Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: 63KuKDzbet6L2T97OWABJ9kGUsoSP5W3B5Ry3IERYgk=
Subject key identifier: 98:B9:14:37:3B:25:42:2F:C0:E6:9A:20:9C:F1:13:FC:51:78:79:98
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 0196029B80BF2AFAE3A56F44002E05A4B68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 0657
Signing time: Fri 04 Apr 2025 21:01:07 +0000
Manifest this update: Fri 04 Apr 2025 21:01:07 +0000
Manifest next update: Sat 05 Apr 2025 21:01:07 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: gpWzJEkS0WSDF4p8RzcqwGVLCv+HwLJ6g2hdVJlGgDc=)
2: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
3: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
4: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:9b:80:bf:2a:fa:e3:a5:6f:44:00:2e:05:a4:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Apr 4 21:01:07 2025 GMT
Not After : Apr 5 21:01:07 2025 GMT
Subject: CN=98b914373b25422fc0e69a209cf113fc51787998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:a3:6e:b8:3b:6c:9d:f5:ee:37:7e:16:47:
6d:df:64:6d:35:f1:43:4c:6a:8f:d4:ae:09:a0:bb:
47:a9:ef:4d:56:6e:37:a6:d8:72:d2:90:b6:ba:d5:
66:a0:c9:86:27:fb:9a:25:3f:df:5e:a3:eb:e9:39:
43:56:b3:61:c7:0b:d9:5d:d1:2a:ae:79:b6:0b:53:
57:60:0b:90:9e:5f:9d:3a:21:f8:80:ed:84:6f:6b:
51:8b:84:2a:5b:56:a1:15:8c:f7:c9:6e:2c:ed:75:
64:d8:15:14:6c:00:dc:34:3a:4e:85:42:1d:ab:6d:
33:54:4d:6d:d1:2b:a4:0a:c7:df:d1:ed:f7:71:e7:
af:7a:72:9e:f9:f6:26:6f:c5:67:6b:76:a9:4c:1c:
37:1d:b1:c0:c6:97:6d:b1:8e:8b:ab:d1:fa:e4:00:
1f:53:ef:0b:d1:75:00:c8:0c:75:3f:da:19:03:3d:
22:75:76:dd:c1:7c:f5:17:71:40:db:09:d5:29:a0:
cd:d3:50:8d:df:2d:95:8c:a5:2a:26:c4:bd:16:c8:
54:21:a9:76:a4:6e:16:7f:4e:30:5f:7b:5c:71:78:
1a:53:28:68:80:18:b3:fc:34:ac:08:fb:4f:5c:e0:
6b:a7:73:ad:13:48:d2:4d:66:01:d0:6d:13:64:7e:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B9:14:37:3B:25:42:2F:C0:E6:9A:20:9C:F1:13:FC:51:78:79:98
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6d:29:98:fc:77:21:66:85:46:43:a2:71:79:c3:18:3c:c8:
74:c9:26:ea:4e:01:b0:ad:07:ec:21:c3:ab:3c:3e:84:d3:5c:
f1:91:77:f9:3f:d9:dc:e0:8c:e3:75:da:d7:b0:c3:26:09:af:
a8:46:4d:5b:31:05:f9:38:b5:b6:8a:30:26:68:f7:1a:0b:fa:
b7:0a:4c:2c:6e:42:6d:5c:7b:16:74:55:50:57:55:d0:fc:ab:
17:b3:4d:5e:db:00:d2:27:43:06:35:5b:9c:73:05:bf:d3:84:
56:f9:b2:b1:7a:2d:90:c8:fe:7e:95:c3:2b:7b:96:f9:12:40:
f7:a4:6a:2e:38:69:f2:1f:f8:87:e5:a7:9f:90:e7:97:61:c7:
4f:03:7f:34:65:e1:a3:cf:50:dc:23:30:c2:d0:ef:ab:8c:ee:
a8:30:ac:37:b0:80:20:b0:96:e9:34:aa:87:d3:b3:47:a2:29:
24:18:c1:9d:76:34:db:6a:6e:5d:45:3b:3f:e2:2c:b9:62:e1:
65:08:45:a4:92:72:0e:d1:d3:65:2d:6e:99:1c:2f:bd:03:c0:
dc:52:ea:d4:6e:c8:3b:d3:35:a1:6d:4f:e3:1f:f1:2d:99:9f:
f7:4c:5a:6b:20:2f:fa:16:5c:34:0c:c4:b4:e3:28:58:36:4d:
61:3f:c4:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYCm4C/KvrjpW9EAC4FpLaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjUwNDA0MjEwMTA3WhcNMjUwNDA1MjEwMTA3WjAzMTEwLwYDVQQD
Eyg5OGI5MTQzNzNiMjU0MjJmYzBlNjlhMjA5Y2YxMTNmYzUxNzg3OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL+jbrg7bJ317jd+Fkdt32RtNfFD
TGqP1K4JoLtHqe9NVm43pthy0pC2utVmoMmGJ/uaJT/fXqPr6TlDVrNhxwvZXdEq
rnm2C1NXYAuQnl+dOiH4gO2Eb2tRi4QqW1ahFYz3yW4s7XVk2BUUbADcNDpOhUId
q20zVE1t0SukCsff0e33ceevenKe+fYmb8Vna3apTBw3HbHAxpdtsY6Lq9H65AAf
U+8L0XUAyAx1P9oZAz0idXbdwXz1F3FA2wnVKaDN01CN3y2VjKUqJsS9FshUIal2
pG4Wf04wX3tccXgaUyhogBiz/DSsCPtPXOBrp3OtE0jSTWYB0G0TZH75cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi5FDc7JUIvwOaaIJzxE/xReHmYMB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdW0pmPx3
IWaFRkOicXnDGDzIdMkm6k4BsK0H7CHDqzw+hNNc8ZF3+T/Z3OCM43Xa17DDJgmv
qEZNWzEF+Ti1toowJmj3Ggv6twpMLG5CbVx7FnRVUFdV0PyrF7NNXtsA0idDBjVb
nHMFv9OEVvmysXotkMj+fpXDK3uW+RJA96RqLjhp8h/4h+Wnn5Dnl2HHTwN/NGXh
o89Q3CMwwtDvq4zuqDCsN7CAILCW6TSqh9OzR6IpJBjBnXY022puXUU7P+IsuWLh
ZQhFpJJyDtHTZS1umRwvvQPA3FLq1G7IO9M1oW1P4x/xLZmf90xaayAv+hZcNAzE
tOMoWDZNYT/E5A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:30:07 2025 by rpki-client