Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: Fz3jvL728qrxYFb13+t12SeR5nl7/rG1qYpc0Yyh2P0=
Subject key identifier: 0B:55:27:8E:D7:B2:DB:E3:DF:0C:23:2E:38:74:09:3B:4A:B7:BB:66
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 0196556EBC9FA255C01038323C6C5A78A74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 23:00:42 +0000
Manifest this update: Sun 20 Apr 2025 23:00:42 +0000
Manifest next update: Mon 21 Apr 2025 23:00:42 +0000
Files and hashes: 1: SxFF3ZURcZJdwD8_1vGA3WdUL0g.roa (hash: RJe7dDjJagaac3SQE7MDMwaxQL/mMnlWG9ytHOYHflM=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: U2Ghj9SOCtdx2FGqzIQTWIgEwalPluJcZYaGdbbT8Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:bc:9f:a2:55:c0:10:38:32:3c:6c:5a:78:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Apr 20 23:00:42 2025 GMT
Not After : Apr 21 23:00:42 2025 GMT
Subject: CN=0b55278ed7b2dbe3df0c232e3874093b4ab7bb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:20:96:e4:26:b2:a3:63:13:8d:23:ec:28:
d1:e7:62:d2:c1:8d:44:85:38:ad:89:39:e4:79:ae:
e0:16:97:44:8d:0c:ca:27:8d:10:4e:a3:84:cb:43:
7f:f4:c9:58:07:af:c4:4b:b7:20:3d:4c:70:4d:2f:
d1:76:7e:b1:58:ce:18:04:dc:c4:11:dc:8f:3f:cb:
70:80:c9:96:28:e7:8c:51:dd:fd:d2:e8:f6:ed:c7:
12:72:b5:c0:de:2f:4c:5a:49:e7:89:48:0c:51:01:
c2:7e:25:b6:9b:37:65:8d:c9:dc:af:d7:14:1a:96:
09:90:e5:94:27:94:27:5a:3b:74:72:5e:82:ee:7a:
d8:06:d4:93:d0:d7:87:57:2b:19:97:0f:4c:d5:53:
ac:28:05:87:c9:35:af:0c:71:92:09:dc:72:0e:30:
39:8d:58:76:a1:38:8e:d6:0e:b1:df:63:f3:ac:f5:
ca:19:c1:aa:1f:58:a2:d2:cc:04:43:33:e3:8d:eb:
6d:88:a5:64:c9:74:97:c2:7b:10:ec:26:ee:db:3a:
50:ef:99:31:ec:b3:50:41:27:d4:cc:a3:22:46:c8:
b6:bd:2e:da:53:99:46:78:0c:f0:c8:ce:16:bb:a2:
07:4e:5d:66:4a:52:ac:0d:1a:1b:cd:8e:65:8f:e7:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:27:8E:D7:B2:DB:E3:DF:0C:23:2E:38:74:09:3B:4A:B7:BB:66
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:71:c9:b4:3d:9a:07:66:ca:22:13:27:ec:25:57:e2:50:47:
85:f8:73:fe:80:fc:4e:f5:fd:c2:33:f9:0b:aa:b7:24:c9:a1:
94:de:b5:3f:be:de:4b:c0:e8:de:03:86:f4:99:2a:56:68:07:
d8:af:15:8f:82:c0:3a:68:d4:14:43:bb:87:6e:41:fc:3b:13:
68:8d:8e:b3:24:90:a1:04:02:82:18:5f:16:8a:a7:ed:9a:f4:
a1:d4:d2:91:63:bb:1d:69:72:fe:bd:00:11:6e:1e:ef:04:60:
81:d3:f6:4b:f3:84:d3:51:3a:12:c2:d1:7c:e9:6a:ea:68:2c:
e4:57:29:05:ac:62:fd:a0:36:bd:19:69:15:fb:97:45:b7:e6:
ef:48:93:3b:82:69:d8:eb:22:b2:c3:24:b1:03:e2:84:1a:91:
57:72:e4:06:f1:0c:99:cb:19:2c:6e:d3:e3:f6:9e:8c:78:95:
9c:38:50:8b:d4:66:32:65:7a:56:38:6c:20:35:6c:3f:ba:c0:
da:b7:5c:d5:ff:1c:b0:fe:7a:be:61:9c:f1:02:2f:f7:52:58:
03:18:4f:aa:5e:e0:6d:e3:5d:e0:fe:1d:83:9c:98:c4:9e:f0:
c0:99:48:8a:47:e9:70:c0:4b:a0:83:51:b8:78:a7:f2:84:51:
e7:f3:62:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbryfolXAEDgyPGxaeKdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDE4NjUzZmJmYjZmZDU3MzJkYzk0MGMxZDY1ZDc3YWIw
YmJmYTMwHhcNMjUwNDIwMjMwMDQyWhcNMjUwNDIxMjMwMDQyWjAzMTEwLwYDVQQD
EygwYjU1Mjc4ZWQ3YjJkYmUzZGYwYzIzMmUzODc0MDkzYjRhYjdiYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndsgluQmsqNjE40j7CjR52LSwY1E
hTitiTnkea7gFpdEjQzKJ40QTqOEy0N/9MlYB6/ES7cgPUxwTS/Rdn6xWM4YBNzE
EdyPP8twgMmWKOeMUd390uj27ccScrXA3i9MWknniUgMUQHCfiW2mzdljcncr9cU
GpYJkOWUJ5QnWjt0cl6C7nrYBtST0NeHVysZlw9M1VOsKAWHyTWvDHGSCdxyDjA5
jVh2oTiO1g6x32PzrPXKGcGqH1ii0swEQzPjjettiKVkyXSXwnsQ7Cbu2zpQ75kx
7LNQQSfUzKMiRsi2vS7aU5lGeAzwyM4Wu6IHTl1mSlKsDRobzY5lj+ehdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtVJ47Xstvj3wwjLjh0CTtKt7tmMB8GA1UdIwQY
MBaAFMbRhlP7+2/Vcy3JQMHWXXerC7+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2Yt
NWM2NTAyYmZmYTFmLzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2YtNWM2NTAyYmZmYTFm
LzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnHJtD2a
B2bKIhMn7CVX4lBHhfhz/oD8TvX9wjP5C6q3JMmhlN61P77eS8Do3gOG9JkqVmgH
2K8Vj4LAOmjUFEO7h25B/DsTaI2OsySQoQQCghhfFoqn7Zr0odTSkWO7HWly/r0A
EW4e7wRggdP2S/OE01E6EsLRfOlq6mgs5FcpBaxi/aA2vRlpFfuXRbfm70iTO4Jp
2OsissMksQPihBqRV3LkBvEMmcsZLG7T4/aejHiVnDhQi9RmMmV6VjhsIDVsP7rA
2rdc1f8csP56vmGc8QIv91JYAxhPql7gbeNd4P4dg5yYxJ7wwJlIikfpcMBLoINR
uHin8oRR5/NidQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:21 2025 by rpki-client