Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
File: XbdXv1dG8moHySCHAbDVS2m8M2Q.mft (raw, json)
Hash identifier: eW1dF0D8SX8Oisv3/6nZaEvs/TYc1SSmeTBkORZwZCY=
Subject key identifier: 14:8D:2A:A7:DB:AB:45:16:F6:A3:2F:AA:A1:F0:8E:88:46:B5:EF:D2
Authority key identifier: 5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
Certificate issuer: /CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Certificate serial: 01962B29B8358F37A735F7E100CAD3B68B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
Manifest number: 03B4
Signing time: Sat 12 Apr 2025 18:01:16 +0000
Manifest this update: Sat 12 Apr 2025 18:01:16 +0000
Manifest next update: Sun 13 Apr 2025 18:01:16 +0000
Files and hashes: 1: XbdXv1dG8moHySCHAbDVS2m8M2Q.crl (hash: g/lYFhxl8DPKMjOeTRI/PmQAea0krrhZ7yTabaSK1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:b8:35:8f:37:a7:35:f7:e1:00:ca:d3:b6:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db757bf5746f26a07c9208701b0d54b69bc3364
Validity
Not Before: Apr 12 18:01:16 2025 GMT
Not After : Apr 13 18:01:16 2025 GMT
Subject: CN=148d2aa7dbab4516f6a32faaa1f08e8846b5efd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:dc:07:a2:1d:2a:7a:13:5b:6e:1b:4c:89:
5c:73:ea:0b:1a:44:32:65:53:ac:67:68:b8:12:4b:
02:da:87:cd:7f:cd:4d:98:6e:23:0d:1d:05:f2:59:
ce:dd:46:43:cc:46:90:c6:f3:d7:85:73:a6:27:73:
70:9c:f1:ff:7a:8e:ea:05:a1:5f:7f:12:e0:8b:49:
5f:cb:54:fd:49:a7:56:d6:05:f0:3b:38:22:95:d3:
29:01:71:ca:e3:13:00:61:ff:15:ca:21:b0:b3:0b:
09:28:eb:37:6a:75:a2:b2:f3:d8:36:47:18:c6:90:
73:5b:99:8b:81:4a:2d:64:c5:be:05:a4:f3:97:bb:
20:a6:cd:36:8e:07:d1:1f:36:ca:82:50:1f:bc:f9:
4c:f5:38:46:6c:06:d2:ff:99:d5:07:29:14:c7:c2:
f1:20:46:c0:19:ae:ab:89:d9:dd:90:02:8d:47:c7:
43:69:06:23:32:f1:d7:a9:59:8f:96:f4:37:0f:c6:
2d:6e:dd:23:1d:3c:ec:50:2b:17:76:8c:8a:40:b0:
f0:75:3c:35:a7:e2:0b:ce:d3:03:9a:c9:5b:d4:64:
87:fa:c7:38:3f:5d:75:7b:74:d0:8b:64:26:29:82:
36:4d:4d:50:b5:ce:66:7b:81:c5:45:ee:72:59:6f:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:2A:A7:DB:AB:45:16:F6:A3:2F:AA:A1:F0:8E:88:46:B5:EF:D2
X509v3 Authority Key Identifier:
keyid:5D:B7:57:BF:57:46:F2:6A:07:C9:20:87:01:B0:D5:4B:69:BC:33:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbdXv1dG8moHySCHAbDVS2m8M2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2b3387-3b34-457e-ab1c-3ab52b3bcc3b/1/XbdXv1dG8moHySCHAbDVS2m8M2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9c:ec:43:e4:43:6d:ac:df:75:79:56:c4:ec:ce:c4:2b:0d:
4a:61:43:c0:02:2c:58:46:3a:60:06:2d:39:17:30:eb:2d:f6:
a9:32:41:7e:c0:9e:1d:fa:3a:91:3f:28:bd:a2:29:55:76:53:
f5:13:69:81:99:25:02:58:0a:77:ee:73:c7:1b:38:ff:64:84:
67:49:b6:fa:a3:d5:fe:9b:f0:bf:95:51:53:ad:d6:86:ca:79:
cd:09:f7:73:08:b9:43:5c:55:d7:1f:f8:c6:d6:2c:57:a4:39:
e0:ca:f2:ff:4e:78:90:4e:25:92:08:07:d8:54:0f:a2:80:be:
88:b3:95:f9:63:71:b3:a6:d1:10:bb:a4:7b:1c:58:2e:81:b3:
f3:a8:cc:b7:8c:fa:8f:a5:5f:05:22:22:04:d1:9e:a6:3d:c4:
0d:93:bb:6c:3b:f7:fb:0b:49:72:2b:80:ec:eb:29:a3:e5:88:
c5:8e:d5:cc:46:a8:d8:f7:1d:9e:70:78:65:a4:08:02:fa:21:
31:b1:16:f9:b8:eb:4a:24:08:00:ca:8b:f3:10:ba:98:2d:f9:
d9:09:91:e4:65:06:5b:11:a3:4a:f7:cc:43:95:a9:b7:15:98:
5c:61:72:89:ca:c1:12:07:f0:b3:fa:b8:1d:52:32:97:cd:e4:
71:e9:9c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrKbg1jzenNffhAMrTtotgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYjc1N2JmNTc0NmYyNmEwN2M5MjA4NzAxYjBkNTRiNjli
YzMzNjQwHhcNMjUwNDEyMTgwMTE2WhcNMjUwNDEzMTgwMTE2WjAzMTEwLwYDVQQD
EygxNDhkMmFhN2RiYWI0NTE2ZjZhMzJmYWFhMWYwOGU4ODQ2YjVlZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75LcB6IdKnoTW24bTIlcc+oLGkQy
ZVOsZ2i4EksC2ofNf81NmG4jDR0F8lnO3UZDzEaQxvPXhXOmJ3NwnPH/eo7qBaFf
fxLgi0lfy1T9SadW1gXwOzgildMpAXHK4xMAYf8VyiGwswsJKOs3anWisvPYNkcY
xpBzW5mLgUotZMW+BaTzl7sgps02jgfRHzbKglAfvPlM9ThGbAbS/5nVBykUx8Lx
IEbAGa6ridndkAKNR8dDaQYjMvHXqVmPlvQ3D8Ytbt0jHTzsUCsXdoyKQLDwdTw1
p+ILztMDmslb1GSH+sc4P111e3TQi2QmKYI2TU1Qtc5me4HFRe5yWW+x+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSNKqfbq0UW9qMvqqHwjohGte/SMB8GA1UdIwQY
MBaAFF23V79XRvJqB8kghwGw1UtpvDNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yYjMzODctM2IzNC00NTdlLWFiMWMt
M2FiNTJiM2JjYzNiLzEvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yYjMzODctM2IzNC00NTdlLWFiMWMtM2FiNTJiM2JjYzNi
LzEvWGJkWHYxZEc4bW9IeVNDSEFiRFZTMm04TTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZzsQ+RD
bazfdXlWxOzOxCsNSmFDwAIsWEY6YAYtORcw6y32qTJBfsCeHfo6kT8ovaIpVXZT
9RNpgZklAlgKd+5zxxs4/2SEZ0m2+qPV/pvwv5VRU63Whsp5zQn3cwi5Q1xV1x/4
xtYsV6Q54Mry/054kE4lkggH2FQPooC+iLOV+WNxs6bRELukexxYLoGz86jMt4z6
j6VfBSIiBNGepj3EDZO7bDv3+wtJciuA7Ospo+WIxY7VzEao2PcdnnB4ZaQIAvoh
MbEW+bjrSiQIAMqL8xC6mC352QmR5GUGWxGjSvfMQ5WptxWYXGFyicrBEgfws/q4
HVIyl83kcemcPw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:40:08 2025 by rpki-client