Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: nDXu7aRI+mHfSkI3o6Bz2SbTFtZAzTZfLMwDf0UJx8w=
Subject key identifier: 00:ED:0A:64:38:2D:3E:93:DB:DC:61:69:F6:A4:B0:2D:A0:72:8F:27
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 0194C4D11AB2AC4CFA7FA023DCA73F279366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 05F3
Signing time: Sun 02 Feb 2025 04:00:25 +0000
Manifest this update: Sun 02 Feb 2025 04:00:25 +0000
Manifest next update: Mon 03 Feb 2025 04:00:25 +0000
Files and hashes: 1: XArLVttX_wCBnKO2u8bWM8Vk3NU.roa (hash: BE5h5QGSzKEJoBRH8Cvw/x+Z7DD6UePHMldATT7VyV4=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: VtBrevXtYM6NRHR6DRVdkSbh32ErvWyNNh2nex+9gqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:1a:b2:ac:4c:fa:7f:a0:23:dc:a7:3f:27:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Feb 2 04:00:25 2025 GMT
Not After : Feb 3 04:00:25 2025 GMT
Subject: CN=00ed0a64382d3e93dbdc6169f6a4b02da0728f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:78:ad:65:a0:21:95:27:69:56:4e:c8:1a:
63:e6:95:31:61:3c:e1:24:0f:f9:52:b3:49:55:6e:
d6:8a:4d:6a:b0:df:4f:5d:fa:45:55:f2:d7:d4:ff:
b5:ea:e1:e2:4a:c4:3c:85:a7:c7:c5:d1:66:03:8c:
ee:a1:ab:cd:71:87:a7:83:45:87:dd:60:9a:d3:78:
62:02:ee:a8:57:3a:12:de:08:a9:ef:8c:de:d6:8d:
75:e9:63:4c:9e:f4:c3:c0:58:a4:3d:3e:32:35:6d:
dd:25:2e:20:26:73:7f:62:7a:b5:e8:bd:76:7a:d0:
e5:26:fa:7e:ef:98:a3:38:e9:c5:69:db:3e:84:c7:
91:c4:08:93:cb:3e:42:67:b5:80:58:1d:52:1a:a7:
28:89:34:a3:52:b1:90:96:94:12:23:b4:20:77:0b:
e7:bd:54:dc:a8:02:76:c1:03:c8:25:16:30:64:fb:
7e:43:77:2b:8e:a8:f8:d0:d8:6d:21:df:5d:09:d3:
58:59:72:2a:be:da:b7:6e:96:c7:2b:c9:9d:3b:87:
c6:78:59:06:a6:58:c8:59:94:52:6e:6b:c5:a8:7e:
b2:08:4f:09:0e:00:a9:3e:d1:77:3b:9a:3e:f7:f4:
89:8d:e4:9c:bf:1c:b1:e9:b4:b5:3a:c1:3d:1c:82:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:0A:64:38:2D:3E:93:DB:DC:61:69:F6:A4:B0:2D:A0:72:8F:27
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:73:02:5c:b8:64:72:df:eb:75:7a:53:6d:55:a3:6f:e9:20:
57:fe:64:4c:ba:a8:ea:34:a3:34:ca:63:6d:4f:74:e2:5b:2d:
9e:db:b8:ed:22:d1:c1:bb:34:fa:cf:82:b3:e0:8c:43:09:4a:
33:ec:b7:09:34:03:09:99:f1:90:31:ab:d3:be:9e:9a:6e:6c:
8d:14:96:26:cf:09:81:67:70:e2:ae:6d:26:cb:01:cd:33:b0:
16:11:48:43:37:79:7b:92:4f:59:c0:40:31:bc:b6:ba:49:1d:
35:f1:c1:b5:e8:7f:42:73:32:db:ab:37:f1:cc:95:e3:d8:fd:
ea:63:e4:76:a0:f6:68:3c:b6:41:8f:a0:f4:76:c8:31:e8:40:
4c:21:fc:83:3c:d9:50:d6:3f:f5:93:38:9e:e7:2d:58:14:ad:
4d:ad:fd:7d:4b:c8:6d:a4:4b:55:9b:06:64:2e:11:54:52:38:
dd:d7:7b:9e:13:de:f4:a3:f4:ec:23:9b:24:a5:87:73:f7:ad:
4c:e0:65:5b:92:b0:ad:6f:78:44:55:ca:4a:73:03:c2:d9:fc:
8e:75:f5:dc:e2:5a:e4:6a:fa:e3:18:75:95:9a:99:44:85:13:
24:b1:23:d6:63:64:b0:30:49:b0:ba:a0:48:54:0e:fe:e1:97:
a7:99:43:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0RqyrEz6f6Aj3Kc/J5NmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NGRkODgyODUyY2M0NTg2YjFmZWUzNGMwNTAxZDVkYjdk
NjBmMGIwHhcNMjUwMjAyMDQwMDI1WhcNMjUwMjAzMDQwMDI1WjAzMTEwLwYDVQQD
EygwMGVkMGE2NDM4MmQzZTkzZGJkYzYxNjlmNmE0YjAyZGEwNzI4ZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hR4rWWgIZUnaVZOyBpj5pUxYTzh
JA/5UrNJVW7Wik1qsN9PXfpFVfLX1P+16uHiSsQ8hafHxdFmA4zuoavNcYeng0WH
3WCa03hiAu6oVzoS3gip74ze1o116WNMnvTDwFikPT4yNW3dJS4gJnN/Ynq16L12
etDlJvp+75ijOOnFads+hMeRxAiTyz5CZ7WAWB1SGqcoiTSjUrGQlpQSI7Qgdwvn
vVTcqAJ2wQPIJRYwZPt+Q3crjqj40NhtId9dCdNYWXIqvtq3bpbHK8mdO4fGeFkG
pljIWZRSbmvFqH6yCE8JDgCpPtF3O5o+9/SJjeScvxyx6bS1OsE9HIL9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADtCmQ4LT6T29xhafaksC2gco8nMB8GA1UdIwQY
MBaAFMVN2IKFLMRYax/uNMBQHV231g8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWIt
NmZiZTI5MzE3MWZlLzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWItNmZiZTI5MzE3MWZl
LzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXMCXLhk
ct/rdXpTbVWjb+kgV/5kTLqo6jSjNMpjbU904lstntu47SLRwbs0+s+Cs+CMQwlK
M+y3CTQDCZnxkDGr076emm5sjRSWJs8JgWdw4q5tJssBzTOwFhFIQzd5e5JPWcBA
Mby2ukkdNfHBteh/QnMy26s38cyV49j96mPkdqD2aDy2QY+g9HbIMehATCH8gzzZ
UNY/9ZM4nuctWBStTa39fUvIbaRLVZsGZC4RVFI43dd7nhPe9KP07CObJKWHc/et
TOBlW5KwrW94RFXKSnMDwtn8jnX13OJa5Gr64xh1lZqZRIUTJLEj1mNksDBJsLqg
SFQO/uGXp5lDbg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:40 2025 by rpki-client