Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: jLll4/Q6cRCzsWVn4uMg02ldB2JdzXB7zYAUlSVEX78=
Subject key identifier: CD:6F:9C:EF:AD:5A:0B:F5:3F:AF:59:69:AA:2F:C1:61:03:3D:23:E1
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 01964B9036410269D9921682C44C802BD284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0B03
Signing time: Sat 19 Apr 2025 01:01:04 +0000
Manifest this update: Sat 19 Apr 2025 01:01:04 +0000
Manifest next update: Sun 20 Apr 2025 01:01:04 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: InrFpZv39dDUvHGNknLepK82xsrwYH+9U/6SSWwa6+o=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:36:41:02:69:d9:92:16:82:c4:4c:80:2b:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Apr 19 01:01:04 2025 GMT
Not After : Apr 20 01:01:04 2025 GMT
Subject: CN=cd6f9cefad5a0bf53faf5969aa2fc161033d23e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:2b:f0:64:35:66:3f:7f:14:24:6b:38:91:
e9:01:24:54:8f:f8:ad:0b:c8:23:f6:57:bc:59:e9:
6d:2f:36:96:b1:ab:85:2c:c3:7b:ea:57:f3:da:ff:
1d:4d:68:f9:2e:41:4b:34:72:4a:19:9a:7c:84:cc:
0a:4d:7a:ae:52:31:bb:71:55:8e:43:c0:a6:ac:62:
b0:86:77:72:69:3c:08:3f:42:68:d2:91:b7:96:0c:
68:be:35:ff:0b:f2:74:6d:d8:7e:64:0b:ab:3f:22:
0f:9c:19:dc:96:33:b9:2b:e6:b6:9b:4a:e5:fb:ee:
0b:ca:0a:0b:b5:eb:33:52:58:50:41:04:20:d8:33:
a0:a7:fe:2e:84:88:bc:1c:5f:ed:16:01:d0:25:cf:
b8:36:81:b2:58:f2:f1:b8:51:6c:4a:f7:f7:bd:06:
df:d3:b3:19:36:47:43:ae:70:45:dc:a6:ef:28:fd:
de:59:51:7e:2d:73:fe:dd:48:a6:7e:0a:47:fc:5e:
2e:34:31:81:bc:7e:bc:77:39:1d:d0:f4:cf:1c:3e:
2d:8c:6b:11:68:d4:10:72:c3:88:26:45:c0:2a:c6:
02:fe:8a:24:8e:b6:8c:04:92:0d:9b:12:55:5e:d4:
04:1a:74:a1:d9:f6:0e:a5:29:1e:29:db:5d:25:91:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6F:9C:EF:AD:5A:0B:F5:3F:AF:59:69:AA:2F:C1:61:03:3D:23:E1
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:3a:5e:01:67:fd:3c:23:60:d3:e6:55:96:fe:8e:16:72:
07:be:e0:da:5f:8f:19:12:ec:64:0d:5d:bb:47:14:48:64:ba:
d2:af:93:43:a6:2f:9c:18:0e:9f:eb:0e:91:94:02:de:4b:2d:
13:4e:6d:06:52:27:aa:91:bc:81:e5:03:f4:87:be:93:11:89:
3f:6a:fb:a3:5b:5c:0b:c0:74:cd:02:5a:f4:e3:65:98:9a:bc:
e9:73:63:ca:7f:a3:d3:e2:98:ae:4e:da:d0:5c:1b:34:bb:9a:
82:0c:e8:40:71:25:b1:84:8b:a2:43:10:9b:7c:9c:9f:eb:8e:
17:7e:4d:97:38:c7:8c:fe:ee:2d:6e:1b:0d:0a:91:4e:d3:1c:
73:0e:2b:50:55:00:f0:31:cd:e3:b6:58:f6:2e:0f:d7:e3:a4:
60:9f:e9:92:53:df:65:f3:75:a6:df:8f:2c:57:62:73:74:c5:
ab:5f:c3:11:13:c5:12:7a:cb:a6:3b:0d:8d:45:ea:19:34:92:
55:22:01:7c:43:b2:a6:22:50:0f:11:1c:ae:27:0f:23:91:17:
63:63:21:f2:75:6c:32:df:f9:0d:38:11:fe:dc:cf:2c:41:b7:
83:36:92:f0:44:e8:72:8c:8d:28:ad:47:c8:b0:d9:70:61:d1:
65:6b:ff:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLkDZBAmnZkhaCxEyAK9KEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMWRkNmVjNGEyZTFmMzc2Yzg1NWM1ODMxMjE5NWEwMDVj
ZGI4NTAwHhcNMjUwNDE5MDEwMTA0WhcNMjUwNDIwMDEwMTA0WjAzMTEwLwYDVQQD
EyhjZDZmOWNlZmFkNWEwYmY1M2ZhZjU5NjlhYTJmYzE2MTAzM2QyM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ4r8GQ1Zj9/FCRrOJHpASRUj/it
C8gj9le8WeltLzaWsauFLMN76lfz2v8dTWj5LkFLNHJKGZp8hMwKTXquUjG7cVWO
Q8CmrGKwhndyaTwIP0Jo0pG3lgxovjX/C/J0bdh+ZAurPyIPnBncljO5K+a2m0rl
++4LygoLteszUlhQQQQg2DOgp/4uhIi8HF/tFgHQJc+4NoGyWPLxuFFsSvf3vQbf
07MZNkdDrnBF3KbvKP3eWVF+LXP+3UimfgpH/F4uNDGBvH68dzkd0PTPHD4tjGsR
aNQQcsOIJkXAKsYC/ookjraMBJINmxJVXtQEGnSh2fYOpSkeKdtdJZG9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1vnO+tWgv1P69ZaaovwWEDPSPhMB8GA1UdIwQY
MBaAFFwd1uxKLh83bIVcWDEhlaAFzbhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYt
Mzk2NzFlMGI2MjY2LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYtMzk2NzFlMGI2MjY2
LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYo6XgFn
/TwjYNPmVZb+jhZyB77g2l+PGRLsZA1du0cUSGS60q+TQ6YvnBgOn+sOkZQC3kst
E05tBlInqpG8geUD9Ie+kxGJP2r7o1tcC8B0zQJa9ONlmJq86XNjyn+j0+KYrk7a
0FwbNLuaggzoQHElsYSLokMQm3ycn+uOF35NlzjHjP7uLW4bDQqRTtMccw4rUFUA
8DHN47ZY9i4P1+OkYJ/pklPfZfN1pt+PLFdic3TFq1/DERPFEnrLpjsNjUXqGTSS
VSIBfEOypiJQDxEcricPI5EXY2Mh8nVsMt/5DTgR/tzPLEG3gzaS8ETocoyNKK1H
yLDZcGHRZWv/sQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:56 2025 by rpki-client