6e:f3:f8:6b:82:
75:5e:bc:2a:7e:ac:bc:53:0b:16:cb:8a:b1:e2:16:
c9:e2:8a:8d:b9:1e:a0:0f:df:5a:e5:dc:61:63:9f:
68:d3:16:8b:05:49:56:57:6e:3e:d4:c1:f7:73:44:
6c:17:08:a5:03:d4:5e:c7:cd:fc:b2:94:67:05:18:
16:66:0e:ef:25:e1:2d:86:c8:0b:0f:11:a8:3e:4d:
4f:3c:26:14:4f:cd:d4:fa:e2:b7:59:7c:d0:83:c8:
7e:87:33:c5:b4:34:3f:e1:09:74:71:24:d4:35:1c:
ec:d2:2e:41:6b:db:30:0a:ae:66:a3:28:09:ac:2a:
a1:27:1f:cf:86:b3:0d:27:83:ba:18:43:2e:62:a8:
7f:1d:16:70:13:c1:cf:0f:9c:a2:61:59:9e:35:9a:
67:c3:13:ad:0e:7e:4f:a5:58:8c:0e:85:a1:5b:04:
ae:1d:41:6e:80:be:b1:df:62:15:5f:e8:85:80:04:
46:8b:48:ea:ae:39:e3:24:21:62:b6:e5:50:c1:ba:
c9:05:c8:b4:7e:a8:6e:e9:31:b6:28:d9:20:99:65:
b5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:00:DB:C1:4E:08:A1:CB:64:73:51:30:B6:5C:94:F9:62:56:0D:9B
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:81:69:59:ac:3d:c5:87:da:d4:58:44:90:ea:f7:ec:2e:97:
40:68:58:83:b4:cc:de:24:a0:8c:be:33:b1:fa:9d:fa:82:89:
a7:f3:86:3f:0e:8c:34:59:86:e9:27:fa:07:ef:de:a1:2d:c1:
d0:be:71:bf:c4:1a:f7:a8:72:bf:12:a7:71:8b:b4:5f:91:d8:
a2:77:2e:cd:9b:3d:54:b8:37:ab:30:8c:06:6d:96:d9:c3:c3:
1c:42:81:50:5b:f0:fb:2d:43:08:19:93:f2:b2:55:dd:12:a7:
a7:53:c8:5e:22:57:d4:78:b5:14:1b:53:b3:ee:2c:f3:41:13:
25:8e:d8:d6:8e:7a:86:74:d3:1e:35:5f:2d:3f:16:71:06:6b:
f0:d6:82:09:51:45:fa:ba:1c:85:ee:10:f7:54:b2:93:0b:61:
74:b2:58:90:38:f6:81:6d:13:f8:b1:32:68:ac:97:f1:21:39:
e0:1a:a4:69:2b:20:18:42:14:dc:d0:e9:e5:c2:d6:01:0a:bf:
93:65:7a:3c:33:6c:78:f3:f7:23:c7:7a:b7:b6:45:1d:59:04:
88:69:a9:ca:93:29:1f:50:9d:15:13:45:29:86:eb:22:34:4e:
13:3d:73:3f:57:bf:9c:f1:18:31:cc:71:c9:c2:01:e4:58:92:
76:59:8f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUyZCGw01U2y/4mIrTspANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MTQ1NDY1ZjA2OTZhNzBkNWYwM2VlMWQ1ZGVjYWZkNDFk
YzYzODUwHhcNMjUwNDIwMjAwMDE3WhcNMjUwNDIxMjAwMDE3WjAzMTEwLwYDVQQD
EyhiMjAwZGJjMTRlMDhhMWNiNjQ3MzUxMzBiNjVjOTRmOTYyNTYwZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVtIy0W3WnEPZtCIIOB1NwCFTGUv
UTc+dcRtZwP97mjY7WZ5iG6XbvP4a4J1Xrwqfqy8UwsWy4qx4hbJ4oqNuR6gD99a
5dxhY59o0xaLBUlWV24+1MH3c0RsFwilA9Rex838spRnBRgWZg7vJeEthsgLDxGo
Pk1PPCYUT83U+uK3WXzQg8h+hzPFtDQ/4Ql0cSTUNRzs0i5Ba9swCq5moygJrCqh
Jx/PhrMNJ4O6GEMuYqh/HRZwE8HPD5yiYVmeNZpnwxOtDn5PpViMDoWhWwSuHUFu
gL6x32IVX+iFgARGi0jqrjnjJCFituVQwbrJBci0fqhu6TG2KNkgmWW1TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIA28FOCKHLZHNRMLZclPliVg2bMB8GA1UdIwQY
MBaAFMQUVGXwaWpw1fA+4dXeyv1B3GOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQt
NjVlOTk2MzEyY2JlLzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQtNjVlOTk2MzEyY2Jl
LzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoFpWaw9
xYfa1FhEkOr37C6XQGhYg7TM3iSgjL4zsfqd+oKJp/OGPw6MNFmG6Sf6B+/eoS3B
0L5xv8Qa96hyvxKncYu0X5HYoncuzZs9VLg3qzCMBm2W2cPDHEKBUFvw+y1DCBmT
8rJV3RKnp1PIXiJX1Hi1FBtTs+4s80ETJY7Y1o56hnTTHjVfLT8WcQZr8NaCCVFF
+roche4Q91SykwthdLJYkDj2gW0T+LEyaKyX8SE54BqkaSsgGEIU3NDp5cLWAQq/
k2V6PDNsePP3I8d6t7ZFHVkEiGmpypMpH1CdFRNFKYbrIjROEz1zP1e/nPEYMcxx
ycIB5FiSdlmPSw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:47:56 2025 by rpki-client