Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: 4bJ+oCLWHGGA87JYq4nyqr9RKDBteursjyaHGHxerp0=
Subject key identifier: 1A:BF:B5:BC:28:1B:E9:61:0B:82:99:CA:E9:0F:0E:C4:30:13:61:47
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 01962FE25D2FC513D0A581A57A07D7DADBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 093D
Signing time: Sun 13 Apr 2025 16:01:26 +0000
Manifest this update: Sun 13 Apr 2025 16:01:26 +0000
Manifest next update: Mon 14 Apr 2025 16:01:26 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: 9g568qr4iX0FNXM1Ei5owbtRm/2ctTngxHkh9+5oSfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:e2:5d:2f:c5:13:d0:a5:81:a5:7a:07:d7:da:db:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Apr 13 16:01:26 2025 GMT
Not After : Apr 14 16:01:26 2025 GMT
Subject: CN=1abfb5bc281be9610b8299cae90f0ec430136147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:97:16:04:c2:e0:ee:b5:c5:67:47:25:95:
b5:91:5d:a6:95:b2:d0:42:50:dc:d9:7b:74:f3:75:
f2:b6:86:f8:d9:da:45:13:b2:93:dd:01:e9:7e:90:
1d:02:fa:28:10:18:2e:d0:9b:b8:2d:0b:80:a9:64:
95:5d:c8:f5:4a:c1:73:fb:44:e3:20:fc:bf:75:9b:
9b:ad:5f:8f:c1:3d:07:d1:5f:01:98:48:66:eb:88:
e8:34:e1:77:44:db:c3:35:42:02:5e:f4:a5:64:76:
a5:71:ea:1b:9b:38:fd:ea:74:3c:16:23:45:90:f1:
5b:a8:c8:02:5d:5a:b8:b9:30:4c:62:b4:76:2d:69:
88:3d:df:f8:7a:cb:70:f1:e2:13:64:bc:94:f4:bb:
5f:e1:7c:b7:40:8b:48:f6:ba:6d:e6:ee:52:03:bb:
fe:ec:3e:80:62:20:58:6c:dd:df:79:46:71:da:09:
eb:3d:52:22:f1:4d:28:25:86:fc:d4:86:77:13:e1:
a2:f5:36:4d:8e:fa:68:ce:d0:e4:64:ee:eb:32:2c:
63:34:c1:76:4a:40:ec:0e:d8:32:4a:7d:cd:75:0b:
04:4b:fa:fd:68:77:07:c1:7e:20:c6:69:f0:c8:c5:
ac:84:17:ea:5d:8f:d4:23:cd:43:fa:7d:be:00:6d:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:B5:BC:28:1B:E9:61:0B:82:99:CA:E9:0F:0E:C4:30:13:61:47
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:a0:10:26:54:84:90:83:51:72:7c:6c:71:64:e7:af:69:
89:3c:71:d3:ca:de:b5:3e:d4:30:96:de:2f:73:f3:d9:94:7f:
4d:aa:48:2c:a0:b6:eb:4c:12:a4:78:24:e6:42:97:ea:80:70:
8c:eb:e4:00:df:6d:44:87:8b:d1:f2:eb:a4:bc:3b:54:ee:2c:
a1:ce:43:6e:1c:4b:ce:e4:3c:08:d8:8e:15:f1:62:4c:cb:0e:
83:23:52:4c:bc:8e:a6:a3:e4:b3:72:a2:a1:11:b1:a3:81:f4:
dc:1b:bc:0e:60:62:fb:cb:18:c7:75:4c:54:5d:48:bb:b3:b2:
40:79:e4:6d:75:f9:3a:9c:68:a7:a6:0a:85:50:47:b4:96:ec:
9b:c5:b5:90:c4:58:91:73:fc:e0:f5:84:a9:0b:03:31:5e:df:
ea:3e:17:4e:9c:55:50:f1:1a:37:41:3a:1b:00:3f:a7:47:c0:
e4:6e:8e:5f:e3:26:52:37:e9:c7:f2:90:bc:d1:27:fa:c9:51:
96:08:6c:4f:b4:a3:9d:08:e8:e3:6c:27:d3:c7:70:a9:1f:d9:
9b:90:ce:62:2c:b1:3f:31:ec:ad:ce:39:04:b5:85:20:b4:e0:
2d:01:03:2e:1d:90:d5:59:56:c6:a8:c8:d5:1c:27:e9:b1:44:
0c:b2:b6:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYv4l0vxRPQpYGlegfX2tuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi
M2VlYzcwHhcNMjUwNDEzMTYwMTI2WhcNMjUwNDE0MTYwMTI2WjAzMTEwLwYDVQQD
EygxYWJmYjViYzI4MWJlOTYxMGI4Mjk5Y2FlOTBmMGVjNDMwMTM2MTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjyXFgTC4O61xWdHJZW1kV2mlbLQ
QlDc2Xt083Xytob42dpFE7KT3QHpfpAdAvooEBgu0Ju4LQuAqWSVXcj1SsFz+0Tj
IPy/dZubrV+PwT0H0V8BmEhm64joNOF3RNvDNUICXvSlZHalceobmzj96nQ8FiNF
kPFbqMgCXVq4uTBMYrR2LWmIPd/4estw8eITZLyU9Ltf4Xy3QItI9rpt5u5SA7v+
7D6AYiBYbN3feUZx2gnrPVIi8U0oJYb81IZ3E+Gi9TZNjvpoztDkZO7rMixjNMF2
SkDsDtgySn3NdQsES/r9aHcHwX4gxmnwyMWshBfqXY/UI81D+n2+AG0xeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq/tbwoG+lhC4KZyukPDsQwE2FHMB8GA1UdIwQY
MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt
Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk
LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKegECZU
hJCDUXJ8bHFk569piTxx08retT7UMJbeL3Pz2ZR/TapILKC260wSpHgk5kKX6oBw
jOvkAN9tRIeL0fLrpLw7VO4soc5DbhxLzuQ8CNiOFfFiTMsOgyNSTLyOpqPks3Ki
oRGxo4H03Bu8DmBi+8sYx3VMVF1Iu7OyQHnkbXX5Opxop6YKhVBHtJbsm8W1kMRY
kXP84PWEqQsDMV7f6j4XTpxVUPEaN0E6GwA/p0fA5G6OX+MmUjfpx/KQvNEn+slR
lghsT7SjnQjo42wn08dwqR/Zm5DOYiyxPzHsrc45BLWFILTgLQEDLh2Q1VlWxqjI
1Rwn6bFEDLK2kw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:28:25 2025 by rpki-client