Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: GujTdknlZdCJqvDMdWaV9hGgavwBqx7VpRUl7HP5ybU=
Subject key identifier: F6:5B:A8:E0:FA:90:14:5E:55:95:AC:BA:84:18:3C:FA:E5:2C:F3:4A
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01964368331BBCFA7501DD1B4034B2FFB608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 112C
Signing time: Thu 17 Apr 2025 11:00:24 +0000
Manifest this update: Thu 17 Apr 2025 11:00:24 +0000
Manifest next update: Fri 18 Apr 2025 11:00:24 +0000
Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: q1YgDXUbKyiJlIgx4fYCNbHTYpkgMuN79htcSgtvj+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:33:1b:bc:fa:75:01:dd:1b:40:34:b2:ff:b6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Apr 17 11:00:24 2025 GMT
Not After : Apr 18 11:00:24 2025 GMT
Subject: CN=f65ba8e0fa90145e5595acba84183cfae52cf34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:a2:4c:8d:89:8e:64:59:ea:87:92:ca:0b:
7d:40:3f:73:97:ad:eb:7c:31:99:7f:de:b1:78:71:
67:ff:87:6d:96:71:c0:c0:8f:78:ca:5f:1b:29:fc:
2c:dd:d8:5f:02:24:6b:92:d1:4d:00:70:c8:47:d8:
d5:04:c4:0c:08:d3:e4:d1:16:29:8f:88:76:c6:f6:
e7:5b:bb:ab:33:64:f4:bf:20:85:00:00:04:6e:2a:
b5:95:a2:56:82:61:fd:b5:53:ac:bf:b7:cf:e5:03:
ec:2b:f7:6f:d7:ba:ae:84:ed:05:a5:7f:24:1f:88:
e0:16:a9:8f:26:1f:47:be:3a:86:85:70:ed:b1:1c:
37:78:2c:62:c4:8b:b9:3b:30:80:26:08:9f:da:9f:
87:29:40:7a:a9:89:65:0c:ac:49:75:16:3a:ee:9e:
5e:30:13:72:da:5f:68:8d:df:57:1c:93:17:14:23:
67:6b:89:7f:d8:ac:4c:b0:b1:07:c8:46:e6:1c:f2:
c3:5f:03:cd:3f:5b:2f:be:d0:a5:44:a3:ac:df:ab:
b6:e3:b7:34:65:35:3b:25:0a:f6:ed:91:d7:1a:9b:
e0:c0:17:40:29:3c:ae:d0:c1:77:a7:94:6d:64:c8:
eb:df:15:7a:2e:d1:69:3d:33:b1:d1:0b:c3:19:63:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5B:A8:E0:FA:90:14:5E:55:95:AC:BA:84:18:3C:FA:E5:2C:F3:4A
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b3:2a:74:50:ec:d0:96:48:8d:ab:e4:51:4c:7c:03:88:b1:
00:46:03:e6:fe:b7:7c:6c:21:17:c7:2f:c9:cd:35:fd:11:08:
a2:7c:96:ee:5d:66:c3:88:6d:b1:b7:bc:59:3a:36:cd:63:58:
55:b9:75:88:02:69:97:54:b0:15:fa:44:24:88:2f:ba:b1:12:
ed:81:f1:df:57:ca:12:45:73:6e:f4:b0:e3:f8:68:47:78:61:
ba:c6:e2:aa:bd:ea:8d:4d:61:e0:11:6a:93:be:ae:86:3e:e9:
54:3b:16:54:0f:7e:c7:30:72:6c:e1:84:b7:58:3c:4e:02:dd:
ff:81:d0:c8:f4:b4:6b:0c:fa:3b:a7:a4:2c:8b:fb:91:43:a4:
d5:ac:19:d5:c5:3a:2c:47:06:c4:ee:3e:fb:b3:51:f6:e3:72:
cd:53:4e:30:40:64:02:7f:93:b0:e8:b0:0e:79:7f:3c:33:03:
a9:a1:55:65:5b:35:94:e6:91:f4:aa:67:cd:94:62:49:8a:24:
a6:70:48:62:a5:a2:42:f8:43:ca:10:af:11:ea:7b:89:2f:86:
73:ee:f7:8a:67:ec:64:d2:3f:9f:c9:34:45:8d:90:fe:ed:90:
7a:1e:12:e8:6b:f4:e2:02:3f:d6:dc:99:47:2c:8f:d5:e4:cd:
3b:f1:ad:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDaDMbvPp1Ad0bQDSy/7YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi
MDJhMzcwHhcNMjUwNDE3MTEwMDI0WhcNMjUwNDE4MTEwMDI0WjAzMTEwLwYDVQQD
EyhmNjViYThlMGZhOTAxNDVlNTU5NWFjYmE4NDE4M2NmYWU1MmNmMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQeiTI2JjmRZ6oeSygt9QD9zl63r
fDGZf96xeHFn/4dtlnHAwI94yl8bKfws3dhfAiRrktFNAHDIR9jVBMQMCNPk0RYp
j4h2xvbnW7urM2T0vyCFAAAEbiq1laJWgmH9tVOsv7fP5QPsK/dv17quhO0FpX8k
H4jgFqmPJh9HvjqGhXDtsRw3eCxixIu5OzCAJgif2p+HKUB6qYllDKxJdRY67p5e
MBNy2l9ojd9XHJMXFCNna4l/2KxMsLEHyEbmHPLDXwPNP1svvtClRKOs36u247c0
ZTU7JQr27ZHXGpvgwBdAKTyu0MF3p5RtZMjr3xV6LtFpPTOx0QvDGWPWDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZbqOD6kBReVZWsuoQYPPrlLPNKMB8GA1UdIwQY
MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt
YjVmMGQyMTA1M2Y4LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4
LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLMqdFDs
0JZIjavkUUx8A4ixAEYD5v63fGwhF8cvyc01/REIonyW7l1mw4htsbe8WTo2zWNY
Vbl1iAJpl1SwFfpEJIgvurES7YHx31fKEkVzbvSw4/hoR3hhusbiqr3qjU1h4BFq
k76uhj7pVDsWVA9+xzBybOGEt1g8TgLd/4HQyPS0awz6O6ekLIv7kUOk1awZ1cU6
LEcGxO4++7NR9uNyzVNOMEBkAn+TsOiwDnl/PDMDqaFVZVs1lOaR9KpnzZRiSYok
pnBIYqWiQvhDyhCvEep7iS+Gc+73imfsZNI/n8k0RY2Q/u2Qeh4S6Gv04gI/1tyZ
RyyP1eTNO/Gt7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:46:30 2025 by rpki-client