Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: Gjet2VhR752d0fHXqWLUqUzGjOgiCBgGjN5CGww8YZA=
Subject key identifier: 1D:86:13:E5:78:99:36:C8:B2:72:13:A8:5A:02:FA:33:BB:9D:4D:F0
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0196545C3D9A09737237506E829A38197CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 142F
Signing time: Sun 20 Apr 2025 18:00:53 +0000
Manifest this update: Sun 20 Apr 2025 18:00:53 +0000
Manifest next update: Mon 21 Apr 2025 18:00:53 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: ABKyLQGlZupKzsoJSoFfHg9qQqKqMWtUUCVJ/vVh7uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:3d:9a:09:73:72:37:50:6e:82:9a:38:19:7c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Apr 20 18:00:53 2025 GMT
Not After : Apr 21 18:00:53 2025 GMT
Subject: CN=1d8613e5789936c8b27213a85a02fa33bb9d4df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:16:0f:c8:5a:04:7e:58:75:96:49:d8:9e:
3b:4c:71:24:97:79:aa:b5:9d:36:33:a8:e7:7b:7b:
40:a1:1a:ef:c2:ad:67:cc:9e:a5:10:95:30:db:42:
54:af:44:2a:1d:aa:d8:c6:7c:f5:27:83:14:6d:29:
1b:cd:69:b7:1a:1c:f2:ac:79:22:8a:f7:f2:57:8f:
19:2f:4d:d8:09:a0:4c:f9:ce:5b:77:d7:ef:63:b5:
c0:b5:5e:50:7d:2a:20:5c:19:1b:dc:b7:e5:45:ac:
a7:fc:e2:3d:b1:85:87:87:2b:63:98:34:e7:03:64:
05:a5:b6:28:09:32:9d:b1:45:c1:12:a0:f9:5b:1a:
bc:67:55:4d:3c:4d:c9:ee:28:31:59:89:db:6c:0b:
d2:ce:d6:b8:ec:33:88:ff:d8:91:94:46:96:23:89:
70:91:42:ec:82:a5:e4:ee:c5:83:8d:17:d2:05:98:
57:21:cc:e8:f1:31:c4:77:86:01:49:cd:cb:b4:5b:
44:71:27:99:95:8e:67:e0:58:2c:ef:b8:c5:a0:eb:
ab:75:40:ba:eb:cd:bd:dd:e7:91:e0:f1:e9:96:06:
cd:55:d0:3f:8f:62:12:fc:6b:52:18:1e:54:3c:82:
88:0f:d0:05:4f:4b:d4:ca:fc:15:d0:f4:39:3a:5d:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:13:E5:78:99:36:C8:B2:72:13:A8:5A:02:FA:33:BB:9D:4D:F0
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:8e:33:ff:5f:6e:de:fa:a0:d8:74:a5:1b:2f:8e:60:64:
af:4f:d9:d5:25:65:0d:ef:62:47:ae:0c:f7:d9:70:26:e9:90:
7f:51:43:80:3c:82:b8:1b:81:c4:f9:21:cc:91:3a:6a:bd:88:
21:cb:9d:55:0b:90:c1:c9:37:09:77:69:78:f3:40:d0:37:ac:
a7:59:47:77:97:7f:79:e0:64:9e:1a:20:be:6d:7c:85:79:af:
4a:cb:8b:ce:91:a1:78:fb:89:bf:85:f8:58:6e:92:fd:9b:c1:
20:5b:49:67:11:98:3f:71:cb:b3:f8:6a:19:fb:d2:44:e2:3c:
43:cc:81:87:2d:5c:65:56:b6:c2:aa:a9:04:72:4d:ad:3f:bb:
46:65:a4:e5:4f:71:ce:36:0b:08:dc:aa:bf:30:c3:fa:c3:39:
05:e6:ee:81:1b:b1:15:4f:23:15:ea:37:3a:20:04:67:12:10:
d6:61:b5:e4:04:8e:e2:8c:42:ca:d6:c8:54:37:83:32:84:91:
b9:1f:1a:23:cd:63:e9:ee:72:5b:b7:0e:d7:ae:1f:68:ca:41:
4f:35:3e:4c:e4:ba:1c:84:3d:44:ae:9f:22:1a:9f:ec:3d:9b:
9c:26:5f:97:10:9c:52:21:16:e3:b8:7f:5a:6c:e0:e5:a3:e6:
5d:74:0d:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXD2aCXNyN1Bugpo4GXzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwNDIwMTgwMDUzWhcNMjUwNDIxMTgwMDUzWjAzMTEwLwYDVQQD
EygxZDg2MTNlNTc4OTkzNmM4YjI3MjEzYTg1YTAyZmEzM2JiOWQ0ZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNIWD8haBH5YdZZJ2J47THEkl3mq
tZ02M6jne3tAoRrvwq1nzJ6lEJUw20JUr0QqHarYxnz1J4MUbSkbzWm3GhzyrHki
ivfyV48ZL03YCaBM+c5bd9fvY7XAtV5QfSogXBkb3LflRayn/OI9sYWHhytjmDTn
A2QFpbYoCTKdsUXBEqD5Wxq8Z1VNPE3J7igxWYnbbAvSzta47DOI/9iRlEaWI4lw
kULsgqXk7sWDjRfSBZhXIczo8THEd4YBSc3LtFtEcSeZlY5n4Fgs77jFoOurdUC6
68293eeR4PHplgbNVdA/j2IS/GtSGB5UPIKID9AFT0vUyvwV0PQ5Ol33pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2GE+V4mTbIsnITqFoC+jO7nU3wMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwCOM/9f
bt76oNh0pRsvjmBkr0/Z1SVlDe9iR64M99lwJumQf1FDgDyCuBuBxPkhzJE6ar2I
IcudVQuQwck3CXdpePNA0Desp1lHd5d/eeBknhogvm18hXmvSsuLzpGhePuJv4X4
WG6S/ZvBIFtJZxGYP3HLs/hqGfvSROI8Q8yBhy1cZVa2wqqpBHJNrT+7RmWk5U9x
zjYLCNyqvzDD+sM5BebugRuxFU8jFeo3OiAEZxIQ1mG15ASO4oxCytbIVDeDMoSR
uR8aI81j6e5yW7cO164faMpBTzU+TOS6HIQ9RK6fIhqf7D2bnCZflxCcUiEW47h/
Wmzg5aPmXXQNPg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:34 2025 by rpki-client