Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: H7xil7ZlxDWTZHG/ao1hmYuheq8jHhRr0KMkdZxF9ng=
Subject key identifier: 23:AA:06:C6:2B:10:6B:99:85:B8:01:B5:AE:A1:68:F7:93:87:CC:AE
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 019658A6B27225F0E9084E3C22C3C185A022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 096A
Signing time: Mon 21 Apr 2025 14:00:41 +0000
Manifest this update: Mon 21 Apr 2025 14:00:41 +0000
Manifest next update: Tue 22 Apr 2025 14:00:41 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: WHNBQBorfB8VP5ULkO7YUm5ojcf/aPRTSQBekOt7cl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:b2:72:25:f0:e9:08:4e:3c:22:c3:c1:85:a0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Apr 21 14:00:41 2025 GMT
Not After : Apr 22 14:00:41 2025 GMT
Subject: CN=23aa06c62b106b9985b801b5aea168f79387ccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:10:6b:2d:20:97:a1:22:29:0b:b2:72:1d:
27:a7:0a:34:14:14:72:19:07:b3:b0:d9:cc:d1:d5:
c6:0b:d8:23:5f:37:51:d3:6b:01:65:be:50:f0:89:
6e:40:f0:d3:83:f4:a2:60:42:80:38:63:ed:0d:2a:
13:f4:8e:2d:ce:30:70:96:15:b9:43:09:b9:20:c6:
31:e1:ef:31:a8:ea:d8:2c:ee:e6:74:fd:f8:2c:c0:
06:36:9c:68:ee:df:5c:9c:f0:ba:68:19:5c:b5:aa:
3f:7c:dc:24:e0:33:d3:69:15:a2:3a:4c:b8:be:01:
e4:ac:4c:26:e6:c9:ce:7d:b8:cb:72:c5:1f:db:b8:
c5:18:7b:e3:1c:46:80:07:39:ca:a8:f5:d4:28:cc:
5f:4e:95:3b:8b:cd:85:55:da:fc:9e:1f:5e:d1:8f:
ac:b4:2f:13:f6:08:67:13:91:4e:6d:04:67:37:de:
26:5d:f6:0c:48:d7:ea:b2:a1:96:2a:c7:47:74:ee:
fd:6b:3b:38:57:e2:3c:bd:50:d0:d0:26:32:81:f0:
04:e0:db:e7:b6:98:dc:ab:b9:c0:3d:0d:b4:86:ef:
28:f9:bc:cb:a8:89:62:b0:83:63:7b:f9:55:2f:1c:
08:a5:fc:b4:5c:51:10:4a:da:22:ff:d8:54:4e:1d:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:06:C6:2B:10:6B:99:85:B8:01:B5:AE:A1:68:F7:93:87:CC:AE
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f5:43:e5:ba:cf:9a:fc:0d:76:a8:89:82:82:bb:7d:9b:3c:
d0:79:cb:51:93:6c:91:6b:d7:b4:99:8f:d5:fd:c8:bb:d8:3a:
87:60:b8:17:90:16:fd:45:11:c3:3e:b9:90:a0:00:65:3f:72:
e7:5a:2f:40:0f:01:13:94:47:90:4b:83:0d:a3:35:8c:f5:7b:
bd:f3:9b:3c:77:78:a0:eb:a4:80:85:fa:bf:05:ba:11:5f:a0:
5d:16:77:19:e8:fc:72:89:4b:97:99:ba:b4:13:33:3c:a5:4c:
d8:c9:68:21:ab:58:09:82:07:ef:81:d2:c3:a7:f3:82:77:31:
67:b4:3d:c4:0b:24:21:9c:52:76:e8:97:84:79:be:c5:f2:24:
cb:42:82:b2:a4:79:69:8f:70:95:14:87:f2:59:27:16:25:96:
27:bd:3e:93:3e:d6:be:d5:03:c4:df:d6:a9:30:a1:a2:0e:93:
b9:83:57:f1:ce:a2:5e:61:d8:6b:1f:1f:f8:f1:93:81:2c:6f:
1f:50:26:7e:5a:da:15:34:b0:71:10:87:c5:5b:15:ec:f9:ee:
4e:f9:26:ef:c9:02:14:bb:c0:3f:db:b8:ef:8b:a5:92:19:01:
e4:f6:d9:2b:8a:3f:bb:13:09:43:7b:35:33:9b:6e:83:3d:ab:
7e:83:61:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYprJyJfDpCE48IsPBhaAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyMjllNzNjZTZiYjE5NmQ2NWMwYmVmMTE5NTYwNjU3
YTM3MjAwHhcNMjUwNDIxMTQwMDQxWhcNMjUwNDIyMTQwMDQxWjAzMTEwLwYDVQQD
EygyM2FhMDZjNjJiMTA2Yjk5ODViODAxYjVhZWExNjhmNzkzODdjY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDYQay0gl6EiKQuych0npwo0FBRy
GQezsNnM0dXGC9gjXzdR02sBZb5Q8IluQPDTg/SiYEKAOGPtDSoT9I4tzjBwlhW5
Qwm5IMYx4e8xqOrYLO7mdP34LMAGNpxo7t9cnPC6aBlctao/fNwk4DPTaRWiOky4
vgHkrEwm5snOfbjLcsUf27jFGHvjHEaABznKqPXUKMxfTpU7i82FVdr8nh9e0Y+s
tC8T9ghnE5FObQRnN94mXfYMSNfqsqGWKsdHdO79azs4V+I8vVDQ0CYygfAE4Nvn
tpjcq7nAPQ20hu8o+bzLqIlisINje/lVLxwIpfy0XFEQStoi/9hUTh0HPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOqBsYrEGuZhbgBta6haPeTh8yuMB8GA1UdIwQY
MBaAFMU7Ip5zzmuxltZcC+8RlWBlejcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEt
NjM3MjhiMGZhMTA4LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEtNjM3MjhiMGZhMTA4
LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfVD5brP
mvwNdqiJgoK7fZs80HnLUZNskWvXtJmP1f3Iu9g6h2C4F5AW/UURwz65kKAAZT9y
51ovQA8BE5RHkEuDDaM1jPV7vfObPHd4oOukgIX6vwW6EV+gXRZ3Gej8colLl5m6
tBMzPKVM2MloIatYCYIH74HSw6fzgncxZ7Q9xAskIZxSduiXhHm+xfIky0KCsqR5
aY9wlRSH8lknFiWWJ70+kz7WvtUDxN/WqTChog6TuYNX8c6iXmHYax8f+PGTgSxv
H1AmflraFTSwcRCHxVsV7PnuTvkm78kCFLvAP9u474ulkhkB5PbZK4o/uxMJQ3s1
M5tugz2rfoNhSA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:07 2025 by rpki-client