Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: WTESPjhFe7ZoOTfFjH2AdZZ+B9uVjFFr6E+YOFnEtFg=
Subject key identifier: 57:3A:38:91:05:9A:96:AC:58:F9:45:32:F7:90:3B:91:36:77:0B:36
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 01964CA2603DBBFC48CF022AE04DF5503D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 03D8
Signing time: Sat 19 Apr 2025 06:00:31 +0000
Manifest this update: Sat 19 Apr 2025 06:00:31 +0000
Manifest next update: Sun 20 Apr 2025 06:00:31 +0000
Files and hashes: 1: 4aLpoXObM3ew7yN9vHEAPc0fnWk.roa (hash: ar8XjMMpMsT7IlojVLcbANVoZnXxQWrx82eUQGbYerI=)
2: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: wVJ9cG6vnyrULwt4/C0Yt6AC8r1ImQYB4O2iE6aEtrg=)
3: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:60:3d:bb:fc:48:cf:02:2a:e0:4d:f5:50:3d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Apr 19 06:00:31 2025 GMT
Not After : Apr 20 06:00:31 2025 GMT
Subject: CN=573a3891059a96ac58f94532f7903b9136770b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:f4:ff:80:b7:39:7d:82:9e:3d:1b:72:25:
fe:b9:81:05:67:da:21:a0:2a:ee:ce:f0:32:5c:5b:
05:aa:d0:e3:66:df:91:6e:9c:88:e0:17:74:02:7a:
96:05:87:5d:5b:35:f3:22:77:54:b9:89:44:1a:5e:
e6:3b:8e:7a:ab:75:8d:0c:a7:5c:cc:f2:87:fd:27:
b2:0c:ea:86:eb:ed:e7:d5:12:5e:58:73:af:45:b0:
04:17:db:74:cd:93:dd:8e:a0:7a:1a:2e:09:d0:df:
36:b2:4f:10:0d:7f:29:7a:76:50:90:28:da:39:00:
83:d2:bb:8c:ff:51:9c:f8:14:bc:86:f6:dc:b7:81:
81:70:9f:86:0d:f9:3b:80:69:33:43:0d:38:e1:3f:
20:24:e7:63:bc:26:b7:37:01:e7:31:73:b6:07:cd:
f0:bc:bc:c3:bc:67:53:7f:5f:76:81:fe:fb:20:7c:
7c:91:18:3f:01:88:27:06:84:54:5b:29:2e:f5:04:
41:c7:4e:91:68:af:6e:f5:b8:ec:b1:a9:07:c9:71:
1f:13:0c:b6:f0:0d:ed:c6:c0:10:d5:6b:b8:a0:af:
75:a4:80:d6:4c:a7:d3:fa:e6:93:35:1d:14:ec:74:
2e:73:54:3a:68:cf:59:ff:b5:19:04:56:c7:ee:f2:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:38:91:05:9A:96:AC:58:F9:45:32:F7:90:3B:91:36:77:0B:36
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f7:32:c6:b8:55:7f:b3:ff:3f:e4:d6:df:22:e0:92:95:8c:
88:fa:34:26:40:6f:e5:c5:ff:9e:91:28:fc:b5:ef:5e:09:cf:
63:d6:4b:f8:8f:8f:6b:bf:1c:c6:77:4b:38:bb:63:9c:3d:6a:
ef:d3:8c:18:84:0f:f8:38:c8:a2:bf:c5:44:7c:63:82:bd:fc:
7c:d6:17:fa:9e:d8:e3:6b:75:6c:10:53:f5:c6:61:e6:5e:30:
3b:6c:f8:98:be:ae:0b:8f:b3:1a:51:8f:93:7c:ae:c1:b8:d3:
1b:b2:6f:59:f1:ce:44:b9:60:ea:89:25:65:3b:1e:2d:54:b3:
2f:67:0e:1f:51:75:37:97:1c:05:2d:b5:86:ea:56:ba:21:82:
e9:be:4b:c7:b7:35:72:d4:cf:f3:3f:9c:74:22:97:82:92:63:
0f:c5:ca:43:15:c0:b4:08:03:19:2e:aa:07:c1:3b:0d:40:03:
28:d1:17:30:61:dc:ab:fc:ac:8e:53:e4:3f:58:ce:f0:a5:6e:
6d:e3:be:99:9d:c8:4b:fa:ba:1c:7b:16:a1:d0:0f:b2:40:9b:
18:f2:14:72:53:ff:f4:1e:7e:94:2c:eb:80:ac:cf:d3:ef:f8:
24:8f:fc:a5:27:77:19:64:23:b1:1d:53:c1:c5:39:41:8b:38:
2a:22:9c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMomA9u/xIzwIq4E31UD19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx
N2Q2MDUwHhcNMjUwNDE5MDYwMDMxWhcNMjUwNDIwMDYwMDMxWjAzMTEwLwYDVQQD
Eyg1NzNhMzg5MTA1OWE5NmFjNThmOTQ1MzJmNzkwM2I5MTM2NzcwYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mz0/4C3OX2Cnj0bciX+uYEFZ9oh
oCruzvAyXFsFqtDjZt+RbpyI4Bd0AnqWBYddWzXzIndUuYlEGl7mO456q3WNDKdc
zPKH/SeyDOqG6+3n1RJeWHOvRbAEF9t0zZPdjqB6Gi4J0N82sk8QDX8penZQkCja
OQCD0ruM/1Gc+BS8hvbct4GBcJ+GDfk7gGkzQw044T8gJOdjvCa3NwHnMXO2B83w
vLzDvGdTf192gf77IHx8kRg/AYgnBoRUWyku9QRBx06RaK9u9bjssakHyXEfEwy2
8A3txsAQ1Wu4oK91pIDWTKfT+uaTNR0U7HQuc1Q6aM9Z/7UZBFbH7vJiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc6OJEFmpasWPlFMveQO5E2dws2MB8GA1UdIwQY
MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct
NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw
LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPcyxrhV
f7P/P+TW3yLgkpWMiPo0JkBv5cX/npEo/LXvXgnPY9ZL+I+Pa78cxndLOLtjnD1q
79OMGIQP+DjIor/FRHxjgr38fNYX+p7Y42t1bBBT9cZh5l4wO2z4mL6uC4+zGlGP
k3yuwbjTG7JvWfHORLlg6oklZTseLVSzL2cOH1F1N5ccBS21hupWuiGC6b5Lx7c1
ctTP8z+cdCKXgpJjD8XKQxXAtAgDGS6qB8E7DUADKNEXMGHcq/ysjlPkP1jO8KVu
beO+mZ3IS/q6HHsWodAPskCbGPIUclP/9B5+lCzrgKzP0+/4JI/8pSd3GWQjsR1T
wcU5QYs4KiKcFQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:28 2025 by rpki-client