Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: Coip/UkyqLxlx+FsHVBHWjTj0l+quzeic3fgVvK+bbg=
Subject key identifier: 35:A5:4B:A6:10:FA:9C:41:F0:05:6A:05:C5:6E:33:C7:60:10:D5:72
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 0196545C6C8DA75CF74F039968AEA10C1529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 0680
Signing time: Sun 20 Apr 2025 18:01:05 +0000
Manifest this update: Sun 20 Apr 2025 18:01:05 +0000
Manifest next update: Mon 21 Apr 2025 18:01:05 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: 5SSsdiRDrnsjZAA6G3qFYe2LAkwwinW1XBhU5bvwiBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:6c:8d:a7:5c:f7:4f:03:99:68:ae:a1:0c:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Apr 20 18:01:05 2025 GMT
Not After : Apr 21 18:01:05 2025 GMT
Subject: CN=35a54ba610fa9c41f0056a05c56e33c76010d572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:cd:6a:81:fc:26:46:03:be:98:d3:3d:55:
c1:ba:cd:cc:b3:8c:d1:5c:3e:a1:e9:b7:39:32:30:
27:2b:49:aa:7c:5d:e7:6e:b6:2a:51:2a:9d:4b:ce:
41:79:16:15:7b:d7:74:4c:fc:ce:5b:bf:57:29:bf:
dd:31:13:86:e7:7b:11:c6:bb:56:43:34:8e:8f:71:
d9:a5:d4:c3:bc:c1:71:5b:00:f0:ac:e5:19:e0:d0:
b6:41:65:de:9d:31:ef:24:aa:f8:72:d8:a6:78:a7:
72:3a:d7:06:45:f2:e3:97:bb:d6:bd:64:b6:1b:40:
7a:9e:cc:61:72:7b:fd:c1:ea:9a:86:f3:79:74:9d:
13:52:79:81:8b:0a:6d:2b:bb:a1:1e:87:69:05:63:
7e:2b:43:d3:c7:8e:1f:e8:b1:b6:26:05:7e:e9:1b:
9c:39:09:c7:ed:30:85:f3:01:5e:0f:59:ab:78:ce:
8f:74:df:6e:63:dc:d1:c8:01:d2:09:9e:da:e9:8c:
88:5c:7c:ae:63:c6:09:c1:e4:88:dc:e1:26:22:fe:
3a:a6:dc:51:03:a7:f4:3f:26:1a:9d:6a:b3:2b:df:
4c:32:c2:6e:94:af:28:92:6f:da:45:af:44:b1:40:
4e:e1:52:d2:07:0e:9d:5d:4d:b0:45:98:b8:b6:9b:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:4B:A6:10:FA:9C:41:F0:05:6A:05:C5:6E:33:C7:60:10:D5:72
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:c5:f1:71:82:b6:9d:e0:2d:03:16:e2:b2:90:66:61:47:
f3:4c:75:29:72:0b:11:5e:6b:62:c9:3b:09:81:6a:10:df:4c:
3e:cd:80:ff:f5:50:ae:86:03:c2:4d:db:4c:16:c1:0a:f6:1a:
d2:10:3e:94:00:e2:85:00:bb:7c:c8:a4:6b:3b:24:b3:f6:7a:
58:74:2e:4f:1a:92:0a:87:88:dd:45:71:fc:05:13:c8:c8:ee:
24:e3:ca:c4:cf:29:46:6c:91:37:76:b2:4d:8a:79:fe:83:cd:
08:81:3c:13:3d:58:cc:43:67:5b:2f:12:f3:4d:7c:01:85:e0:
59:bc:98:64:98:e0:9c:f8:28:e5:42:8b:c4:a7:37:1b:cf:58:
9b:dd:be:24:eb:d1:98:80:c1:ed:51:92:f2:c7:66:ae:43:c7:
6d:32:25:f7:5b:94:5b:c0:a3:e2:26:a6:4a:73:d9:99:fc:bb:
27:9c:37:58:e3:e0:18:51:01:fc:8b:1a:00:60:74:27:85:20:
91:b5:fd:e1:c7:80:4e:f8:e0:f2:67:3f:d0:9c:e9:ef:b5:15:
ec:41:cc:06:65:e7:dc:19:45:5d:a0:ec:08:34:b6:41:bf:dc:
d4:b9:3a:48:12:5f:da:a8:c2:6d:e2:8e:09:45:c3:0d:9f:70:
0b:96:1a:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXGyNp1z3TwOZaK6hDBUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGRmZTBmNGJmYjY5ODJmMTk2MGFiMmEzZmFlN2EyZmI0
NTdhOTMwHhcNMjUwNDIwMTgwMTA1WhcNMjUwNDIxMTgwMTA1WjAzMTEwLwYDVQQD
EygzNWE1NGJhNjEwZmE5YzQxZjAwNTZhMDVjNTZlMzNjNzYwMTBkNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2zNaoH8JkYDvpjTPVXBus3Ms4zR
XD6h6bc5MjAnK0mqfF3nbrYqUSqdS85BeRYVe9d0TPzOW79XKb/dMROG53sRxrtW
QzSOj3HZpdTDvMFxWwDwrOUZ4NC2QWXenTHvJKr4ctimeKdyOtcGRfLjl7vWvWS2
G0B6nsxhcnv9weqahvN5dJ0TUnmBiwptK7uhHodpBWN+K0PTx44f6LG2JgV+6Ruc
OQnH7TCF8wFeD1mreM6PdN9uY9zRyAHSCZ7a6YyIXHyuY8YJweSI3OEmIv46ptxR
A6f0PyYanWqzK99MMsJulK8okm/aRa9EsUBO4VLSBw6dXU2wRZi4tptj0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWlS6YQ+pxB8AVqBcVuM8dgENVyMB8GA1UdIwQY
MBaAFMTd/g9L+2mC8ZYKsqP656L7RXqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MGI0ODEtNjUzNS00MGEzLTgxYTgt
MzEzYTRjMTYzYjEwLzEveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MGI0ODEtNjUzNS00MGEzLTgxYTgtMzEzYTRjMTYzYjEw
LzEveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2nF8XGC
tp3gLQMW4rKQZmFH80x1KXILEV5rYsk7CYFqEN9MPs2A//VQroYDwk3bTBbBCvYa
0hA+lADihQC7fMikazsks/Z6WHQuTxqSCoeI3UVx/AUTyMjuJOPKxM8pRmyRN3ay
TYp5/oPNCIE8Ez1YzENnWy8S8018AYXgWbyYZJjgnPgo5UKLxKc3G89Ym92+JOvR
mIDB7VGS8sdmrkPHbTIl91uUW8Cj4iamSnPZmfy7J5w3WOPgGFEB/IsaAGB0J4Ug
kbX94ceATvjg8mc/0Jzp77UV7EHMBmXn3BlFXaDsCDS2Qb/c1Lk6SBJf2qjCbeKO
CUXDDZ9wC5Yarw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:15:56 2025 by rpki-client