Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: +I9aQLpqPkevn6tLK6A/SZav1sR+ENSb0+/v3h/RcNQ=
Subject key identifier: 11:37:88:D7:20:B0:66:BF:C8:DB:D3:A2:44:A2:B4:8F:F7:96:13:3F
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019653B788E97E09A1AC96BA756BB3592FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:59 +0000
Manifest this update: Sun 20 Apr 2025 15:00:59 +0000
Manifest next update: Mon 21 Apr 2025 15:00:59 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: vRlpggMKCaWW8AgbG3SvBLPu4/wWfj8NZOxssBRuYPU=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:88:e9:7e:09:a1:ac:96:ba:75:6b:b3:59:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Apr 20 15:00:59 2025 GMT
Not After : Apr 21 15:00:59 2025 GMT
Subject: CN=113788d720b066bfc8dbd3a244a2b48ff796133f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:f7:0e:92:a8:4f:6d:c8:0a:0c:d9:25:47:
b3:29:23:cc:ab:05:a6:fc:12:df:aa:d3:9d:5d:fd:
89:ba:a9:20:89:2f:db:cd:e7:b5:9a:f0:a4:bc:7d:
b6:56:49:92:a7:73:dd:e2:a2:dd:5c:13:cb:bc:24:
32:20:0e:b8:c6:8b:3b:49:4e:ad:dc:af:63:86:fd:
3e:6e:a3:f4:43:98:4f:5d:41:e2:f5:95:0a:8e:ce:
54:d5:cd:95:3c:e5:fe:43:96:c5:0e:e8:02:45:a2:
43:dc:9b:e4:55:d7:5d:7d:fa:6a:e3:89:6e:76:f3:
96:ba:cb:36:dc:68:d9:ec:05:c1:8d:f5:05:57:d6:
af:7f:fa:dc:00:05:a8:04:2a:cf:1a:cf:ba:9d:4b:
56:b0:c1:8e:47:7b:ce:1f:d0:d9:83:68:74:c7:a9:
0c:c9:c0:60:b0:9f:9c:6b:bd:77:45:3c:70:f0:c9:
d2:18:c2:d1:13:31:4c:9c:81:01:ff:9d:38:10:8f:
78:11:f0:5e:6f:14:0f:93:1d:bf:cf:ef:dc:b5:42:
f4:98:90:49:ca:f8:14:cd:f3:e8:14:46:b2:ab:08:
2e:a1:3b:67:8e:8c:36:f0:86:68:03:fd:d5:38:44:
3c:81:32:bd:57:62:c7:b8:2f:6a:6f:e4:60:4b:ff:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:88:D7:20:B0:66:BF:C8:DB:D3:A2:44:A2:B4:8F:F7:96:13:3F
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2a:49:55:d8:d5:f5:0d:52:cf:df:6f:e2:50:dc:17:51:b0:
11:48:0f:5f:4a:70:ab:a1:4d:c5:51:b6:5f:1c:08:d2:b5:1d:
de:4a:a8:f5:c0:18:20:a0:04:79:bf:66:b2:0f:c2:04:7b:ad:
51:1f:a6:a5:53:21:cb:dc:56:e5:8a:ea:c9:6b:2c:0a:80:2a:
f3:03:42:40:49:69:26:a4:72:bf:4d:55:8d:83:0c:1f:ab:84:
1f:1b:e2:f6:88:66:ce:7c:e0:39:00:a6:e2:23:df:7b:56:fa:
fb:2e:dc:4e:0c:3e:c8:1d:c9:d0:dc:f2:94:c9:ab:11:98:d4:
0b:5e:1a:ab:f5:87:48:3a:09:f9:62:a3:a8:04:b8:82:f2:01:
d8:db:5c:7b:6f:49:88:cb:d8:f8:9f:65:43:e3:06:ab:79:00:
52:5f:39:28:9e:26:3c:09:9c:bf:fa:79:74:27:82:bd:bf:4c:
a0:7b:ef:89:ce:d2:d0:f1:ee:89:9e:d9:bc:2a:f2:fe:40:64:
4b:78:a3:bf:92:3f:87:71:4d:53:c5:b4:be:e4:dd:83:05:f4:
20:ad:7f:51:bc:72:5f:21:ef:44:38:34:aa:96:d5:1f:05:6e:
ba:f7:f3:8b:8e:26:60:4f:5e:94:f7:e4:75:cb:43:f1:b5:60:
d2:d5:c9:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTt4jpfgmhrJa6dWuzWS/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw
OTAzMWEwHhcNMjUwNDIwMTUwMDU5WhcNMjUwNDIxMTUwMDU5WjAzMTEwLwYDVQQD
EygxMTM3ODhkNzIwYjA2NmJmYzhkYmQzYTI0NGEyYjQ4ZmY3OTYxMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+X3DpKoT23ICgzZJUezKSPMqwWm
/BLfqtOdXf2JuqkgiS/bzee1mvCkvH22VkmSp3Pd4qLdXBPLvCQyIA64xos7SU6t
3K9jhv0+bqP0Q5hPXUHi9ZUKjs5U1c2VPOX+Q5bFDugCRaJD3JvkVdddffpq44lu
dvOWuss23GjZ7AXBjfUFV9avf/rcAAWoBCrPGs+6nUtWsMGOR3vOH9DZg2h0x6kM
ycBgsJ+ca713RTxw8MnSGMLREzFMnIEB/504EI94EfBebxQPkx2/z+/ctUL0mJBJ
yvgUzfPoFEayqwguoTtnjow28IZoA/3VOEQ8gTK9V2LHuC9qb+RgS//oYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE3iNcgsGa/yNvTokSitI/3lhM/MB8GA1UdIwQY
MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt
YjZmN2FlZDg1NmMwLzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw
LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSpJVdjV
9Q1Sz99v4lDcF1GwEUgPX0pwq6FNxVG2XxwI0rUd3kqo9cAYIKAEeb9msg/CBHut
UR+mpVMhy9xW5YrqyWssCoAq8wNCQElpJqRyv01VjYMMH6uEHxvi9ohmznzgOQCm
4iPfe1b6+y7cTgw+yB3J0NzylMmrEZjUC14aq/WHSDoJ+WKjqAS4gvIB2Ntce29J
iMvY+J9lQ+MGq3kAUl85KJ4mPAmcv/p5dCeCvb9MoHvvic7S0PHuiZ7ZvCry/kBk
S3ijv5I/h3FNU8W0vuTdgwX0IK1/UbxyXyHvRDg0qpbVHwVuuvfzi44mYE9elPfk
dctD8bVg0tXJpA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:53 2025 by rpki-client