Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
File: xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft (raw, json)
Hash identifier: 10CeDkJc5bg03DZeR4QZtAp7oITx2+3/WToOwAW4qzw=
Subject key identifier: 47:FC:11:C8:42:9F:F4:24:1C:E5:0D:F0:84:2D:84:24:7F:C4:75:0C
Authority key identifier: C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
Certificate issuer: /CN=c49c88442ba97345bc0106559e6fa786944adca4
Certificate serial: 019653802D2AD2965F1B2A1B019DE1BA8E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
Manifest number: 0ACA
Signing time: Sun 20 Apr 2025 14:00:30 +0000
Manifest this update: Sun 20 Apr 2025 14:00:30 +0000
Manifest next update: Mon 21 Apr 2025 14:00:30 +0000
Files and hashes: 1: tSWx1lY4W5RWfIoEa9ZiLZAUrJw.roa (hash: BXE0UWACwtmo2QDwp5Gd5dEhuobHdzrduyzOxIVuE/M=)
2: xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl (hash: AL6c8adJxCnK6lM8sG3iGa7y/OqEry1wO+YSLE1blA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:2d:2a:d2:96:5f:1b:2a:1b:01:9d:e1:ba:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49c88442ba97345bc0106559e6fa786944adca4
Validity
Not Before: Apr 20 14:00:30 2025 GMT
Not After : Apr 21 14:00:30 2025 GMT
Subject: CN=47fc11c8429ff4241ce50df0842d84247fc4750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:9b:cf:cc:39:18:01:d3:75:4a:b1:f6:f3:
12:c3:4f:3a:00:52:5a:65:d1:30:82:a1:79:35:a8:
10:3e:82:d6:74:1e:0e:17:1f:67:5a:c8:de:b2:f5:
44:70:9e:db:d5:5c:4e:4c:08:99:85:33:3e:8f:3e:
27:b6:a5:e6:7d:f7:ab:d7:1d:2b:a9:7d:a2:b8:1d:
61:96:a7:6d:99:70:03:26:88:bb:ca:fd:d4:6f:d4:
53:98:fc:4c:21:df:58:12:59:0c:52:3e:99:d6:2b:
f1:8f:2c:c5:b5:71:07:99:4b:d6:85:b5:77:b2:9a:
d7:91:33:9c:96:ff:5e:48:c2:28:8f:d2:94:76:ec:
82:95:96:fe:0c:e6:98:c3:69:35:bd:c8:1d:1d:8a:
19:55:52:58:45:f1:3b:39:a6:2d:44:68:d2:2d:93:
37:0a:ff:f0:f6:df:96:89:dc:4f:7c:69:6d:5e:ec:
dc:ea:70:dd:51:ed:27:ac:3c:6c:24:ed:e8:7f:fd:
e7:59:22:95:59:7c:58:0b:03:a6:de:e1:ea:3b:ca:
ca:98:fd:71:f8:e2:c9:b3:ca:f5:af:0e:0f:71:31:
98:88:f1:93:d5:d4:d8:74:ff:0e:fe:67:ce:47:3f:
29:8e:1b:f9:44:32:49:c7:d9:28:35:e7:3b:18:c0:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:11:C8:42:9F:F4:24:1C:E5:0D:F0:84:2D:84:24:7F:C4:75:0C
X509v3 Authority Key Identifier:
keyid:C4:9C:88:44:2B:A9:73:45:BC:01:06:55:9E:6F:A7:86:94:4A:DC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJyIRCupc0W8AQZVnm-nhpRK3KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4f6187-bc67-4ac3-9c8d-a70f992a5529/1/xJyIRCupc0W8AQZVnm-nhpRK3KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6b:15:d1:5b:e4:31:70:bf:f9:50:ce:98:22:6e:72:cc:07:
7b:c3:c1:dc:c2:37:5f:89:06:cb:54:d3:9b:0e:4b:49:87:7a:
d7:3c:ef:78:19:13:d0:38:c8:0d:d0:8d:e1:7f:75:39:cb:0d:
1b:7d:5e:5b:05:70:e1:98:b0:e1:96:7e:57:69:97:3c:67:21:
6b:44:a6:82:e7:68:ec:3e:56:1a:ea:c4:f6:33:17:eb:d0:91:
0b:5e:a7:28:e7:cb:bc:72:61:55:1f:e2:35:94:53:55:9c:91:
99:cd:5c:e6:f6:ab:64:06:37:f8:11:85:ef:9c:53:2d:99:04:
d5:54:29:f4:1a:dc:4b:10:c4:ce:c3:aa:e0:29:07:e5:ec:85:
85:ee:5d:d1:a0:44:2c:4d:db:32:fb:76:3c:24:5a:98:23:73:
2a:4f:de:41:56:5e:0d:6c:72:fa:1e:c6:a4:23:77:0a:fc:f6:
48:42:42:fc:f2:53:85:a7:30:f1:81:60:1a:d1:22:03:9b:19:
21:0f:bf:aa:1e:38:76:40:db:e5:a9:45:8d:92:dd:fe:68:f2:
5c:39:70:0f:4a:df:67:7c:a9:ba:b6:e5:4d:74:07:83:f9:7b:
34:8c:92:e9:b8:cd:a3:56:dc:da:b6:98:23:9c:97:68:9b:8a:
1c:97:9d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTgC0q0pZfGyobAZ3huo6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWM4ODQ0MmJhOTczNDViYzAxMDY1NTllNmZhNzg2OTQ0
YWRjYTQwHhcNMjUwNDIwMTQwMDMwWhcNMjUwNDIxMTQwMDMwWjAzMTEwLwYDVQQD
Eyg0N2ZjMTFjODQyOWZmNDI0MWNlNTBkZjA4NDJkODQyNDdmYzQ3NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotObz8w5GAHTdUqx9vMSw086AFJa
ZdEwgqF5NagQPoLWdB4OFx9nWsjesvVEcJ7b1VxOTAiZhTM+jz4ntqXmffer1x0r
qX2iuB1hlqdtmXADJoi7yv3Ub9RTmPxMId9YElkMUj6Z1ivxjyzFtXEHmUvWhbV3
sprXkTOclv9eSMIoj9KUduyClZb+DOaYw2k1vcgdHYoZVVJYRfE7OaYtRGjSLZM3
Cv/w9t+WidxPfGltXuzc6nDdUe0nrDxsJO3of/3nWSKVWXxYCwOm3uHqO8rKmP1x
+OLJs8r1rw4PcTGYiPGT1dTYdP8O/mfORz8pjhv5RDJJx9koNec7GMAfFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf8EchCn/QkHOUN8IQthCR/xHUMMB8GA1UdIwQY
MBaAFMSciEQrqXNFvAEGVZ5vp4aUStykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQt
YTcwZjk5MmE1NTI5LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZjYxODctYmM2Ny00YWMzLTljOGQtYTcwZjk5MmE1NTI5
LzEveEp5SVJDdXBjMFc4QVFaVm5tLW5ocFJLM0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmsV0Vvk
MXC/+VDOmCJucswHe8PB3MI3X4kGy1TTmw5LSYd61zzveBkT0DjIDdCN4X91OcsN
G31eWwVw4Ziw4ZZ+V2mXPGcha0Smgudo7D5WGurE9jMX69CRC16nKOfLvHJhVR/i
NZRTVZyRmc1c5varZAY3+BGF75xTLZkE1VQp9BrcSxDEzsOq4CkH5eyFhe5d0aBE
LE3bMvt2PCRamCNzKk/eQVZeDWxy+h7GpCN3Cvz2SEJC/PJThacw8YFgGtEiA5sZ
IQ+/qh44dkDb5alFjZLd/mjyXDlwD0rfZ3ypurblTXQHg/l7NIyS6bjNo1bc2raY
I5yXaJuKHJedag==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:40:28 2025 by rpki-client