Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File: xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier: sCkKMU3C9DzrIig74P2djPZDxwt8ZpEoDEUuYjVrKO0=
Subject key identifier: 22:98:F4:C7:83:64:8D:67:0B:34:EE:0B:CD:B2:89:5E:CF:EB:3D:C3
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019613585F0C26AC2EB57BE0835D97E3759F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number: 14DF
Signing time: Tue 08 Apr 2025 03:01:20 +0000
Manifest this update: Tue 08 Apr 2025 03:01:20 +0000
Manifest next update: Wed 09 Apr 2025 03:01:20 +0000
Files and hashes: 1: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: noCwL/WMThzYxobnRisGq09N9OvbyF9VM6KqHdIUQ9A=)
2: znlmvW2DpaFnQW1nyRCgCW8WLGw.roa (hash: YJSRBnkvLzhRF6OldluTcKQjvHWbbSsxO+vBSGh4+Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:5f:0c:26:ac:2e:b5:7b:e0:83:5d:97:e3:75:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Apr 8 03:01:20 2025 GMT
Not After : Apr 9 03:01:20 2025 GMT
Subject: CN=2298f4c783648d670b34ee0bcdb2895ecfeb3dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:cb:62:5f:fa:8d:80:b3:94:c2:4b:eb:e8:
8c:d1:d4:7e:a6:b4:14:22:b2:a1:d8:2c:08:0f:60:
7a:53:07:3a:68:11:89:a1:6a:fc:66:bf:45:72:ae:
0b:fc:f1:9a:be:c9:9d:d0:40:04:d9:1c:07:ef:b5:
cf:10:b6:ef:49:e7:52:a1:7c:65:b7:ff:c2:70:be:
e6:96:77:53:48:43:9c:cb:55:5f:5a:15:b6:49:41:
ad:3b:07:a0:ac:c1:01:a9:61:31:95:65:84:7e:7b:
77:3c:0b:2a:78:4e:89:1e:d8:90:0a:f9:31:2a:09:
52:2e:e3:e8:c6:d7:89:29:6a:2a:35:81:52:04:c6:
82:d5:43:04:be:4e:fe:6c:4b:74:1c:7e:79:f8:bf:
1e:aa:85:83:56:34:c6:2b:b3:5e:85:73:75:8c:39:
4d:f0:3b:7d:76:5d:68:a8:94:91:29:3b:06:5d:18:
9e:d7:05:bb:b2:02:72:d6:6b:bf:00:b2:eb:a1:cc:
63:cd:a0:84:8e:cd:37:23:2d:63:90:6f:94:f4:8b:
96:74:78:d1:69:ae:c3:de:2b:f9:04:23:b4:c5:b1:
0e:3b:ec:01:da:49:6f:89:37:86:70:7c:db:9c:cb:
ef:f8:55:6d:26:56:fd:05:0a:65:ae:97:82:10:d9:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:F4:C7:83:64:8D:67:0B:34:EE:0B:CD:B2:89:5E:CF:EB:3D:C3
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:57:16:79:52:29:66:73:76:75:53:31:01:c5:47:a9:3f:
f4:6e:44:af:4a:b2:09:c1:9c:76:2a:f9:4f:be:63:cc:45:8f:
d2:ed:51:c8:d2:53:4e:7c:1f:47:7b:89:aa:2b:cc:57:85:9a:
3b:87:25:1c:4a:53:13:9c:26:00:65:57:d4:e4:94:35:f8:a1:
a9:3c:dc:72:5c:c8:85:8d:c1:a7:26:e6:3e:b1:34:da:92:63:
4e:be:79:c9:9b:59:15:97:e8:9c:cd:ee:91:00:de:65:cd:86:
7a:4b:93:8e:14:a6:11:bf:38:b0:57:4a:61:89:03:82:f5:a7:
e9:5f:1c:fe:fd:77:39:42:31:64:10:fd:a0:e3:6f:c8:cf:ca:
38:78:ca:6b:4c:d6:3e:81:4c:bd:47:e2:7a:ee:ac:ec:73:4b:
c4:f9:0d:0e:d7:93:76:0f:7b:0f:1d:6a:42:57:75:61:6a:65:
ec:5f:25:fd:c3:e3:4e:75:8f:b0:b1:82:cc:2f:b2:d5:72:10:
9d:db:69:2e:d3:b7:4f:80:89:a4:c0:c9:2d:80:e1:f5:49:2e:
53:d9:ff:bc:68:64:72:b3:56:b1:b4:20:f6:cd:e1:d8:5a:9f:
c8:d0:28:40:70:54:2d:4c:da:dc:17:a8:73:83:08:be:87:a1:
e2:db:0e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTWF8MJqwutXvgg12X43WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjUwNDA4MDMwMTIwWhcNMjUwNDA5MDMwMTIwWjAzMTEwLwYDVQQD
EygyMjk4ZjRjNzgzNjQ4ZDY3MGIzNGVlMGJjZGIyODk1ZWNmZWIzZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrrLYl/6jYCzlMJL6+iM0dR+prQU
IrKh2CwID2B6Uwc6aBGJoWr8Zr9Fcq4L/PGavsmd0EAE2RwH77XPELbvSedSoXxl
t//CcL7mlndTSEOcy1VfWhW2SUGtOwegrMEBqWExlWWEfnt3PAsqeE6JHtiQCvkx
KglSLuPoxteJKWoqNYFSBMaC1UMEvk7+bEt0HH55+L8eqoWDVjTGK7NehXN1jDlN
8Dt9dl1oqJSRKTsGXRie1wW7sgJy1mu/ALLrocxjzaCEjs03Iy1jkG+U9IuWdHjR
aa7D3iv5BCO0xbEOO+wB2klviTeGcHzbnMvv+FVtJlb9BQplrpeCENmkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKY9MeDZI1nCzTuC82yiV7P6z3DMB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCBXFnlS
KWZzdnVTMQHFR6k/9G5Er0qyCcGcdir5T75jzEWP0u1RyNJTTnwfR3uJqivMV4Wa
O4clHEpTE5wmAGVX1OSUNfihqTzcclzIhY3BpybmPrE02pJjTr55yZtZFZfonM3u
kQDeZc2GekuTjhSmEb84sFdKYYkDgvWn6V8c/v13OUIxZBD9oONvyM/KOHjKa0zW
PoFMvUfieu6s7HNLxPkNDteTdg97Dx1qQld1YWpl7F8l/cPjTnWPsLGCzC+y1XIQ
ndtpLtO3T4CJpMDJLYDh9UkuU9n/vGhkcrNWsbQg9s3h2FqfyNAoQHBULUza3Beo
c4MIvoeh4tsO4A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:52:55 2025 by rpki-client