Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: 9nIMUGI5VrXthrKMzPHmZjJh0g0N6+sz+qgYN/mPrRg=
Subject key identifier: DE:5E:C9:82:7A:E1:55:BF:01:81:D9:DF:4F:09:6A:ED:77:AB:B6:1C
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019649A29D2DC02AB11E44CB88D84149BF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 16:01:55 +0000
Manifest this update: Fri 18 Apr 2025 16:01:55 +0000
Manifest next update: Sat 19 Apr 2025 16:01:55 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: CekTcROEjcZRup2hJpe+a2GM713aRg2qUqCHomO48i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:9d:2d:c0:2a:b1:1e:44:cb:88:d8:41:49:bf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Apr 18 16:01:55 2025 GMT
Not After : Apr 19 16:01:55 2025 GMT
Subject: CN=de5ec9827ae155bf0181d9df4f096aed77abb61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:c2:70:20:75:86:76:c5:be:d7:32:30:f8:
03:15:3a:a0:95:7f:c1:90:66:e6:37:08:83:6d:20:
82:8b:e5:b1:2a:47:98:ac:62:9e:5b:e1:3e:e0:84:
03:bb:9b:b1:a4:1b:a1:c2:2e:22:cd:79:82:8c:0b:
39:f9:49:c1:1f:29:ce:10:aa:48:1d:db:d3:31:47:
71:a3:2a:aa:10:3f:4a:38:e7:cc:b3:f8:20:7c:cf:
63:29:98:75:e1:d5:2c:c3:fc:59:f9:74:9c:a1:d1:
5f:dc:cb:29:26:47:5c:6f:bc:5e:50:43:be:51:d5:
df:ac:b9:3d:2a:3e:b2:77:a2:36:e9:79:32:2e:ae:
c7:7b:00:75:20:46:6d:7f:a2:96:00:10:fd:d9:af:
0d:56:06:3d:b6:a6:35:d4:8b:5f:83:07:dc:02:aa:
c3:df:d8:61:66:ca:53:f2:95:e3:d1:69:38:39:f2:
4a:02:22:fc:fb:7d:c7:db:b4:45:45:fd:20:40:44:
0f:82:ca:ad:ae:70:e1:e2:9e:02:d2:e8:e5:5a:3d:
fa:05:20:d4:03:65:48:02:20:2f:2e:ab:98:b9:83:
9b:c2:1f:d6:1f:74:3f:b7:62:cc:07:67:25:7e:03:
0b:08:1f:f8:e7:34:fa:2e:3b:4c:b5:a5:72:c6:f0:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5E:C9:82:7A:E1:55:BF:01:81:D9:DF:4F:09:6A:ED:77:AB:B6:1C
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ff:d7:a3:b9:8a:c5:19:ed:d8:43:20:85:29:76:3e:30:16:
8f:0d:fa:4e:ef:8f:b2:60:a0:c8:73:25:c0:c7:d3:0e:9b:ab:
36:32:b6:b6:fb:43:3c:cc:20:b6:90:a3:be:f3:e8:6e:64:67:
2d:18:c3:3f:0e:5a:76:bb:d8:d9:33:1f:fb:60:cc:08:a2:1d:
50:c8:98:28:2a:6f:10:43:5b:96:5e:ae:aa:8a:c1:e0:fc:e8:
b5:0b:d8:35:7d:c6:a0:c4:8f:d7:2a:a6:c5:30:d9:34:af:dc:
3b:84:fe:27:7c:21:05:3b:5d:3a:09:74:89:e0:2f:4a:27:f1:
83:8b:d5:51:de:49:58:3f:27:3c:a1:6f:25:3e:97:83:d6:31:
6f:81:a3:1e:a6:ad:6d:18:db:ca:e2:d2:8f:ff:11:dc:e0:a5:
45:6e:6c:09:04:05:77:55:6a:b9:f9:fc:6d:c2:00:f6:da:16:
78:09:3d:bb:a3:bd:f6:fc:58:4a:44:d4:be:92:5a:47:90:ac:
38:29:29:c0:84:1b:ba:7d:ed:6d:cc:dc:03:b1:bc:ad:f7:d1:
66:4b:dd:52:c0:5b:83:c0:02:8a:29:66:72:a5:24:65:f4:78:
46:f3:38:7d:ba:b5:a6:c6:72:9a:fc:ac:08:a6:32:94:7c:b9:
0f:38:7d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJop0twCqxHkTLiNhBSb+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4NDA2MTY3MTYwM2RkYzJhZThlZWE5Y2FkNTFlZTc1
YWFlYzYwHhcNMjUwNDE4MTYwMTU1WhcNMjUwNDE5MTYwMTU1WjAzMTEwLwYDVQQD
EyhkZTVlYzk4MjdhZTE1NWJmMDE4MWQ5ZGY0ZjA5NmFlZDc3YWJiNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysfCcCB1hnbFvtcyMPgDFTqglX/B
kGbmNwiDbSCCi+WxKkeYrGKeW+E+4IQDu5uxpBuhwi4izXmCjAs5+UnBHynOEKpI
HdvTMUdxoyqqED9KOOfMs/ggfM9jKZh14dUsw/xZ+XScodFf3MspJkdcb7xeUEO+
UdXfrLk9Kj6yd6I26XkyLq7HewB1IEZtf6KWABD92a8NVgY9tqY11ItfgwfcAqrD
39hhZspT8pXj0Wk4OfJKAiL8+33H27RFRf0gQEQPgsqtrnDh4p4C0ujlWj36BSDU
A2VIAiAvLquYuYObwh/WH3Q/t2LMB2clfgMLCB/45zT6LjtMtaVyxvAOIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5eyYJ64VW/AYHZ308Jau13q7YcMB8GA1UdIwQY
MBaAFMR6hAYWcWA93Cro7qnK1R7nWq7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2Yt
YjI5MWY5N2I3MDk2LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2YtYjI5MWY5N2I3MDk2
LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP/Xo7mK
xRnt2EMghSl2PjAWjw36Tu+PsmCgyHMlwMfTDpurNjK2tvtDPMwgtpCjvvPobmRn
LRjDPw5adrvY2TMf+2DMCKIdUMiYKCpvEENbll6uqorB4PzotQvYNX3GoMSP1yqm
xTDZNK/cO4T+J3whBTtdOgl0ieAvSifxg4vVUd5JWD8nPKFvJT6Xg9Yxb4GjHqat
bRjbyuLSj/8R3OClRW5sCQQFd1Vqufn8bcIA9toWeAk9u6O99vxYSkTUvpJaR5Cs
OCkpwIQbun3tbczcA7G8rffRZkvdUsBbg8ACiilmcqUkZfR4RvM4fbq1psZymvys
CKYylHy5Dzh9uw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:56:26 2025 by rpki-client