Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: 3S7UR9XJS59pSExvCKnnIMa456GtkUxWjisqbF6OYAs=
Subject key identifier: 9B:3F:A9:CE:FF:49:CB:6B:74:74:DF:7F:9E:70:AC:25:0E:3D:27:6F
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 01965424E4C2E1E9B8D4F3F6FFEBBD25C991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 17:00:26 +0000
Manifest this update: Sun 20 Apr 2025 17:00:26 +0000
Manifest next update: Mon 21 Apr 2025 17:00:26 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: LA9W95WMiIssdwxDGUXPJ2OVCcL6WCVQJndzdLMFoko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:e4:c2:e1:e9:b8:d4:f3:f6:ff:eb:bd:25:c9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Apr 20 17:00:26 2025 GMT
Not After : Apr 21 17:00:26 2025 GMT
Subject: CN=9b3fa9ceff49cb6b7474df7f9e70ac250e3d276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:d8:7d:fc:35:28:58:56:55:38:51:a9:fc:
28:b3:50:21:a0:5b:36:3e:d7:49:9d:97:6a:0f:65:
12:86:ed:a4:35:66:52:d4:de:a8:2e:05:33:17:a4:
1e:a4:c7:ec:0b:a0:01:13:db:e2:76:b5:03:d2:7f:
65:9b:43:98:a4:6d:73:ab:0a:54:27:57:79:7f:b5:
1b:47:a6:4e:9d:02:cf:2c:9a:5f:18:d2:98:12:87:
a4:fb:b9:fa:93:d5:cd:57:07:5a:44:45:8e:56:75:
69:70:88:49:ab:00:6b:e1:d7:f2:7c:ac:e9:67:57:
38:c2:03:2c:d5:03:62:75:24:5b:4f:70:6a:2e:69:
52:2c:f3:51:c8:62:a8:f3:96:c9:29:ff:df:96:ea:
03:75:e2:47:c4:b3:ee:e5:80:14:00:4a:b5:cc:39:
cc:b6:c6:61:c2:5e:27:85:14:40:86:eb:e6:41:d5:
20:9c:f3:a4:95:00:95:c2:fc:a5:16:71:d4:20:9f:
0d:bf:19:ca:f6:f1:32:f8:a8:91:58:b5:a5:93:93:
69:bb:2e:09:ef:7b:f0:51:11:42:c0:e7:fd:09:9c:
0d:ac:81:60:5a:50:f3:1b:9e:24:b7:f4:6d:99:f2:
45:ef:a7:e6:bc:2a:76:96:2c:3b:f6:f9:ff:8b:dd:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:A9:CE:FF:49:CB:6B:74:74:DF:7F:9E:70:AC:25:0E:3D:27:6F
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:03:1d:a4:5f:d4:38:f0:92:60:fb:e4:af:1a:f3:0d:8b:9c:
3d:b8:cf:f2:d6:af:d7:05:28:8b:de:4e:9b:f3:a9:12:01:55:
c4:cc:35:56:5e:f8:38:0e:23:e8:e3:03:b3:65:16:12:42:cd:
f2:ca:54:95:7b:29:f7:18:36:22:6d:60:38:46:af:27:f0:66:
9c:1f:be:08:b8:e6:90:32:0f:db:6a:56:ca:6a:3c:17:29:81:
88:bc:85:c2:9b:db:2c:f0:aa:64:dc:72:ed:78:02:10:1f:cb:
fe:bd:3e:28:ce:85:bd:b9:43:c0:a4:e7:fc:45:6e:9b:bd:18:
7a:48:d9:fa:ee:9c:e8:78:0d:80:20:12:e2:75:00:e6:3f:15:
8c:0c:be:6a:7f:b7:bf:99:c4:26:74:8f:b0:53:df:2b:e2:48:
3f:74:65:7f:3d:22:1f:e0:5a:b6:20:39:0f:08:38:8c:08:ff:
60:36:03:8d:56:8c:06:85:a0:0d:a5:4c:80:70:56:bd:d8:71:
8b:c3:7f:9e:1d:f8:5c:78:d1:b6:95:35:82:b1:e5:84:a2:bf:
3c:d5:9c:36:e0:52:df:86:cf:12:62:57:ff:be:97:17:0a:d5:
af:45:1c:5b:d2:92:c3:95:86:cb:c9:ef:4f:9e:c7:6e:03:06:
3e:1e:36:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJOTC4em41PP2/+u9JcmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy
MzAxODQwHhcNMjUwNDIwMTcwMDI2WhcNMjUwNDIxMTcwMDI2WjAzMTEwLwYDVQQD
Eyg5YjNmYTljZWZmNDljYjZiNzQ3NGRmN2Y5ZTcwYWMyNTBlM2QyNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytrYffw1KFhWVThRqfwos1AhoFs2
PtdJnZdqD2UShu2kNWZS1N6oLgUzF6QepMfsC6ABE9vidrUD0n9lm0OYpG1zqwpU
J1d5f7UbR6ZOnQLPLJpfGNKYEoek+7n6k9XNVwdaREWOVnVpcIhJqwBr4dfyfKzp
Z1c4wgMs1QNidSRbT3BqLmlSLPNRyGKo85bJKf/fluoDdeJHxLPu5YAUAEq1zDnM
tsZhwl4nhRRAhuvmQdUgnPOklQCVwvylFnHUIJ8NvxnK9vEy+KiRWLWlk5Npuy4J
73vwURFCwOf9CZwNrIFgWlDzG54kt/RtmfJF76fmvCp2liw79vn/i90AjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs/qc7/SctrdHTff55wrCUOPSdvMB8GA1UdIwQY
MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt
OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2
LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgMdpF/U
OPCSYPvkrxrzDYucPbjP8tav1wUoi95Om/OpEgFVxMw1Vl74OA4j6OMDs2UWEkLN
8spUlXsp9xg2Im1gOEavJ/BmnB++CLjmkDIP22pWymo8FymBiLyFwpvbLPCqZNxy
7XgCEB/L/r0+KM6FvblDwKTn/EVum70YekjZ+u6c6HgNgCAS4nUA5j8VjAy+an+3
v5nEJnSPsFPfK+JIP3Rlfz0iH+BatiA5Dwg4jAj/YDYDjVaMBoWgDaVMgHBWvdhx
i8N/nh34XHjRtpU1grHlhKK/PNWcNuBS34bPEmJX/76XFwrVr0UcW9KSw5WGy8nv
T57HbgMGPh42EQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:02 2025 by rpki-client