Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: tmm10Cn6UH7OLhRUTEQCDD9Oxjmf/nxpQJXUJnjlWP0=
Subject key identifier: AB:9A:B7:CF:F0:24:5C:DD:98:41:1F:41:28:5A:40:7B:CC:78:70:84
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 0194C3F60F8F84C35726B168D7B6505F49E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 49
Signing time: Sun 02 Feb 2025 00:01:10 +0000
Manifest this update: Sun 02 Feb 2025 00:01:10 +0000
Manifest next update: Mon 03 Feb 2025 00:01:10 +0000
Files and hashes: 1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: I2GUqbE8oprSZl32YiRBVMqOuNlT/Ymz4TPF2OozfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:0f:8f:84:c3:57:26:b1:68:d7:b6:50:5f:49:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Feb 2 00:01:10 2025 GMT
Not After : Feb 3 00:01:10 2025 GMT
Subject: CN=ab9ab7cff0245cdd98411f41285a407bcc787084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:82:fc:7f:6e:c0:2d:de:10:8f:97:43:bc:
82:bf:ed:2e:80:be:5c:bc:4e:03:c1:40:b7:0a:12:
26:06:91:d6:e6:8f:b9:7b:1b:a6:60:05:86:22:71:
9c:5d:8d:5f:11:f8:f6:70:1c:2b:99:de:27:62:c5:
f3:f1:cf:6f:ff:04:1b:54:28:40:f1:ee:b3:bd:e2:
26:57:21:26:1b:25:ad:d7:57:77:24:3a:a2:db:73:
35:fd:c2:14:13:be:ce:95:f2:7f:5e:c2:95:73:45:
e5:58:44:09:b2:32:b7:f3:80:55:9c:54:11:4f:86:
fe:3f:a8:37:5c:57:31:d5:69:74:1d:9e:df:f4:c5:
5c:e2:d8:f0:95:5e:3d:49:68:ba:f6:84:f9:a9:ef:
26:79:dd:ef:c4:b0:39:a7:3a:67:96:62:63:60:95:
4c:37:6e:74:6c:56:11:1b:bd:a6:0b:04:0f:1b:2c:
ef:c2:d8:ae:e4:3f:b6:f8:e6:9b:80:18:c4:dc:96:
83:fb:93:25:b1:fe:68:f6:96:46:f4:5f:05:01:d5:
80:29:b3:f2:a6:2a:02:83:6a:c3:1b:a2:1d:c2:d2:
e3:81:ba:2a:b0:7f:d3:32:9f:79:28:5a:2d:94:ba:
80:37:1c:af:2e:a2:2c:37:19:e2:8a:9b:c9:ad:ac:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:B7:CF:F0:24:5C:DD:98:41:1F:41:28:5A:40:7B:CC:78:70:84
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:14:e6:d9:ba:73:e0:1a:58:7d:f0:69:b3:02:ce:e7:b7:
04:d8:f6:5e:a4:06:c3:eb:bb:a8:1c:c4:67:e4:fb:f1:57:ea:
fe:65:77:ce:6d:11:7f:2a:05:81:e9:8c:b5:d2:e9:25:03:b9:
f5:39:cb:46:52:c2:e6:33:10:79:e2:0f:55:c6:2b:95:e4:a5:
fe:96:62:b3:1c:41:e3:80:e7:83:c9:b4:43:8e:3a:dd:55:9d:
5f:fc:58:2d:ed:ee:9e:5f:96:91:82:fb:50:7f:30:11:e3:fb:
ea:2c:eb:14:48:e4:ed:d3:6d:f6:f1:05:b3:7e:da:3f:ea:a8:
70:c7:6a:60:b6:a1:e2:31:a7:09:42:ff:4d:b5:1e:84:ba:91:
5d:9f:1a:44:97:53:e7:5a:0a:c5:a0:63:82:24:a2:ac:c2:46:
b3:eb:c1:13:fa:cb:ff:66:bd:1c:1f:7e:1a:27:08:df:60:ca:
af:d9:62:63:5d:6b:a8:d3:b2:96:b7:c7:c9:6f:9c:fb:64:06:
1a:52:d5:bf:8c:a4:6e:de:07:53:5e:46:dc:0c:e5:ee:d1:01:
1c:4a:07:61:4c:38:3c:54:53:89:fb:63:02:d1:41:b5:ee:33:
78:04:47:9a:7e:24:f2:1a:2f:67:b1:72:24:83:59:f5:d8:67:
f7:24:4b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9g+PhMNXJrFo17ZQX0nhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTYxM2Q1OTk5ZjM2MzI5ODVlZDg5YTAyZWZhYWJkMTg5
MGJhMDkwHhcNMjUwMjAyMDAwMTEwWhcNMjUwMjAzMDAwMTEwWjAzMTEwLwYDVQQD
EyhhYjlhYjdjZmYwMjQ1Y2RkOTg0MTFmNDEyODVhNDA3YmNjNzg3MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysaC/H9uwC3eEI+XQ7yCv+0ugL5c
vE4DwUC3ChImBpHW5o+5exumYAWGInGcXY1fEfj2cBwrmd4nYsXz8c9v/wQbVChA
8e6zveImVyEmGyWt11d3JDqi23M1/cIUE77OlfJ/XsKVc0XlWEQJsjK384BVnFQR
T4b+P6g3XFcx1Wl0HZ7f9MVc4tjwlV49SWi69oT5qe8med3vxLA5pzpnlmJjYJVM
N250bFYRG72mCwQPGyzvwtiu5D+2+OabgBjE3JaD+5Mlsf5o9pZG9F8FAdWAKbPy
pioCg2rDG6IdwtLjgboqsH/TMp95KFotlLqANxyvLqIsNxniipvJray8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuat8/wJFzdmEEfQShaQHvMeHCEMB8GA1UdIwQY
MBaAFMZWE9WZnzYymF7YmgLvqr0YkLoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2Ut
NjUwOTkyZjJhMTc0LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZDhhYWMtZDM5OC00M2FiLTljM2UtNjUwOTkyZjJhMTc0
LzEveGxZVDFabWZOaktZWHRpYUF1LXF2UmlRdWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEgU5tm6
c+AaWH3wabMCzue3BNj2XqQGw+u7qBzEZ+T78Vfq/mV3zm0RfyoFgemMtdLpJQO5
9TnLRlLC5jMQeeIPVcYrleSl/pZisxxB44Dng8m0Q4463VWdX/xYLe3unl+WkYL7
UH8wEeP76izrFEjk7dNt9vEFs37aP+qocMdqYLah4jGnCUL/TbUehLqRXZ8aRJdT
51oKxaBjgiSirMJGs+vBE/rL/2a9HB9+GicI32DKr9liY11rqNOylrfHyW+c+2QG
GlLVv4ykbt4HU15G3Azl7tEBHEoHYUw4PFRTiftjAtFBte4zeARHmn4k8hovZ7Fy
JINZ9dhn9yRLhw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:50 2025 by rpki-client