Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: pxafc5XHAuoz9mk+7rUJm1h/GamKO9jDgAGPsN7NzFc=
Subject key identifier: F6:FB:A9:23:76:3B:9F:53:D4:71:7E:F8:18:E2:34:3F:81:3F:80:14
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 01964DB4C0049A72DEA553EF5C54310D67DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 08EA
Signing time: Sat 19 Apr 2025 11:00:13 +0000
Manifest this update: Sat 19 Apr 2025 11:00:13 +0000
Manifest next update: Sun 20 Apr 2025 11:00:13 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: wEYShRC611QuFgH262M4xBotUT0xpsbYw0RLbKkWrdk=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:c0:04:9a:72:de:a5:53:ef:5c:54:31:0d:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Apr 19 11:00:13 2025 GMT
Not After : Apr 20 11:00:13 2025 GMT
Subject: CN=f6fba923763b9f53d4717ef818e2343f813f8014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:7c:ac:1e:0e:eb:48:a0:53:67:84:55:84:
31:4d:b3:6a:12:38:c1:e4:6d:9a:79:6e:7b:52:c7:
5d:a8:65:74:c6:6c:97:01:b3:78:75:17:39:a0:67:
20:e2:d2:29:a1:ab:a4:5b:a6:38:98:e2:1a:98:6d:
63:89:ad:b6:28:0c:4b:62:fc:e5:29:ed:3b:79:46:
e6:23:18:a9:ce:e6:75:bd:bc:95:85:bc:9c:73:35:
cb:7e:70:f7:f4:1c:db:29:df:57:57:8f:37:93:78:
5b:db:a6:86:5e:74:6b:65:00:bb:cc:1f:0e:cd:56:
52:e2:fc:15:be:3e:44:2a:47:60:44:d1:40:c3:09:
79:a6:49:38:41:fc:7d:d0:6f:cf:cf:77:4f:d5:a0:
d1:01:2c:94:23:71:9b:3c:a9:3d:da:35:fb:68:e6:
73:e5:26:42:ac:fb:07:17:3e:7a:fc:59:f4:1f:6a:
c3:a1:fc:46:51:3c:32:da:09:ca:39:75:b3:7c:ff:
0b:39:db:92:f2:cf:33:3e:c5:97:70:04:3b:2e:60:
83:1e:ea:03:e7:4a:d3:64:3d:33:bd:ae:1b:77:09:
f2:9e:2b:9f:49:29:d9:53:f1:b3:40:26:8e:d8:3c:
de:ae:ac:c9:b1:b2:d6:46:7a:a1:1b:16:da:f9:78:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:A9:23:76:3B:9F:53:D4:71:7E:F8:18:E2:34:3F:81:3F:80:14
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:58:c9:3b:e2:c4:f3:e5:d6:76:88:72:3a:38:a5:24:53:
d8:74:7f:5a:1a:ca:a1:a1:0e:9e:cf:59:95:a8:85:a8:35:31:
0b:a5:88:e7:a3:c1:d4:2b:9d:23:2f:b1:1e:43:6a:bf:41:6b:
d7:95:8a:c6:43:4f:c0:54:17:dd:b5:92:7c:b2:fa:a3:de:9c:
e4:6b:e8:92:b1:4b:ac:61:e8:e2:f3:94:0a:a4:8c:7a:01:9d:
75:dd:d4:4b:d1:3f:32:eb:d4:7c:9c:4b:c5:1a:1c:d1:ae:1f:
89:40:45:2d:f3:fc:4c:e8:7a:cb:91:ba:3a:8d:11:91:66:a3:
74:3f:02:64:ad:ee:64:6b:5a:3f:f8:ab:02:b7:d4:7d:61:55:
72:81:74:4a:ac:06:6d:d2:00:37:21:9c:89:cd:d0:c4:a2:e2:
5f:56:23:93:dd:5e:06:d7:17:36:b7:43:81:f9:d4:de:8a:30:
1e:9a:e5:e0:0a:2d:e7:8f:33:eb:fd:98:b0:e7:75:aa:75:93:
06:bc:6b:40:37:c7:24:3c:d2:8d:45:7d:df:3e:6f:18:e2:5b:
39:fd:1c:5d:35:6a:13:a8:3d:9d:c0:a2:94:ea:3d:07:2c:57:
dc:26:6e:46:fa:d6:90:cb:34:39:3f:f4:6d:78:e2:24:d6:b6:
03:03:68:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtMAEmnLepVPvXFQxDWffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmY2Y1ZDI1YTM2NjFhM2U3MmQyNzI5NDU0ZjdmZjgwNGI0
M2JkYjkwHhcNMjUwNDE5MTEwMDEzWhcNMjUwNDIwMTEwMDEzWjAzMTEwLwYDVQQD
EyhmNmZiYTkyMzc2M2I5ZjUzZDQ3MTdlZjgxOGUyMzQzZjgxM2Y4MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYx8rB4O60igU2eEVYQxTbNqEjjB
5G2aeW57UsddqGV0xmyXAbN4dRc5oGcg4tIpoaukW6Y4mOIamG1jia22KAxLYvzl
Ke07eUbmIxipzuZ1vbyVhbycczXLfnD39BzbKd9XV483k3hb26aGXnRrZQC7zB8O
zVZS4vwVvj5EKkdgRNFAwwl5pkk4Qfx90G/Pz3dP1aDRASyUI3GbPKk92jX7aOZz
5SZCrPsHFz56/Fn0H2rDofxGUTwy2gnKOXWzfP8LOduS8s8zPsWXcAQ7LmCDHuoD
50rTZD0zva4bdwnyniufSSnZU/GzQCaO2DzerqzJsbLWRnqhGxba+Xi6LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb7qSN2O59T1HF++BjiND+BP4AUMB8GA1UdIwQY
MBaAFF/PXSWjZho+ctJylFT3/4BLQ725MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDg5ZEphTm1HajV5MG5LVVZQZl9nRXREdmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yNTFmNGEtODJkNy00NmE1LWExMzAt
MGE5YjA2ZTE2ZGRjLzEvWDg5ZEphTm1HajV5MG5LVVZQZl9nRXREdmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8yNTFmNGEtODJkNy00NmE1LWExMzAtMGE5YjA2ZTE2ZGRj
LzEvWDg5ZEphTm1HajV5MG5LVVZQZl9nRXREdmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9pYyTvi
xPPl1naIcjo4pSRT2HR/WhrKoaEOns9ZlaiFqDUxC6WI56PB1CudIy+xHkNqv0Fr
15WKxkNPwFQX3bWSfLL6o96c5GvokrFLrGHo4vOUCqSMegGddd3US9E/MuvUfJxL
xRoc0a4fiUBFLfP8TOh6y5G6Oo0RkWajdD8CZK3uZGtaP/irArfUfWFVcoF0SqwG
bdIANyGcic3QxKLiX1Yjk91eBtcXNrdDgfnU3oowHprl4Aot548z6/2YsOd1qnWT
BrxrQDfHJDzSjUV93z5vGOJbOf0cXTVqE6g9ncCilOo9ByxX3CZuRvrWkMs0OT/0
bXjiJNa2AwNoCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:20:52 2025 by rpki-client