Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: f4na7JBhacuwhMueAF5yuQJHmHzq/aHJrw7Jelr4GHg=
Subject key identifier: 80:40:67:81:51:5A:2A:4F:46:AD:3F:B4:1B:24:57:0B:4B:8F:29:81
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 0196507F0BAC949ECBEE5076449DCAE510D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 00:00:25 +0000
Manifest this update: Sun 20 Apr 2025 00:00:25 +0000
Manifest next update: Mon 21 Apr 2025 00:00:25 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: cf4IWERatx/JJd98/+J7/BkvOLQ2hDCCeW+UtJORTYo=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:0b:ac:94:9e:cb:ee:50:76:44:9d:ca:e5:10:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Apr 20 00:00:25 2025 GMT
Not After : Apr 21 00:00:25 2025 GMT
Subject: CN=80406781515a2a4f46ad3fb41b24570b4b8f2981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:95:bf:b7:04:05:6d:a7:c5:73:33:31:16:
ca:5f:f9:d3:ae:c4:13:ab:9d:c8:b5:ca:44:7c:6f:
de:f5:37:2e:87:03:4c:8b:79:11:cc:70:71:cd:94:
18:1f:7f:6d:18:99:84:5b:49:e0:3b:7e:73:6e:fd:
95:8e:fa:a3:db:46:15:ed:b4:91:b6:d9:ed:0e:24:
4c:f1:5d:41:19:48:71:eb:31:c1:6c:39:3a:c4:fd:
c5:b7:b7:66:59:fe:1a:35:ee:a1:d8:d4:1d:40:1d:
3d:6c:7f:b3:83:34:ee:de:00:d7:38:7d:f8:a3:4a:
98:e0:88:3b:a5:a8:bd:69:29:f2:68:49:0e:c5:8b:
1b:a1:ec:ef:08:49:c0:a5:5e:4a:1c:6a:4e:10:bb:
35:44:a2:3f:c1:0b:ba:44:10:17:a2:88:00:ba:a7:
2e:e5:fe:ff:43:95:11:ac:6f:19:e6:c3:1c:96:77:
d0:85:db:d0:2b:ab:51:0e:78:db:9f:25:19:1c:d6:
47:15:7b:7d:3a:e7:47:15:15:ae:f0:69:38:1c:83:
bc:e3:93:05:a8:31:1c:15:5f:50:78:56:e1:64:22:
3a:ff:c7:8b:01:03:34:50:dc:6c:3e:b6:a3:43:29:
ed:ca:ca:c9:a0:62:d0:cd:fd:a6:a8:a8:22:3f:ab:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:67:81:51:5A:2A:4F:46:AD:3F:B4:1B:24:57:0B:4B:8F:29:81
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:df:7d:ce:f4:68:5c:71:18:c9:67:e2:fd:81:fb:67:9c:
6c:ea:16:8b:d6:ee:fc:d1:23:ac:df:2d:a4:1c:4a:e3:11:c9:
50:2b:97:75:43:94:1a:f8:0b:91:c9:04:e5:aa:8b:fd:04:8b:
64:39:6b:5c:8d:c4:25:98:b8:e9:62:e8:86:ef:88:4d:b2:85:
7b:7e:aa:fb:87:44:b1:42:28:5d:14:1a:f4:e5:07:8a:18:33:
21:7b:d6:91:d2:23:9d:d1:13:e7:f3:67:db:f6:36:77:fd:95:
df:d1:c2:bb:93:91:ef:9a:3b:b6:e2:fe:69:be:48:33:74:b5:
02:f7:ef:bf:a9:23:61:af:e5:a2:2f:d8:fe:86:fb:ed:5f:f9:
e6:4e:75:70:16:a3:80:a0:05:cb:33:8a:4f:29:24:2d:72:14:
45:79:87:39:5f:65:50:76:c3:47:52:ae:44:59:50:f3:e3:c1:
a1:1a:45:91:62:f5:b5:9e:51:04:f8:fe:98:05:7b:b6:fd:45:
3e:da:72:26:b4:07:71:55:9b:a5:95:43:4a:35:77:2d:3a:ee:
36:2e:7f:d3:c6:0a:e9:a1:38:9a:b4:f2:6f:6a:35:d3:57:d4:
26:de:0a:fa:36:8f:bc:ec:9b:3f:54:6b:7d:32:63:6f:2e:d5:
b4:e8:20:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfwuslJ7L7lB2RJ3K5RDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjM2ExZDk3M2Y5YjMzOTFlOGFkYWNhYTY2NGQxYjIzZDc3
OGYwMDgwHhcNMjUwNDIwMDAwMDI1WhcNMjUwNDIxMDAwMDI1WjAzMTEwLwYDVQQD
Eyg4MDQwNjc4MTUxNWEyYTRmNDZhZDNmYjQxYjI0NTcwYjRiOGYyOTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg2Vv7cEBW2nxXMzMRbKX/nTrsQT
q53ItcpEfG/e9TcuhwNMi3kRzHBxzZQYH39tGJmEW0ngO35zbv2Vjvqj20YV7bSR
ttntDiRM8V1BGUhx6zHBbDk6xP3Ft7dmWf4aNe6h2NQdQB09bH+zgzTu3gDXOH34
o0qY4Ig7pai9aSnyaEkOxYsboezvCEnApV5KHGpOELs1RKI/wQu6RBAXoogAuqcu
5f7/Q5URrG8Z5sMclnfQhdvQK6tRDnjbnyUZHNZHFXt9OudHFRWu8Gk4HIO845MF
qDEcFV9QeFbhZCI6/8eLAQM0UNxsPrajQyntysrJoGLQzf2mqKgiP6t5DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBAZ4FRWipPRq0/tBskVwtLjymBMB8GA1UdIwQY
MBaAFFw6HZc/mzOR6K2sqmZNGyPXePAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEt
MTk0Y2M5OTAyYWJmLzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNWZjZjUtNzg2My00M2MxLWExYzEtMTk0Y2M5OTAyYWJm
LzEvWERvZGx6LWJNNUhvcmF5cVprMGJJOWQ0OEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoszffc70
aFxxGMln4v2B+2ecbOoWi9bu/NEjrN8tpBxK4xHJUCuXdUOUGvgLkckE5aqL/QSL
ZDlrXI3EJZi46WLohu+ITbKFe36q+4dEsUIoXRQa9OUHihgzIXvWkdIjndET5/Nn
2/Y2d/2V39HCu5OR75o7tuL+ab5IM3S1Avfvv6kjYa/loi/Y/ob77V/55k51cBaj
gKAFyzOKTykkLXIURXmHOV9lUHbDR1KuRFlQ8+PBoRpFkWL1tZ5RBPj+mAV7tv1F
PtpyJrQHcVWbpZVDSjV3LTruNi5/08YK6aE4mrTyb2o101fUJt4K+jaPvOybP1Rr
fTJjby7VtOggZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:08:58 2025 by rpki-client