Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: BgpUxmdas26lAxfkYrZ9gwt8IPwJII0nhnV3FQ4peiA=
Subject key identifier: 0E:A6:23:BD:74:40:F3:37:7B:0C:E3:F8:D3:D1:7E:77:E5:45:8A:AD
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 01964E2361B6F291EC9065005FE91F4726BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 13:01:03 +0000
Manifest this update: Sat 19 Apr 2025 13:01:03 +0000
Manifest next update: Sun 20 Apr 2025 13:01:03 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: OIWa2/E7fCa7GXTcbvyJARmqlMpZEY15vodLGE+WxMc=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:61:b6:f2:91:ec:90:65:00:5f:e9:1f:47:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Apr 19 13:01:03 2025 GMT
Not After : Apr 20 13:01:03 2025 GMT
Subject: CN=0ea623bd7440f3377b0ce3f8d3d17e77e5458aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:18:e0:00:34:6d:06:8f:cd:39:f2:ad:a0:
09:fb:ef:92:cc:8d:95:86:00:1a:2c:3d:f5:e8:75:
ae:98:89:11:da:ed:29:0b:b8:d2:7f:f2:c6:98:34:
f9:b1:1d:21:b1:db:dc:1f:c3:96:bc:fd:53:a9:7d:
ea:e1:c1:5a:dc:4e:cf:a0:69:07:e6:bc:80:48:c6:
d2:68:78:60:52:fe:eb:7f:7b:5a:72:f9:cc:ce:48:
da:b0:a5:fe:03:28:cb:9e:67:0e:4d:2e:81:a9:8f:
7b:3d:89:20:0b:be:f2:04:13:28:d1:f2:d7:1f:cc:
c8:f5:44:3c:ea:81:6b:28:48:a6:be:32:49:ed:d2:
61:e2:72:6a:6d:89:81:fc:fb:17:3d:72:55:f1:36:
ce:da:69:10:f7:56:88:05:75:5e:c5:5c:5c:02:81:
de:17:5e:ca:11:4c:d9:22:ec:b6:c9:a8:7a:81:b9:
13:cc:eb:ec:93:82:65:fc:d0:a8:31:81:96:10:4f:
87:cf:4e:87:cf:ff:b8:c3:42:cd:16:fe:02:da:bc:
6d:14:dd:6c:5e:d0:b8:2f:21:56:2f:07:90:8d:69:
21:3c:ff:c9:d4:df:be:b5:4c:83:dd:52:cd:17:53:
5d:b0:7e:cd:a5:74:35:26:09:95:79:e8:d7:6f:85:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:23:BD:74:40:F3:37:7B:0C:E3:F8:D3:D1:7E:77:E5:45:8A:AD
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:d0:bc:55:d5:c7:58:fe:b3:4b:cd:22:fd:16:07:8c:b0:
c9:c3:f0:64:d7:15:86:9a:6c:40:64:47:40:9b:ee:06:9b:10:
eb:8e:f9:bc:1f:2c:d3:bb:5e:a6:55:b8:c2:cb:bc:48:1a:ce:
ec:ad:5d:97:7b:3b:dc:aa:29:22:db:fb:af:21:37:3a:bd:0f:
64:4a:40:bf:5d:23:af:0c:87:d5:28:1c:fa:3c:02:7d:d4:33:
17:db:65:25:4c:23:8d:b2:7e:85:bc:f2:26:84:a0:fd:6f:4d:
d4:55:68:48:91:a6:bc:96:d0:3a:60:42:ec:b4:e6:82:66:2a:
ea:f2:ac:e9:f5:f4:61:2c:a5:0c:37:4a:98:33:90:43:1f:c0:
5e:24:22:01:b4:bd:11:e9:2b:71:60:82:7f:52:58:3b:c3:23:
c5:ca:ec:01:57:ba:25:01:7d:a8:79:b3:56:f9:f3:06:76:f6:
4d:23:e0:1a:cc:6d:d2:1e:e4:93:d2:88:5c:30:52:54:88:45:
1c:e2:c2:f9:99:b5:20:f4:41:d4:91:0f:2d:57:7a:d5:3e:f2:
08:d0:5f:eb:27:7d:7a:7f:df:ae:ba:ca:b1:ed:1b:9c:0e:97:
e3:90:9d:ca:ef:c2:1b:2e:a6:80:43:c4:bc:4a:6b:55:08:94:
12:21:51:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOI2G28pHskGUAX+kfRya7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjUwNDE5MTMwMTAzWhcNMjUwNDIwMTMwMTAzWjAzMTEwLwYDVQQD
EygwZWE2MjNiZDc0NDBmMzM3N2IwY2UzZjhkM2QxN2U3N2U1NDU4YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk8Y4AA0bQaPzTnyraAJ+++SzI2V
hgAaLD316HWumIkR2u0pC7jSf/LGmDT5sR0hsdvcH8OWvP1TqX3q4cFa3E7PoGkH
5ryASMbSaHhgUv7rf3tacvnMzkjasKX+AyjLnmcOTS6BqY97PYkgC77yBBMo0fLX
H8zI9UQ86oFrKEimvjJJ7dJh4nJqbYmB/PsXPXJV8TbO2mkQ91aIBXVexVxcAoHe
F17KEUzZIuy2yah6gbkTzOvsk4Jl/NCoMYGWEE+Hz06Hz/+4w0LNFv4C2rxtFN1s
XtC4LyFWLweQjWkhPP/J1N++tUyD3VLNF1NdsH7NpXQ1JgmVeejXb4X8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6mI710QPM3ewzj+NPRfnflRYqtMB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCnQvFXV
x1j+s0vNIv0WB4ywycPwZNcVhppsQGRHQJvuBpsQ6475vB8s07teplW4wsu8SBrO
7K1dl3s73KopItv7ryE3Or0PZEpAv10jrwyH1Sgc+jwCfdQzF9tlJUwjjbJ+hbzy
JoSg/W9N1FVoSJGmvJbQOmBC7LTmgmYq6vKs6fX0YSylDDdKmDOQQx/AXiQiAbS9
EekrcWCCf1JYO8MjxcrsAVe6JQF9qHmzVvnzBnb2TSPgGsxt0h7kk9KIXDBSVIhF
HOLC+Zm1IPRB1JEPLVd61T7yCNBf6yd9en/frrrKse0bnA6X45Cdyu/CGy6mgEPE
vEprVQiUEiFRPA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:30 2025 by rpki-client