Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: GtmvbSXL6CUHi3E68c9TSLgx3vvv5+aeyXzK1FKk3cI=
Subject key identifier: FE:A9:6A:1F:14:FF:28:70:8C:65:27:DC:72:76:90:35:E3:FB:EB:B8
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 01964143333DA780EBFAA378D4FC66929899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 1484
Signing time: Thu 17 Apr 2025 01:00:45 +0000
Manifest this update: Thu 17 Apr 2025 01:00:45 +0000
Manifest next update: Fri 18 Apr 2025 01:00:45 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: 9cP5pbAJWJPbk9aKG8v/TmCJS8jhchm44Ku6HUuxSkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:33:3d:a7:80:eb:fa:a3:78:d4:fc:66:92:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Apr 17 01:00:45 2025 GMT
Not After : Apr 18 01:00:45 2025 GMT
Subject: CN=fea96a1f14ff28708c6527dc72769035e3fbebb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:e9:f9:69:61:7f:62:de:c5:af:29:cd:8f:
87:8a:22:96:36:54:0d:a7:fa:82:ac:7a:dd:77:da:
bb:ca:8a:9c:79:e1:07:4d:7a:4e:23:59:b8:bc:73:
49:62:61:b3:88:4c:05:39:47:e0:bb:03:98:6e:2c:
ab:76:46:cd:bf:14:58:59:b2:67:43:f2:f3:b1:15:
a4:b9:b2:a7:1f:db:a6:e7:30:b6:15:39:e3:99:48:
0a:e8:31:d8:14:39:40:39:ac:9b:d0:92:2e:d8:8a:
87:b7:db:09:f2:e2:d1:8f:20:f2:04:7f:33:7e:94:
28:b9:60:1a:10:70:e0:9b:6f:a3:7f:6a:61:50:38:
93:72:c0:2a:8a:b5:b2:7c:5a:a6:b4:5d:f3:df:5f:
57:31:4c:f3:59:c0:87:72:d5:c5:d2:65:0f:25:65:
18:b6:71:3f:10:1e:f1:76:62:59:79:71:8a:4d:fc:
f9:65:5a:49:ff:3e:62:cd:13:57:b1:6f:9b:28:fc:
d3:99:26:78:07:f9:66:77:e1:a8:a3:cc:51:a9:1f:
d7:d0:87:37:2d:20:a7:d8:d6:4f:fb:24:1d:34:5b:
ca:d1:dd:f5:83:18:ec:ed:2b:be:47:86:d4:d5:57:
b0:de:a3:30:97:56:5e:ae:4b:b2:f2:70:79:58:0c:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:6A:1F:14:FF:28:70:8C:65:27:DC:72:76:90:35:E3:FB:EB:B8
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b0:de:05:2a:37:29:6d:ce:2b:72:8f:3d:98:12:97:2a:67:
d7:fd:5f:f9:26:e0:ee:c8:99:99:de:f9:da:98:f5:79:8e:5e:
26:80:70:59:a5:f0:36:1d:b9:99:90:f8:8a:ff:08:c2:43:4e:
63:38:03:91:63:90:1f:58:45:35:48:95:e2:d7:66:0f:40:2b:
32:92:bb:13:07:eb:99:37:7c:5c:2a:fc:8f:32:40:0b:e2:35:
cf:32:9d:83:3b:23:9b:20:cc:41:54:97:69:4b:03:88:04:78:
c2:b5:92:b3:a1:d5:70:bf:cc:06:83:79:e3:1a:22:2d:05:1a:
7b:3e:dd:ca:9a:f0:38:ba:64:ff:ca:84:23:85:f1:97:32:6c:
4d:64:06:97:f0:4c:e5:68:75:a5:cf:57:6a:dd:2e:3d:b4:e6:
ce:a1:88:35:fd:48:e0:b9:38:8d:00:e4:da:c2:f3:6a:7a:b3:
f9:4c:02:96:c8:59:32:08:3c:d7:2b:90:7d:ad:07:9d:57:fd:
48:17:91:ce:75:64:f0:fd:84:af:e6:e5:c3:c6:ba:43:3e:10:
0f:0d:f9:94:ea:bd:11:e5:a2:89:2d:c7:81:fb:d2:5f:c4:17:
4e:75:38:aa:fd:e9:c2:31:4f:25:ab:e3:a1:8e:f6:0a:cd:a2:
26:21:6d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBQzM9p4Dr+qN41PxmkpiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDhhNzM4ZDRjMTNjNGE2NzdhZjUxMjc1YmE4NGM4YjM2
ZGM5Y2UwHhcNMjUwNDE3MDEwMDQ1WhcNMjUwNDE4MDEwMDQ1WjAzMTEwLwYDVQQD
EyhmZWE5NmExZjE0ZmYyODcwOGM2NTI3ZGM3Mjc2OTAzNWUzZmJlYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuDp+Wlhf2Lexa8pzY+HiiKWNlQN
p/qCrHrdd9q7yoqceeEHTXpOI1m4vHNJYmGziEwFOUfguwOYbiyrdkbNvxRYWbJn
Q/LzsRWkubKnH9um5zC2FTnjmUgK6DHYFDlAOayb0JIu2IqHt9sJ8uLRjyDyBH8z
fpQouWAaEHDgm2+jf2phUDiTcsAqirWyfFqmtF3z319XMUzzWcCHctXF0mUPJWUY
tnE/EB7xdmJZeXGKTfz5ZVpJ/z5izRNXsW+bKPzTmSZ4B/lmd+Goo8xRqR/X0Ic3
LSCn2NZP+yQdNFvK0d31gxjs7Su+R4bU1Vew3qMwl1Zerkuy8nB5WAysJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6pah8U/yhwjGUn3HJ2kDXj++u4MB8GA1UdIwQY
MBaAFMTYpzjUwTxKZ3r1EnW6hMizbcnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYt
YWY2MmM4NDY1ZGFiLzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYtYWY2MmM4NDY1ZGFi
LzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObDeBSo3
KW3OK3KPPZgSlypn1/1f+Sbg7siZmd752pj1eY5eJoBwWaXwNh25mZD4iv8IwkNO
YzgDkWOQH1hFNUiV4tdmD0ArMpK7EwfrmTd8XCr8jzJAC+I1zzKdgzsjmyDMQVSX
aUsDiAR4wrWSs6HVcL/MBoN54xoiLQUaez7dyprwOLpk/8qEI4XxlzJsTWQGl/BM
5Wh1pc9Xat0uPbTmzqGINf1I4Lk4jQDk2sLzanqz+UwClshZMgg81yuQfa0HnVf9
SBeRznVk8P2Er+blw8a6Qz4QDw35lOq9EeWiiS3HgfvSX8QXTnU4qv3pwjFPJavj
oY72Cs2iJiFtvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:23 2025 by rpki-client