Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
File: xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json)
Hash identifier: rF7KgB5kQow/yAwUFjzQT175tgaQam1EkHEq5m3E9Qk=
Subject key identifier: 5D:9B:D6:CD:A1:3A:09:E7:97:94:6B:E8:03:EC:F2:0B:F9:7D:2E:FA
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial: 01964AEB505E1E9A9F74B005A7C4BB6E6873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
Manifest number: 0A3E
Signing time: Fri 18 Apr 2025 22:00:57 +0000
Manifest this update: Fri 18 Apr 2025 22:00:57 +0000
Manifest next update: Sat 19 Apr 2025 22:00:57 +0000
Files and hashes: 1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=)
2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: lCkBoFOgpfnfOBWGJpl/lEw1G45YBYUCNnIt1FaG0w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:50:5e:1e:9a:9f:74:b0:05:a7:c4:bb:6e:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Validity
Not Before: Apr 18 22:00:57 2025 GMT
Not After : Apr 19 22:00:57 2025 GMT
Subject: CN=5d9bd6cda13a09e797946be803ecf20bf97d2efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:95:0e:2a:20:3c:99:67:e0:8d:91:a5:13:
d1:e5:70:02:7e:6b:2d:de:a7:db:8b:a2:d9:a7:48:
f3:aa:0f:ad:82:58:32:7a:44:dd:49:99:73:e9:c3:
1d:4c:83:ae:86:5c:da:38:4f:73:12:99:cb:08:1e:
cb:e1:c4:d2:9d:ce:4c:1a:62:04:76:35:f0:12:9e:
a9:83:73:1d:79:cd:c4:68:0e:d9:17:fb:fc:22:3f:
6b:7c:6e:8e:9b:09:0b:52:0a:f7:a3:d1:de:b5:77:
a4:17:4a:36:30:e1:aa:d4:0f:b3:1d:f0:5d:94:0d:
e2:8a:39:a5:0b:ef:0c:8b:a1:8b:f6:c7:da:ed:63:
1e:46:81:d7:dd:9c:3d:db:93:1a:1b:c1:17:58:c6:
d7:e9:da:0b:6d:05:46:78:b8:3a:39:9e:6f:31:d5:
cd:88:d5:88:58:44:90:3e:b3:87:30:1b:bf:41:f8:
5a:9b:a0:c2:3d:0c:58:2f:88:eb:ca:34:61:8c:7c:
dc:b0:7b:e2:19:0b:27:e2:12:b1:64:62:2a:cb:09:
63:48:ef:2d:28:bb:11:05:63:a6:08:07:b1:cd:00:
fa:94:c1:66:bb:98:0a:63:6c:b2:f5:7f:8c:3e:29:
06:f6:5d:f2:70:7e:d2:b5:68:a5:9b:bc:c0:b4:a6:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:D6:CD:A1:3A:09:E7:97:94:6B:E8:03:EC:F2:0B:F9:7D:2E:FA
X509v3 Authority Key Identifier:
keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c7:46:c1:65:98:db:25:0c:31:b4:fb:e0:a6:20:3e:86:b7:
5b:3f:43:ec:bd:43:c8:46:f2:b3:15:72:9d:90:6a:ba:ed:19:
34:77:c8:2c:1a:7f:c4:e7:c9:7b:e6:f5:73:f0:40:27:c7:fe:
ad:b1:43:d0:c2:4e:8e:8c:e6:82:b6:8a:2c:75:54:9f:7d:55:
6d:70:f7:f0:60:13:b9:35:73:8e:3c:17:e0:ef:fb:19:ed:08:
ca:f1:9a:f0:20:ef:74:ee:dc:7b:6d:e0:7a:09:8d:be:ae:c9:
d4:c7:d3:f6:88:51:4f:f3:92:96:96:64:98:22:f4:d8:f1:63:
1c:91:5f:9a:9e:76:a7:7a:51:17:8c:d2:f8:29:43:c7:ee:54:
5c:a5:83:f5:cb:06:55:82:93:c0:e3:0e:73:bc:d9:ce:13:c4:
e5:04:10:6e:2c:01:d0:ff:a0:24:c4:b3:86:39:03:fe:56:16:
62:f6:54:48:f8:74:c1:ba:8a:cc:f7:7a:d2:a9:0e:7d:82:b9:
59:3d:9c:2c:ce:49:3a:84:e6:f8:60:a7:6c:7f:85:5a:54:e6:
f5:de:01:a3:e8:a3:33:71:d8:6c:6e:e3:7a:36:e9:b9:b2:70:
4c:60:00:b4:ed:c0:cd:86:13:bd:7b:39:de:dd:f8:89:b6:52:
19:b9:56:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK61BeHpqfdLAFp8S7bmhzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTMxNjI4NTY1ODIwYjNhNWEzZTFjZmM4Nzc3M2UyODNm
Yjk1YzEwHhcNMjUwNDE4MjIwMDU3WhcNMjUwNDE5MjIwMDU3WjAzMTEwLwYDVQQD
Eyg1ZDliZDZjZGExM2EwOWU3OTc5NDZiZTgwM2VjZjIwYmY5N2QyZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C+VDiogPJln4I2RpRPR5XACfmst
3qfbi6LZp0jzqg+tglgyekTdSZlz6cMdTIOuhlzaOE9zEpnLCB7L4cTSnc5MGmIE
djXwEp6pg3Mdec3EaA7ZF/v8Ij9rfG6OmwkLUgr3o9HetXekF0o2MOGq1A+zHfBd
lA3iijmlC+8Mi6GL9sfa7WMeRoHX3Zw925MaG8EXWMbX6doLbQVGeLg6OZ5vMdXN
iNWIWESQPrOHMBu/Qfham6DCPQxYL4jryjRhjHzcsHviGQsn4hKxZGIqywljSO8t
KLsRBWOmCAexzQD6lMFmu5gKY2yy9X+MPikG9l3ycH7StWilm7zAtKb2kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2b1s2hOgnnl5Rr6APs8gv5fS76MB8GA1UdIwQY
MBaAFMSjFihWWCCzpaPhz8h3c+KD+5XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEt
ZmIzMDdiYWRlYzRkLzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi83YTgwYWEtMDAwYS00NzE0LWEyZmEtZmIzMDdiYWRlYzRk
LzEveEtNV0tGWllJTE9sby1IUHlIZHo0b1A3bGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsdGwWWY
2yUMMbT74KYgPoa3Wz9D7L1DyEbysxVynZBquu0ZNHfILBp/xOfJe+b1c/BAJ8f+
rbFD0MJOjozmgraKLHVUn31VbXD38GATuTVzjjwX4O/7Ge0IyvGa8CDvdO7ce23g
egmNvq7J1MfT9ohRT/OSlpZkmCL02PFjHJFfmp52p3pRF4zS+ClDx+5UXKWD9csG
VYKTwOMOc7zZzhPE5QQQbiwB0P+gJMSzhjkD/lYWYvZUSPh0wbqKzPd60qkOfYK5
WT2cLM5JOoTm+GCnbH+FWlTm9d4Bo+ijM3HYbG7jejbpubJwTGAAtO3AzYYTvXs5
3t34ibZSGblWQw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:38:34 2025 by rpki-client