Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: VI53sYPGMEQJpZmTalAJQwYpJXu4OeoHUWMYM+Tt8xk=
Subject key identifier: 8D:E5:71:65:1C:50:49:C0:FD:60:B4:D7:A7:40:A3:A2:D9:BF:A1:FE
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 019644E8AD1CE23DB6ABBBDCF1FABF2E2475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1157
Signing time: Thu 17 Apr 2025 18:00:21 +0000
Manifest this update: Thu 17 Apr 2025 18:00:21 +0000
Manifest next update: Fri 18 Apr 2025 18:00:21 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: uU7IHrOUpUn+Q4RVumjhhqP74VgzK1Aigu9Apzn7kXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:ad:1c:e2:3d:b6:ab:bb:dc:f1:fa:bf:2e:24:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Apr 17 18:00:21 2025 GMT
Not After : Apr 18 18:00:21 2025 GMT
Subject: CN=8de571651c5049c0fd60b4d7a740a3a2d9bfa1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:61:ab:a3:3b:7d:86:c6:23:7b:17:d7:13:
18:87:78:16:a4:fc:d0:bd:a0:9f:6b:3b:ba:b5:5f:
83:18:35:b9:2f:14:92:c2:24:0c:06:9e:c0:d9:5b:
09:d1:cd:3b:36:83:fb:b6:f0:77:0a:dc:75:a4:81:
2f:96:92:d5:43:b6:cf:fb:0a:ef:e9:24:4f:0d:8a:
4c:98:5c:e8:22:1f:48:75:06:b1:8e:a7:f7:17:d0:
4d:1d:a8:95:4f:1a:da:41:40:4b:8b:67:41:d0:73:
f3:7c:70:41:a5:03:64:01:b6:21:dd:68:9a:2b:ee:
80:2e:8f:20:85:59:93:6d:af:d5:14:96:e6:c4:f4:
51:2a:56:cf:0e:08:19:13:7f:05:c2:ea:8a:b2:fe:
17:43:e8:72:e3:72:a6:09:e6:f4:ad:b0:2c:17:85:
6c:1b:e8:7b:da:c1:7f:ea:b3:c8:f5:9b:52:2f:63:
2d:a0:cf:a2:21:df:3f:3c:ef:8e:f4:12:3a:b6:82:
15:97:70:41:b9:32:a3:e9:76:23:a8:bf:5f:be:8a:
1b:d7:02:93:3b:38:1e:26:55:b2:33:df:84:4e:bf:
38:42:d5:b7:d1:f8:88:05:d1:04:d7:a4:04:d7:09:
02:4b:75:cf:9a:fc:66:9f:fe:d3:c4:8c:85:5f:6b:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:71:65:1C:50:49:C0:FD:60:B4:D7:A7:40:A3:A2:D9:BF:A1:FE
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:05:fa:ee:0f:1f:b2:aa:a5:4e:f6:89:7e:cd:24:37:97:
3b:c0:ec:d2:50:1d:db:62:9d:99:42:a9:5e:c7:39:37:64:e4:
13:2e:78:ab:ff:c5:97:9e:36:a8:5e:9e:d4:56:66:30:8f:d3:
0b:cd:93:0a:32:b1:9d:37:5b:d5:5d:5e:59:62:21:bc:e9:9f:
41:ad:61:0b:dc:b2:26:97:f0:93:d3:f1:56:db:4a:23:be:bf:
41:ea:fc:cb:25:8f:40:9b:ee:a5:2f:71:0e:68:03:95:e2:64:
2b:27:71:9c:db:43:3a:7c:58:64:58:f1:c5:3c:31:f4:7e:a0:
24:7c:e0:1d:ae:08:73:12:3b:d9:9c:bd:b2:59:2c:c2:5d:6d:
7b:b2:0c:af:88:d0:79:28:96:ae:53:58:33:40:5f:d5:81:5c:
7f:c0:d8:b6:13:c6:8e:83:cd:70:a0:6e:bb:50:97:3a:6c:e0:
27:96:2c:da:3a:55:89:fb:eb:94:56:80:f5:73:fc:ae:43:b7:
19:c1:15:89:01:6b:35:0b:03:ad:6c:bd:e2:76:e8:8d:05:9b:
c5:d7:da:2f:19:15:58:c5:29:68:cd:15:8f:58:18:4c:70:a0:
a4:74:fb:72:81:8b:a3:32:e5:41:12:9a:6c:8e:e5:39:78:07:
c8:f8:0d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6K0c4j22q7vc8fq/LiR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjUwNDE3MTgwMDIxWhcNMjUwNDE4MTgwMDIxWjAzMTEwLwYDVQQD
Eyg4ZGU1NzE2NTFjNTA0OWMwZmQ2MGI0ZDdhNzQwYTNhMmQ5YmZhMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUNhq6M7fYbGI3sX1xMYh3gWpPzQ
vaCfazu6tV+DGDW5LxSSwiQMBp7A2VsJ0c07NoP7tvB3Ctx1pIEvlpLVQ7bP+wrv
6SRPDYpMmFzoIh9IdQaxjqf3F9BNHaiVTxraQUBLi2dB0HPzfHBBpQNkAbYh3Wia
K+6ALo8ghVmTba/VFJbmxPRRKlbPDggZE38FwuqKsv4XQ+hy43KmCeb0rbAsF4Vs
G+h72sF/6rPI9ZtSL2MtoM+iId8/PO+O9BI6toIVl3BBuTKj6XYjqL9fvoob1wKT
OzgeJlWyM9+ETr84QtW30fiIBdEE16QE1wkCS3XPmvxmn/7TxIyFX2u44QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3lcWUcUEnA/WC016dAo6LZv6H+MB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzMF+u4P
H7KqpU72iX7NJDeXO8Ds0lAd22KdmUKpXsc5N2TkEy54q//Fl542qF6e1FZmMI/T
C82TCjKxnTdb1V1eWWIhvOmfQa1hC9yyJpfwk9PxVttKI76/Qer8yyWPQJvupS9x
DmgDleJkKydxnNtDOnxYZFjxxTwx9H6gJHzgHa4IcxI72Zy9slkswl1te7IMr4jQ
eSiWrlNYM0Bf1YFcf8DYthPGjoPNcKBuu1CXOmzgJ5Ys2jpVifvrlFaA9XP8rkO3
GcEViQFrNQsDrWy94nbojQWbxdfaLxkVWMUpaM0Vj1gYTHCgpHT7coGLozLlQRKa
bI7lOXgHyPgN+w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:38:43 2025 by rpki-client