Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier: 7Z1KsOjTz3g58mJeDbLPyqasNhWB00ysvbeMw9bA7go=
Subject key identifier: D7:32:ED:70:CB:BD:2E:B9:83:9E:B7:26:1D:F8:67:A2:3A:0A:33:11
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 019652A465D7D28B89EEDE6D2B700BA4E191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 10:00:27 +0000
Manifest this update: Sun 20 Apr 2025 10:00:27 +0000
Manifest next update: Mon 21 Apr 2025 10:00:27 +0000
Files and hashes: 1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=)
2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: LQILJWAqp/83MZ2K2gzpEOLIL0tJEIyMxPKNWoqe/0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:65:d7:d2:8b:89:ee:de:6d:2b:70:0b:a4:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Apr 20 10:00:27 2025 GMT
Not After : Apr 21 10:00:27 2025 GMT
Subject: CN=d732ed70cbbd2eb9839eb7261df867a23a0a3311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:1c:ae:40:40:a2:cc:fb:e6:3d:50:34:f6:
d8:af:87:a2:f6:78:25:a7:ee:dc:d0:60:d1:cd:17:
56:9e:2a:43:81:02:f0:ea:12:7f:01:b0:5c:93:a3:
29:13:5f:87:10:be:0e:1a:c9:8b:a6:59:e0:6d:94:
45:67:b3:0d:70:3f:0a:68:73:a7:9b:8f:5a:1c:35:
5f:89:e1:9e:13:37:e9:31:99:0e:1a:05:eb:db:d6:
7e:38:32:2a:80:46:9a:82:0f:d5:c9:64:4f:a9:ec:
08:8f:e2:8d:0a:a0:88:72:97:46:68:69:38:bc:f1:
55:69:49:af:17:7f:3a:d9:d4:3a:97:1f:44:03:36:
5a:bb:d9:8c:0d:fa:3f:9e:fc:8d:da:86:28:d6:a8:
57:16:09:d5:ee:76:50:5c:e0:20:27:51:e1:38:1a:
84:39:4d:04:68:58:b0:5c:6c:9f:30:0b:c5:cb:e2:
56:07:ca:48:50:b0:61:4b:b4:00:0d:26:e2:de:30:
92:09:4e:48:f3:18:64:af:cc:4a:6a:ef:ec:5a:0d:
2b:d1:ee:fa:69:1d:53:16:ba:4c:5c:b8:62:8e:f9:
7d:04:50:66:96:cf:c2:0a:84:cc:f9:d1:ca:0e:da:
5d:ac:2e:19:79:c6:ac:cd:cb:01:a5:78:87:a6:78:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:ED:70:CB:BD:2E:B9:83:9E:B7:26:1D:F8:67:A2:3A:0A:33:11
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:aa:03:a6:e3:24:b3:73:b4:52:f8:61:69:c3:17:96:fe:81:
b8:a9:c6:9f:24:c9:73:5e:fe:0c:58:a5:52:be:fc:3d:07:f6:
25:12:18:98:68:1e:2a:23:c7:e9:65:2c:e4:65:dd:fc:76:d9:
67:3d:55:cc:92:14:fb:3f:54:24:ad:98:ba:42:8d:bb:11:e8:
0d:fd:29:e3:41:a9:37:1e:63:6a:f1:07:a6:d5:a8:89:ac:85:
08:6e:33:2a:8e:3a:37:5e:cc:c7:c6:cf:00:ea:47:98:54:5b:
a6:fd:55:08:db:d7:93:93:60:c2:44:d0:c9:be:5f:e9:be:7e:
fc:b9:ec:99:50:ae:b7:69:18:cd:61:88:5d:58:39:35:47:58:
e3:d6:4f:f4:b2:73:50:32:ee:26:a3:99:90:34:fe:da:99:29:
47:de:0e:55:68:6a:4c:8e:91:d9:62:f0:e8:11:6f:f0:bd:84:
67:73:f1:82:4c:e5:6e:22:73:b0:20:69:30:cc:3f:72:f6:b0:
7c:dd:eb:75:5f:52:18:13:42:30:3e:f8:36:02:9e:53:aa:a3:
56:f8:18:e3:e8:cb:bd:12:02:9d:9c:f9:5f:a0:62:65:ee:e6:
1f:71:b7:f2:21:95:34:2f:17:49:46:5b:14:e6:6e:0b:2d:7e:
cf:2b:39:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpGXX0ouJ7t5tK3ALpOGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTdiMDUwNTUzYzhlZTllMDVhYjRjMzdmZDk3ZDI4MjEy
MTZiNDEwHhcNMjUwNDIwMTAwMDI3WhcNMjUwNDIxMTAwMDI3WjAzMTEwLwYDVQQD
EyhkNzMyZWQ3MGNiYmQyZWI5ODM5ZWI3MjYxZGY4NjdhMjNhMGEzMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc4crkBAosz75j1QNPbYr4ei9ngl
p+7c0GDRzRdWnipDgQLw6hJ/AbBck6MpE1+HEL4OGsmLplngbZRFZ7MNcD8KaHOn
m49aHDVfieGeEzfpMZkOGgXr29Z+ODIqgEaagg/VyWRPqewIj+KNCqCIcpdGaGk4
vPFVaUmvF3862dQ6lx9EAzZau9mMDfo/nvyN2oYo1qhXFgnV7nZQXOAgJ1HhOBqE
OU0EaFiwXGyfMAvFy+JWB8pIULBhS7QADSbi3jCSCU5I8xhkr8xKau/sWg0r0e76
aR1TFrpMXLhijvl9BFBmls/CCoTM+dHKDtpdrC4ZecaszcsBpXiHpniRnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcy7XDLvS65g563Jh34Z6I6CjMRMB8GA1UdIwQY
MBaAFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDct
ZjJjNmFjOTY4YzgwLzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDctZjJjNmFjOTY4Yzgw
LzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6oDpuMk
s3O0UvhhacMXlv6BuKnGnyTJc17+DFilUr78PQf2JRIYmGgeKiPH6WUs5GXd/HbZ
Zz1VzJIU+z9UJK2YukKNuxHoDf0p40GpNx5javEHptWoiayFCG4zKo46N17Mx8bP
AOpHmFRbpv1VCNvXk5NgwkTQyb5f6b5+/LnsmVCut2kYzWGIXVg5NUdY49ZP9LJz
UDLuJqOZkDT+2pkpR94OVWhqTI6R2WLw6BFv8L2EZ3PxgkzlbiJzsCBpMMw/cvaw
fN3rdV9SGBNCMD74NgKeU6qjVvgY4+jLvRICnZz5X6BiZe7mH3G38iGVNC8XSUZb
FOZuCy1+zys5SA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:41 2025 by rpki-client