Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: b/wfHNaOX2Dtm4ohK6QANAkk91IWm6w91hCoRA/eAEk=
Subject key identifier: 87:06:0C:6B:54:EC:76:6D:2D:E1:79:9E:B7:88:1F:18:8E:67:69:89
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 01965ACB8CDCC0FCE1E881FD116A3C2125A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 0D4D
Signing time: Tue 22 Apr 2025 00:00:11 +0000
Manifest this update: Tue 22 Apr 2025 00:00:11 +0000
Manifest next update: Wed 23 Apr 2025 00:00:11 +0000
Files and hashes: 1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: dy1tqp99y5Quog0DMyFAwzsB63SnhM94reGLr3taSC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:8c:dc:c0:fc:e1:e8:81:fd:11:6a:3c:21:25:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Apr 22 00:00:11 2025 GMT
Not After : Apr 23 00:00:11 2025 GMT
Subject: CN=87060c6b54ec766d2de1799eb7881f188e676989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:77:fc:50:6f:95:2e:c3:08:2e:69:dc:eb:28:
f1:a9:49:67:4a:89:91:1b:b0:38:6a:fe:45:0a:18:
1a:7c:9a:89:1d:13:bc:fb:f4:73:d1:79:02:cb:62:
60:f4:43:90:ab:22:0f:ff:8a:b6:78:d3:2c:41:cd:
d1:0d:d9:63:6b:d9:e8:23:cb:cc:b2:81:65:c2:de:
e4:73:33:10:3a:0a:ab:f0:88:86:4c:88:d9:25:7b:
ca:30:7a:e1:f1:c0:e3:35:4d:2c:b3:35:25:c6:ea:
1e:57:8e:b6:a5:17:f2:81:8a:14:45:a9:6f:70:74:
8d:0b:32:11:be:4c:34:52:e7:97:2d:8e:50:96:17:
cc:94:46:25:37:a4:14:05:46:87:6a:13:0f:5b:57:
9c:70:a2:91:3e:29:e8:3d:a6:a1:9f:ce:0b:86:51:
c7:db:12:56:da:93:91:4b:f2:e6:86:6d:7f:99:9a:
c7:12:1c:c9:bf:b4:a7:99:a8:1e:a3:30:36:e1:89:
ed:13:af:19:45:5d:63:ce:a6:e2:30:f6:42:70:a3:
6b:b6:bd:a5:03:7a:18:42:a1:ed:c4:0c:77:01:e8:
e7:c2:a2:4e:e4:1b:70:71:dd:a3:98:7c:39:4f:86:
76:94:23:0e:0d:be:63:cc:69:a6:51:65:b3:33:40:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:0C:6B:54:EC:76:6D:2D:E1:79:9E:B7:88:1F:18:8E:67:69:89
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:ee:15:a3:96:59:f0:d4:bd:fb:4d:74:91:f0:00:9b:fb:
b5:0f:51:55:70:d2:e1:29:41:09:f2:40:fe:2b:d6:40:dd:aa:
ef:84:54:b8:c8:a5:e1:01:01:89:0c:df:30:49:3d:d4:5b:17:
1c:8d:26:db:b6:89:4b:ad:19:39:26:5c:3a:c8:35:79:bc:20:
79:eb:2e:af:fe:4a:09:27:0d:c1:f0:70:12:6c:c8:44:9b:dd:
12:6c:dc:1d:89:76:16:27:17:ba:c1:16:e3:38:13:89:c6:9d:
a9:89:37:da:ca:8f:6d:20:b0:d7:06:b2:7a:60:10:88:1c:5f:
b0:d4:8d:4c:70:a4:6c:cb:b2:1e:c5:81:ee:c8:a4:56:fc:4e:
19:ad:6d:63:d4:5d:08:0c:ca:cd:61:65:7f:20:09:c4:37:2f:
8f:0c:65:dd:af:48:e1:78:37:4a:66:0b:25:8e:bf:10:be:fa:
4e:8b:ac:f7:02:40:20:1d:8f:28:d9:17:c3:53:81:a5:06:01:
9e:fc:1c:ab:5b:65:37:90:56:f0:3b:5f:57:9d:36:cc:f7:f3:
e1:f2:d4:8e:63:7b:02:2e:ae:d2:fd:0c:bb:ca:a0:7b:c9:9a:
c2:50:2c:01:0c:2d:f8:a0:1d:69:0e:fa:e8:d0:10:8b:3b:59:
7e:e2:a5:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZay4zcwPzh6IH9EWo8ISWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3
NGYxNDcwHhcNMjUwNDIyMDAwMDExWhcNMjUwNDIzMDAwMDExWjAzMTEwLwYDVQQD
Eyg4NzA2MGM2YjU0ZWM3NjZkMmRlMTc5OWViNzg4MWYxODhlNjc2OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Hf8UG+VLsMILmnc6yjxqUlnSomR
G7A4av5FChgafJqJHRO8+/Rz0XkCy2Jg9EOQqyIP/4q2eNMsQc3RDdlja9noI8vM
soFlwt7kczMQOgqr8IiGTIjZJXvKMHrh8cDjNU0sszUlxuoeV462pRfygYoURalv
cHSNCzIRvkw0UueXLY5QlhfMlEYlN6QUBUaHahMPW1eccKKRPinoPaahn84LhlHH
2xJW2pORS/Lmhm1/mZrHEhzJv7SnmageozA24YntE68ZRV1jzqbiMPZCcKNrtr2l
A3oYQqHtxAx3AejnwqJO5Btwcd2jmHw5T4Z2lCMODb5jzGmmUWWzM0DAiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcGDGtU7HZtLeF5nreIHxiOZ2mJMB8GA1UdIwQY
MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt
ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3
LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfDuFaOW
WfDUvftNdJHwAJv7tQ9RVXDS4SlBCfJA/ivWQN2q74RUuMil4QEBiQzfMEk91FsX
HI0m27aJS60ZOSZcOsg1ebwgeesur/5KCScNwfBwEmzIRJvdEmzcHYl2FicXusEW
4zgTicadqYk32sqPbSCw1wayemAQiBxfsNSNTHCkbMuyHsWB7sikVvxOGa1tY9Rd
CAzKzWFlfyAJxDcvjwxl3a9I4Xg3SmYLJY6/EL76Tous9wJAIB2PKNkXw1OBpQYB
nvwcq1tlN5BW8DtfV502zPfz4fLUjmN7Ai6u0v0Mu8qge8mawlAsAQwt+KAdaQ76
6NAQiztZfuKlOw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:38:34 2025 by rpki-client