Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: coHNnhid6sflwTFMFuhbunTtBr/fc3pNXxncV/R20tc=
Subject key identifier: 35:FC:39:75:99:EE:61:83:AE:EF:1C:34:97:25:84:DA:0C:19:8F:AC
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 01958C60B74D9F3178C8BE730F3DA569E992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 22:01:43 +0000
Manifest this update: Wed 12 Mar 2025 22:01:43 +0000
Manifest next update: Thu 13 Mar 2025 22:01:43 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: M1DX6gg1rTSnsWUu+E0veMy2sHNGWaMYcvCXfijbjhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:b7:4d:9f:31:78:c8:be:73:0f:3d:a5:69:e9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Mar 12 22:01:43 2025 GMT
Not After : Mar 13 22:01:43 2025 GMT
Subject: CN=35fc397599ee6183aeef1c34972584da0c198fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:5b:66:a9:04:6b:df:76:05:26:71:40:56:
85:0e:e5:05:75:7a:c5:da:79:6b:af:9c:a0:f2:4b:
41:d8:bc:1d:dc:14:30:25:2f:4d:ba:7a:99:f6:41:
b4:9e:e7:88:13:3d:5c:ca:e9:2c:8f:a3:1a:cc:df:
0b:d9:cc:dc:f9:4e:06:b1:c3:bf:40:54:64:e0:71:
db:d3:62:12:60:05:52:8b:3a:d6:8f:f0:dc:04:9d:
43:f1:fc:be:a4:05:6a:38:74:12:10:8f:f2:26:08:
39:34:26:27:3f:83:18:85:55:c4:90:82:a2:dd:e5:
86:97:dd:5a:03:89:71:69:be:e4:92:90:88:ea:a4:
56:af:f7:63:29:a9:80:ba:7b:51:bc:36:5a:b8:ee:
7a:d9:f4:af:24:86:5c:75:b6:ae:ea:f8:d9:98:d5:
93:ce:b4:9c:88:66:45:09:be:c9:b1:ee:ec:56:17:
45:dc:b4:18:99:49:89:0d:20:09:00:58:7a:6c:ae:
a9:c5:75:12:1b:8d:da:8c:c7:e0:80:b1:0d:e2:07:
1e:00:c0:4d:32:cc:82:9b:3b:72:ce:19:b0:b2:a9:
fd:ef:01:13:7a:b4:71:44:0f:fd:8d:a5:c5:3f:3f:
5a:b8:0e:23:26:ae:cb:ef:dd:5f:06:24:91:85:94:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FC:39:75:99:EE:61:83:AE:EF:1C:34:97:25:84:DA:0C:19:8F:AC
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d4:17:de:8c:63:6d:4f:f6:33:03:08:f9:75:02:7a:a3:f6:
f1:3e:0d:ff:e1:70:fd:85:40:d4:ae:c7:bd:64:8c:f7:dc:6e:
f0:86:48:18:f7:02:02:7a:ca:1e:7e:2e:06:ad:7c:cb:e8:66:
89:cd:04:55:7b:59:f1:91:02:4b:03:f8:60:6e:1b:6f:5f:7e:
ad:55:21:b9:3a:b1:2e:6e:1e:4d:75:13:a9:e1:c1:27:23:71:
61:ea:0a:8d:6b:f2:f2:01:a1:9a:2b:0c:ef:e9:8f:2c:c5:6e:
fc:26:bc:cd:66:53:17:b8:43:08:02:e3:76:9d:da:e2:e1:60:
00:d3:a5:66:b2:92:d0:6d:21:eb:38:b2:60:ef:a2:a6:ec:5f:
b2:27:17:61:7c:84:f3:3e:38:7a:52:13:73:d8:6b:63:23:1b:
04:af:8f:e6:74:09:8e:ad:0b:7d:40:c1:64:3c:32:1c:2f:92:
a6:52:46:b3:6a:c6:a1:f4:e5:68:7a:9a:30:28:a9:e0:b3:83:
7f:d6:a0:c1:96:f5:a5:6e:7b:a8:d6:59:27:18:4e:45:89:bb:
fa:a5:e0:e4:8c:d6:28:da:70:98:0d:6c:90:5e:b2:66:d8:70:
6f:b1:3a:8f:1c:2c:84:d1:b6:e5:64:96:90:2f:6d:44:93:d1:
29:25:a7:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYLdNnzF4yL5zDz2laemSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4NDA2MTY3MTYwM2RkYzJhZThlZWE5Y2FkNTFlZTc1
YWFlYzYwHhcNMjUwMzEyMjIwMTQzWhcNMjUwMzEzMjIwMTQzWjAzMTEwLwYDVQQD
EygzNWZjMzk3NTk5ZWU2MTgzYWVlZjFjMzQ5NzI1ODRkYTBjMTk4ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXRbZqkEa992BSZxQFaFDuUFdXrF
2nlrr5yg8ktB2Lwd3BQwJS9NunqZ9kG0nueIEz1cyuksj6MazN8L2czc+U4GscO/
QFRk4HHb02ISYAVSizrWj/DcBJ1D8fy+pAVqOHQSEI/yJgg5NCYnP4MYhVXEkIKi
3eWGl91aA4lxab7kkpCI6qRWr/djKamAuntRvDZauO562fSvJIZcdbau6vjZmNWT
zrSciGZFCb7Jse7sVhdF3LQYmUmJDSAJAFh6bK6pxXUSG43ajMfggLEN4gceAMBN
MsyCmztyzhmwsqn97wETerRxRA/9jaXFPz9auA4jJq7L791fBiSRhZR+5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX8OXWZ7mGDru8cNJclhNoMGY+sMB8GA1UdIwQY
MBaAFMR6hAYWcWA93Cro7qnK1R7nWq7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2Yt
YjI5MWY5N2I3MDk2LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2YtYjI5MWY5N2I3MDk2
LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy9QX3oxj
bU/2MwMI+XUCeqP28T4N/+Fw/YVA1K7HvWSM99xu8IZIGPcCAnrKHn4uBq18y+hm
ic0EVXtZ8ZECSwP4YG4bb19+rVUhuTqxLm4eTXUTqeHBJyNxYeoKjWvy8gGhmisM
7+mPLMVu/Ca8zWZTF7hDCALjdp3a4uFgANOlZrKS0G0h6ziyYO+ipuxfsicXYXyE
8z44elITc9hrYyMbBK+P5nQJjq0LfUDBZDwyHC+SplJGs2rGofTlaHqaMCip4LOD
f9agwZb1pW57qNZZJxhORYm7+qXg5IzWKNpwmA1skF6yZthwb7E6jxwshNG25WSW
kC9tRJPRKSWnbQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:41 2025 by rpki-client