Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: NLS9otEANR0jLonvsZYzLsi8Wxwe2+GZy9mpBUnOxA8=
Subject key identifier: 47:B8:CB:48:3A:1C:8F:AB:EC:80:45:F7:02:42:36:C9:CD:30:6B:BD
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 01965537FFC32F24E3BC6B281FFAC03486AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1502
Signing time: Sun 20 Apr 2025 22:00:55 +0000
Manifest this update: Sun 20 Apr 2025 22:00:55 +0000
Manifest next update: Mon 21 Apr 2025 22:00:55 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: A3RCtwPUphPXwT5sVSJLRe53z4XySSaUfHD96aUoyyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:ff:c3:2f:24:e3:bc:6b:28:1f:fa:c0:34:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Apr 20 22:00:55 2025 GMT
Not After : Apr 21 22:00:55 2025 GMT
Subject: CN=47b8cb483a1c8fabec8045f7024236c9cd306bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:e5:9f:8a:1f:db:cf:a5:f8:d2:1e:51:5e:
c9:e0:f9:94:ee:9e:15:31:87:56:58:40:f8:5e:d5:
d6:76:b8:ec:7b:69:30:3f:e2:5e:8f:f0:d4:e0:b2:
72:92:f0:74:26:6d:e3:89:38:2e:de:79:01:d7:2c:
0b:78:b9:bf:e7:ae:ff:e9:e5:1e:29:43:d6:02:4d:
bd:89:82:bf:61:45:29:f6:78:20:9e:c4:0b:04:fd:
03:5c:9d:1d:bc:46:d6:25:97:6e:91:50:9b:16:d2:
57:f4:ce:39:57:d4:cc:6f:f0:e4:54:b6:5f:a0:b0:
c4:d4:84:ea:e0:66:91:7e:e1:3a:05:e5:3f:04:4e:
7b:82:bc:fa:dc:fe:fe:61:0a:29:94:83:de:f5:03:
5a:c3:96:68:51:12:e6:06:68:be:95:e7:07:d1:e5:
0f:58:da:df:51:95:72:e8:65:69:52:99:8a:26:f5:
2a:11:a7:03:59:f4:47:20:f6:08:32:7c:90:e6:1f:
5b:3f:7c:96:40:28:b0:d7:ac:3a:b0:f5:b1:b1:d9:
07:9b:6c:8b:f2:dc:3c:07:ad:64:68:0c:fa:33:7b:
53:36:c4:a1:2e:05:34:85:61:11:76:7d:fb:7e:f2:
3c:60:a8:cc:4e:e6:9d:da:e8:35:e4:7c:ad:0a:2b:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:CB:48:3A:1C:8F:AB:EC:80:45:F7:02:42:36:C9:CD:30:6B:BD
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:0e:84:17:23:43:bc:c5:63:ca:0c:77:71:83:a4:70:a0:
3a:f9:af:e0:69:f1:4c:15:af:8c:f1:cc:05:15:eb:e5:c0:50:
85:5b:df:79:1c:47:50:12:39:7e:08:f1:92:e7:c7:73:b6:6e:
0b:a2:dd:f2:4e:06:33:fa:74:5d:72:3e:39:32:f3:3a:ed:05:
14:d2:49:d6:b0:2b:20:29:83:67:09:b2:cd:0a:60:4c:29:d3:
73:35:f3:16:b4:e2:91:2e:fb:74:65:55:45:46:31:3b:8a:02:
f9:fa:9f:8a:99:32:c3:36:83:a6:d1:68:ec:70:e5:df:df:09:
2d:24:16:18:0e:84:03:81:c2:fb:5c:e3:64:76:27:ed:5e:38:
c0:a6:51:96:67:b3:6c:ac:d4:2c:da:0b:66:1c:2b:5f:34:17:
2e:55:2d:cf:64:ed:7f:70:25:37:1e:f3:af:87:d4:ef:32:90:
2f:40:22:1d:5f:a5:f7:dd:c7:f1:6b:d8:5b:e3:0e:59:a5:e7:
86:58:7b:65:de:8a:39:a9:78:27:87:43:e5:3f:28:27:70:fe:
f7:43:08:4b:ce:cc:98:81:d2:5b:1f:f2:8b:33:4d:78:58:ac:
05:7e:f9:ec:b3:30:1a:d0:a3:c6:2c:3e:f5:5a:f2:e8:da:41:
f4:03:f2:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN//DLyTjvGsoH/rANIatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjUwNDIwMjIwMDU1WhcNMjUwNDIxMjIwMDU1WjAzMTEwLwYDVQQD
Eyg0N2I4Y2I0ODNhMWM4ZmFiZWM4MDQ1ZjcwMjQyMzZjOWNkMzA2YmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL3ln4of28+l+NIeUV7J4PmU7p4V
MYdWWED4XtXWdrjse2kwP+Jej/DU4LJykvB0Jm3jiTgu3nkB1ywLeLm/567/6eUe
KUPWAk29iYK/YUUp9nggnsQLBP0DXJ0dvEbWJZdukVCbFtJX9M45V9TMb/DkVLZf
oLDE1ITq4GaRfuE6BeU/BE57grz63P7+YQoplIPe9QNaw5ZoURLmBmi+lecH0eUP
WNrfUZVy6GVpUpmKJvUqEacDWfRHIPYIMnyQ5h9bP3yWQCiw16w6sPWxsdkHm2yL
8tw8B61kaAz6M3tTNsShLgU0hWERdn37fvI8YKjMTuad2ug15HytCisJjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe4y0g6HI+r7IBF9wJCNsnNMGu9MB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv0OhBcj
Q7zFY8oMd3GDpHCgOvmv4GnxTBWvjPHMBRXr5cBQhVvfeRxHUBI5fgjxkufHc7Zu
C6Ld8k4GM/p0XXI+OTLzOu0FFNJJ1rArICmDZwmyzQpgTCnTczXzFrTikS77dGVV
RUYxO4oC+fqfipkywzaDptFo7HDl398JLSQWGA6EA4HC+1zjZHYn7V44wKZRlmez
bKzULNoLZhwrXzQXLlUtz2Ttf3AlNx7zr4fU7zKQL0AiHV+l993H8WvYW+MOWaXn
hlh7Zd6KOal4J4dD5T8oJ3D+90MIS87MmIHSWx/yizNNeFisBX757LMwGtCjxiw+
9Vry6NpB9APyeg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:16 2025 by rpki-client