Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
File: xMAyk16WM9-LGZJd8L0luBxoY7c.mft (raw, json)
Hash identifier: xR3p5+Lxmx7bGREiHVL3yrX7xEo3jY3OSWKezX/QDCo=
Subject key identifier: 37:8A:A1:5E:C4:81:9B:22:41:D1:C3:7F:79:4B:45:5F:64:9D:A7:9A
Authority key identifier: C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
Certificate issuer: /CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Certificate serial: 01965424E2AD4AC4EFB2D9C340B05484BCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 17:00:25 +0000
Manifest this update: Sun 20 Apr 2025 17:00:25 +0000
Manifest next update: Mon 21 Apr 2025 17:00:25 +0000
Files and hashes: 1: ghEtezlgRxtM8_A6BWhHBoi7MAA.roa (hash: XbPqTVhQ0C1rkf6WQ+W7x28ipcXojyuCGKdg2k0Xwvo=)
2: xMAyk16WM9-LGZJd8L0luBxoY7c.crl (hash: LF+Ypn6+zXq0Q0IryVZA3HH0/9/KUvZ8xTX6rQW/rEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:e2:ad:4a:c4:ef:b2:d9:c3:40:b0:54:84:bc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c032935e9633df8b19925df0bd25b81c6863b7
Validity
Not Before: Apr 20 17:00:25 2025 GMT
Not After : Apr 21 17:00:25 2025 GMT
Subject: CN=378aa15ec4819b2241d1c37f794b455f649da79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:04:d9:69:d5:a0:0d:d8:39:a3:b1:4f:3f:
50:21:4a:93:14:17:c0:d9:b9:71:8e:b5:97:c4:8f:
2b:80:70:d2:87:ef:18:fb:e6:ed:44:04:59:06:c5:
4f:54:70:87:6f:f2:f9:2c:cb:d0:3b:5d:4a:c0:f8:
fa:a3:1f:8e:ed:42:9c:c2:51:c5:0d:8e:7c:d0:07:
0d:54:93:30:44:69:cf:f5:bc:e5:09:83:ab:7c:77:
65:5d:6c:16:ce:11:94:ef:3c:e0:47:92:f1:d8:e5:
18:5a:f3:16:fc:c4:41:19:80:e0:1c:69:52:ed:60:
96:48:a9:48:bc:7c:22:c5:92:23:25:dc:fe:dd:d9:
46:28:64:0e:1b:d9:0c:9b:b3:36:f4:7c:02:e1:3e:
29:49:c0:89:fe:36:66:b0:bd:ec:9a:42:ed:e3:d6:
47:67:67:7e:a1:af:89:e6:76:2b:ba:1a:b7:5c:e6:
d3:7c:8e:1b:e1:73:91:a7:46:73:c1:ea:31:77:1a:
78:f6:12:23:29:14:bf:c4:a7:0b:a4:7a:83:8a:f3:
4a:50:e4:c5:b1:34:fe:b9:3a:cc:79:b4:05:ff:0f:
7f:9e:cc:3e:16:77:d2:23:34:ca:bc:a5:cb:5e:26:
49:cf:05:8f:d5:36:92:f9:af:f3:c7:0f:4d:4a:49:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8A:A1:5E:C4:81:9B:22:41:D1:C3:7F:79:4B:45:5F:64:9D:A7:9A
X509v3 Authority Key Identifier:
keyid:C4:C0:32:93:5E:96:33:DF:8B:19:92:5D:F0:BD:25:B8:1C:68:63:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMAyk16WM9-LGZJd8L0luBxoY7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e00139-edb6-411b-a9b2-9ea9ca1742db/1/xMAyk16WM9-LGZJd8L0luBxoY7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7d:60:83:24:fa:f7:af:41:a7:47:bb:07:e2:95:ae:3b:40:
ec:29:8c:4c:c5:ea:a6:0f:8e:02:03:25:79:cf:bc:ef:43:e0:
59:33:be:71:5d:ca:8f:13:79:fa:1c:88:b4:b5:0e:c8:dd:ec:
78:e1:12:de:1f:c5:6b:51:70:f5:5c:21:70:79:f3:0c:bb:fd:
f3:cb:c6:b2:85:79:26:82:cd:8c:a1:73:b0:00:ce:07:91:2d:
d3:a6:dd:27:2d:ab:ea:e3:cf:de:95:8a:18:7b:5f:28:cd:ed:
c9:5a:f1:c5:c4:3b:60:7b:ca:e8:ea:8b:3d:6a:b0:96:c6:da:
96:3d:fb:1a:fa:2d:2c:6c:e3:c3:63:92:e6:1b:98:29:68:52:
fe:07:c3:33:b9:b4:b5:22:df:fc:5b:3c:47:ef:54:7a:a7:50:
1f:bf:ce:0d:51:05:32:49:46:95:09:57:d7:a9:27:f3:2d:20:
23:ed:9c:2f:6d:ef:81:f1:bb:2c:f8:10:2c:50:57:c5:0c:23:
4b:3d:7b:e6:4f:42:76:ba:db:1d:b9:d7:af:63:ca:a3:c8:9a:
58:01:15:18:41:97:1c:de:69:dc:7c:b1:75:b0:28:9f:1a:7c:
19:53:54:ad:2b:7a:1c:c2:7a:00:6a:7c:59:94:37:61:51:6c:
00:6a:bb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJOKtSsTvstnDQLBUhLzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YzAzMjkzNWU5NjMzZGY4YjE5OTI1ZGYwYmQyNWI4MWM2
ODYzYjcwHhcNMjUwNDIwMTcwMDI1WhcNMjUwNDIxMTcwMDI1WjAzMTEwLwYDVQQD
EygzNzhhYTE1ZWM0ODE5YjIyNDFkMWMzN2Y3OTRiNDU1ZjY0OWRhNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2AE2WnVoA3YOaOxTz9QIUqTFBfA
2blxjrWXxI8rgHDSh+8Y++btRARZBsVPVHCHb/L5LMvQO11KwPj6ox+O7UKcwlHF
DY580AcNVJMwRGnP9bzlCYOrfHdlXWwWzhGU7zzgR5Lx2OUYWvMW/MRBGYDgHGlS
7WCWSKlIvHwixZIjJdz+3dlGKGQOG9kMm7M29HwC4T4pScCJ/jZmsL3smkLt49ZH
Z2d+oa+J5nYruhq3XObTfI4b4XORp0Zzweoxdxp49hIjKRS/xKcLpHqDivNKUOTF
sTT+uTrMebQF/w9/nsw+FnfSIzTKvKXLXiZJzwWP1TaS+a/zxw9NSkkJQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeKoV7EgZsiQdHDf3lLRV9knaeaMB8GA1UdIwQY
MBaAFMTAMpNeljPfixmSXfC9JbgcaGO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjIt
OWVhOWNhMTc0MmRiLzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMDAxMzktZWRiNi00MTFiLWE5YjItOWVhOWNhMTc0MmRi
LzEveE1BeWsxNldNOS1MR1pKZDhMMGx1QnhvWTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu31ggyT6
969Bp0e7B+KVrjtA7CmMTMXqpg+OAgMlec+870PgWTO+cV3KjxN5+hyItLUOyN3s
eOES3h/Fa1Fw9VwhcHnzDLv988vGsoV5JoLNjKFzsADOB5Et06bdJy2r6uPP3pWK
GHtfKM3tyVrxxcQ7YHvK6OqLPWqwlsbalj37GvotLGzjw2OS5huYKWhS/gfDM7m0
tSLf/Fs8R+9UeqdQH7/ODVEFMklGlQlX16kn8y0gI+2cL23vgfG7LPgQLFBXxQwj
Sz175k9CdrrbHbnXr2PKo8iaWAEVGEGXHN5p3HyxdbAonxp8GVNUrSt6HMJ6AGp8
WZQ3YVFsAGq7Gw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:30:05 2025 by rpki-client