Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File: xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier: 2ZIN3EYPvvCfY3A+73ulghbl41pgx9SoKsWVjl6ZkMc=
Subject key identifier: C0:9F:60:EE:07:65:57:27:C7:46:DF:A4:1D:3C:87:B1:47:2C:93:73
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer: /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial: 0196564A592BCFC3233504D72A053C8C375E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number: 14CF
Signing time: Mon 21 Apr 2025 03:00:35 +0000
Manifest this update: Mon 21 Apr 2025 03:00:35 +0000
Manifest next update: Tue 22 Apr 2025 03:00:35 +0000
Files and hashes: 1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: LfpMgHeG94olWtFgRJ6nrbVvhrTp69HGUZlbKzrCgJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:59:2b:cf:c3:23:35:04:d7:2a:05:3c:8c:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
Validity
Not Before: Apr 21 03:00:35 2025 GMT
Not After : Apr 22 03:00:35 2025 GMT
Subject: CN=c09f60ee07655727c746dfa41d3c87b1472c9373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:c0:d3:df:b2:66:a8:c1:ba:23:3c:da:db:
e3:8a:3e:93:db:b8:fd:0a:94:2d:0a:f2:e4:43:75:
c2:89:71:ab:cd:51:c7:86:9f:c3:c3:d1:50:ef:37:
26:54:1f:b1:d7:e5:47:3a:9d:f8:87:c0:c6:ef:e4:
bd:cf:e8:07:9b:fa:f2:5f:50:68:a4:58:09:e3:b9:
bb:f8:f4:1f:7f:90:61:d2:6e:80:e5:07:b2:e4:d2:
e6:e8:c4:ce:e4:04:60:38:ff:5a:70:b2:f2:6a:f1:
4e:49:fc:38:45:4a:7b:12:ef:89:54:78:f8:e5:52:
37:a7:3a:8b:37:78:50:9a:25:f8:91:92:43:10:ca:
db:ee:b4:a9:d3:59:23:6a:29:52:b8:49:33:e2:b0:
2c:fd:b8:2e:56:98:2c:c5:a9:fc:3d:37:f7:65:9d:
e9:fd:76:e7:3b:cc:14:31:9e:e7:96:84:bd:eb:4c:
4e:30:64:1b:17:de:19:a3:26:c7:bf:2b:3f:25:d7:
35:a2:6a:e1:12:10:2d:8d:f2:16:58:fe:a7:f9:c0:
f5:d6:b5:ee:8f:9a:4a:00:03:f7:58:98:6b:f1:ba:
e1:3e:bc:d8:32:0f:d1:61:c2:5e:46:ff:5d:71:42:
ba:7b:d7:9c:07:8b:7d:05:47:17:51:8f:38:10:27:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:60:EE:07:65:57:27:C7:46:DF:A4:1D:3C:87:B1:47:2C:93:73
X509v3 Authority Key Identifier:
keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:25:90:a8:0e:49:10:c6:b1:52:5e:6b:7a:ba:9c:2d:d2:
04:df:d1:fe:8b:b7:cb:bd:d1:c9:c3:e1:62:1d:59:7f:81:38:
f4:47:19:0b:f0:65:df:ea:85:82:d4:23:c5:66:78:68:e5:5c:
7f:c8:56:e3:24:3f:6e:1f:be:05:55:4f:ed:ed:d0:6c:be:f6:
c5:74:18:d7:b4:ee:41:6c:f6:84:0e:cd:3f:67:b1:84:89:40:
42:8e:a2:cc:68:85:da:d0:36:ec:80:17:43:da:4f:70:0d:c6:
25:15:99:6b:61:7e:40:e9:4f:ae:75:2b:69:92:99:ab:10:8f:
5f:18:96:c9:19:9e:22:3e:a6:20:53:2e:d8:ad:36:56:8d:f9:
8b:f1:70:50:ee:98:5d:18:ad:39:4c:53:57:33:e7:38:cd:40:
0d:51:4d:dd:5f:9f:cd:b0:96:eb:f1:e4:dd:87:51:f9:89:86:
05:64:27:cc:fe:c1:a0:34:ff:13:de:5a:8c:d3:b0:29:dd:9e:
b7:46:d5:ed:59:95:d9:98:18:29:f1:67:a9:89:2e:fa:8c:7a:
fe:71:9c:c5:93:5f:e2:7f:f0:a5:4b:d7:be:83:47:26:86:74:
ae:92:1b:7c:0d:65:5c:09:83:59:ae:76:2f:d9:85:2b:66:88:
46:78:bc:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSlkrz8MjNQTXKgU8jDdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDAyYzU1NzU4ZmFlZTQ3MzkzOGY4MDY3YTg4OWFkNWUy
NzEyNjEwHhcNMjUwNDIxMDMwMDM1WhcNMjUwNDIyMDMwMDM1WjAzMTEwLwYDVQQD
EyhjMDlmNjBlZTA3NjU1NzI3Yzc0NmRmYTQxZDNjODdiMTQ3MmM5MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyvA09+yZqjBuiM82tvjij6T27j9
CpQtCvLkQ3XCiXGrzVHHhp/Dw9FQ7zcmVB+x1+VHOp34h8DG7+S9z+gHm/ryX1Bo
pFgJ47m7+PQff5Bh0m6A5Qey5NLm6MTO5ARgOP9acLLyavFOSfw4RUp7Eu+JVHj4
5VI3pzqLN3hQmiX4kZJDEMrb7rSp01kjailSuEkz4rAs/bguVpgsxan8PTf3ZZ3p
/XbnO8wUMZ7nloS960xOMGQbF94ZoybHvys/Jdc1omrhEhAtjfIWWP6n+cD11rXu
j5pKAAP3WJhr8brhPrzYMg/RYcJeRv9dcUK6e9ecB4t9BUcXUY84ECfdPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCfYO4HZVcnx0bfpB08h7FHLJNzMB8GA1UdIwQY
MBaAFMRALFV1j67kc5OPgGeoia1eJxJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NjRjM2MtYjU3MC00MTEzLWI0YWEt
Y2ZkZjAzMTFhZDhjLzEveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NjRjM2MtYjU3MC00MTEzLWI0YWEtY2ZkZjAzMTFhZDhj
LzEveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlb8lkKgO
SRDGsVJea3q6nC3SBN/R/ou3y73RycPhYh1Zf4E49EcZC/Bl3+qFgtQjxWZ4aOVc
f8hW4yQ/bh++BVVP7e3QbL72xXQY17TuQWz2hA7NP2exhIlAQo6izGiF2tA27IAX
Q9pPcA3GJRWZa2F+QOlPrnUraZKZqxCPXxiWyRmeIj6mIFMu2K02Vo35i/FwUO6Y
XRitOUxTVzPnOM1ADVFN3V+fzbCW6/Hk3YdR+YmGBWQnzP7BoDT/E95ajNOwKd2e
t0bV7VmV2ZgYKfFnqYku+ox6/nGcxZNf4n/wpUvXvoNHJoZ0rpIbfA1lXAmDWa52
L9mFK2aIRni83g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:40 2025 by rpki-client