Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: NOmiU2TT4NIxEg20xt9/1233k+Ry0eCN3Wz0NPlj8bk=
Subject key identifier: BE:89:93:BF:A1:F3:98:F1:02:20:CC:B2:A5:3B:01:D1:C2:B4:E1:D6
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019613580795FDB9771F062FB5EB1553599D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 051B
Signing time: Tue 08 Apr 2025 03:00:58 +0000
Manifest this update: Tue 08 Apr 2025 03:00:58 +0000
Manifest next update: Wed 09 Apr 2025 03:00:58 +0000
Files and hashes: 1: QEss9zLOzbnk5Xa_0K4YXbMb5qY.roa (hash: OBsJALGCyyQG7Ejkwlv6+1osaKxY665jLogVGloKmd4=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: yn7haWta2/UTSPJ3pT9+exCczXrB6U8yFXMTKvjUByY=)
3: tCB14kGV6U2NGcyfByN7-DomVJ8.roa (hash: UZ1VDBkhzAvTXI924h/1409nf6LFWjypU3ljSY/BZyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:07:95:fd:b9:77:1f:06:2f:b5:eb:15:53:59:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Apr 8 03:00:58 2025 GMT
Not After : Apr 9 03:00:58 2025 GMT
Subject: CN=be8993bfa1f398f10220ccb2a53b01d1c2b4e1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:c5:c0:4e:f5:5c:52:44:86:e8:5b:ac:a7:
d1:91:5f:4e:60:e6:f0:72:36:d7:66:6c:b5:be:b8:
02:80:5a:db:46:39:36:c9:74:88:7f:0c:95:1d:4b:
1f:ed:e1:8a:2f:4e:24:5f:ac:ca:1e:1c:e7:06:8c:
92:31:86:7c:27:00:fd:ba:e0:4f:c5:22:cc:59:88:
62:38:cd:48:b8:f1:01:04:fa:cf:f7:c3:69:d2:11:
40:9e:e7:76:70:4a:35:97:cc:3c:fc:b9:ad:77:a9:
c4:8f:3d:b6:9f:a2:65:ae:15:30:5f:f1:d3:08:22:
3e:c8:98:87:bd:fc:f4:72:e3:a8:6a:0e:7a:db:60:
47:de:de:f4:83:e4:38:b3:38:23:e1:85:2e:8c:cf:
8f:4e:85:e0:84:7f:59:7f:6e:3a:8d:aa:83:29:9c:
69:98:70:56:b2:19:0b:3a:44:89:b3:d7:b0:f3:02:
0b:70:d9:02:3f:4b:9c:92:af:e8:fe:8f:c6:7e:47:
0e:f0:ec:74:ca:03:d4:22:cb:20:b5:51:a2:99:48:
a1:7b:94:83:ee:a8:4e:8b:8c:19:0d:d6:97:fc:a3:
d8:e0:3c:85:d8:69:6a:78:ab:a9:d4:a8:a3:7b:68:
0d:8c:2a:19:7a:e0:dd:ca:03:be:df:fc:64:01:d7:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:93:BF:A1:F3:98:F1:02:20:CC:B2:A5:3B:01:D1:C2:B4:E1:D6
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:80:2d:30:7c:b5:95:e9:d6:5b:1c:36:bb:36:9e:82:ce:2f:
20:b0:71:a0:c7:d4:f9:a8:0e:c4:d8:93:2f:d5:0e:10:4a:de:
ef:66:fb:ba:7e:89:64:3f:7b:f9:d1:ea:29:4d:8b:b8:72:30:
7a:ed:12:87:06:b2:ee:a7:4f:ae:8a:fa:c8:96:cf:b7:6f:86:
70:4a:c5:b6:65:b6:cb:9d:e9:f9:13:21:30:58:c1:95:56:28:
db:d8:bc:03:7e:84:02:ff:99:dc:cf:61:fb:cf:bf:5c:08:e6:
ba:13:82:3a:4e:7d:c2:3a:75:e6:0d:05:99:a0:14:b9:d3:a4:
d3:b1:b6:4a:be:18:81:ab:60:70:17:41:6a:1b:ea:15:86:8c:
a4:f2:b8:98:bf:26:44:4c:eb:b1:4c:c8:e1:e7:95:f3:da:45:
4b:ae:95:05:13:57:f2:06:8d:16:aa:de:c2:98:9a:83:21:a8:
89:8b:08:02:77:5b:21:35:cd:5f:43:0f:9c:1d:d2:ae:e5:d4:
e1:98:79:45:ae:4a:83:84:b7:13:d6:bd:b3:e8:9d:99:2c:e7:
cf:f4:be:84:e0:ea:ca:20:b4:2a:1e:45:0b:e4:d5:78:0c:9c:
f3:24:c8:c0:47:04:17:70:ca:3a:de:8d:97:d2:1a:ea:ee:37:
bf:55:04:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTWAeV/bl3HwYvtesVU1mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjUwNDA4MDMwMDU4WhcNMjUwNDA5MDMwMDU4WjAzMTEwLwYDVQQD
EyhiZTg5OTNiZmExZjM5OGYxMDIyMGNjYjJhNTNiMDFkMWMyYjRlMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRvFwE71XFJEhuhbrKfRkV9OYObw
cjbXZmy1vrgCgFrbRjk2yXSIfwyVHUsf7eGKL04kX6zKHhznBoySMYZ8JwD9uuBP
xSLMWYhiOM1IuPEBBPrP98Np0hFAnud2cEo1l8w8/Lmtd6nEjz22n6JlrhUwX/HT
CCI+yJiHvfz0cuOoag5622BH3t70g+Q4szgj4YUujM+PToXghH9Zf246jaqDKZxp
mHBWshkLOkSJs9ew8wILcNkCP0uckq/o/o/GfkcO8Ox0ygPUIssgtVGimUihe5SD
7qhOi4wZDdaX/KPY4DyF2GlqeKup1Kije2gNjCoZeuDdygO+3/xkAdc6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6Jk7+h85jxAiDMsqU7AdHCtOHWMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6IAtMHy1
lenWWxw2uzaegs4vILBxoMfU+agOxNiTL9UOEEre72b7un6JZD97+dHqKU2LuHIw
eu0Shway7qdPror6yJbPt2+GcErFtmW2y53p+RMhMFjBlVYo29i8A36EAv+Z3M9h
+8+/XAjmuhOCOk59wjp15g0FmaAUudOk07G2Sr4YgatgcBdBahvqFYaMpPK4mL8m
REzrsUzI4eeV89pFS66VBRNX8gaNFqrewpiagyGoiYsIAndbITXNX0MPnB3SruXU
4Zh5Ra5Kg4S3E9a9s+idmSznz/S+hODqyiC0Kh5FC+TVeAyc8yTIwEcEF3DKOt6N
l9Ia6u43v1UEkg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:48:58 2025 by rpki-client