Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: bM3rNuc8UhMGPHTEISsDFcBfsCjxSAmqLPHYzwhNgeA=
Subject key identifier: 6F:55:00:1F:C3:77:75:D3:C5:E8:6E:17:AD:61:4B:17:16:82:5E:BA
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0196556EB2E03F67083860C7A30E5A754A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 10A3
Signing time: Sun 20 Apr 2025 23:00:40 +0000
Manifest this update: Sun 20 Apr 2025 23:00:40 +0000
Manifest next update: Mon 21 Apr 2025 23:00:40 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: xCerbJVN/erH+iGErZji0wTokAKEHDNiP2HOa9Q8eMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:b2:e0:3f:67:08:38:60:c7:a3:0e:5a:75:4a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Apr 20 23:00:40 2025 GMT
Not After : Apr 21 23:00:40 2025 GMT
Subject: CN=6f55001fc37775d3c5e86e17ad614b1716825eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:79:41:a7:3e:d3:b2:fb:08:47:ab:00:9f:
5c:5b:a7:6e:0d:e9:94:0a:67:4b:ef:90:0d:07:02:
94:ea:53:86:43:3c:2f:65:c1:0f:fe:07:90:ea:cc:
2e:96:4d:1d:b9:19:01:27:47:47:dc:d6:75:b0:6f:
2c:e3:3c:df:21:d0:57:e8:73:13:e5:26:2e:0c:4d:
a3:65:86:91:77:0e:f5:b3:fd:1d:a4:d5:b4:32:05:
88:3a:24:9e:59:d1:02:da:c6:47:e2:09:1e:c3:53:
c6:16:65:44:f3:ea:67:b2:77:4b:fc:11:6a:c4:fb:
55:dd:33:ca:d9:c0:4e:69:38:da:df:8d:79:69:19:
a0:6a:62:4c:63:29:ba:0e:68:2c:f3:c4:51:6e:15:
0a:54:f5:8a:50:15:70:e1:78:f9:c0:22:bb:e3:df:
07:2c:b6:f9:59:62:2f:2f:a6:cb:26:85:8b:03:b3:
e5:ae:3b:42:9e:23:ed:93:34:20:d7:04:b4:e8:d4:
24:4d:3d:46:79:f3:c7:5f:d7:82:ce:a1:95:49:b7:
34:98:48:31:2c:ba:fa:a5:81:51:4e:ee:f4:0d:83:
7a:67:2c:0b:15:1e:33:85:40:9a:2e:42:1c:f3:84:
18:07:c2:05:bf:3d:69:3e:2e:d9:7e:5b:55:23:de:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:00:1F:C3:77:75:D3:C5:E8:6E:17:AD:61:4B:17:16:82:5E:BA
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:59:e8:06:49:a8:38:f4:24:26:ba:ae:a8:6d:e3:79:18:ed:
5d:ce:0e:bd:cf:8c:e3:43:e3:2c:2a:17:70:c5:2e:ad:73:7a:
80:12:26:1e:a6:7c:66:b9:d2:90:98:96:ae:2c:9b:04:0f:5f:
58:36:58:75:d8:7f:cc:4b:39:5b:8e:88:01:d8:8d:e2:ff:d5:
57:8d:eb:6f:d7:f2:68:0d:01:74:9a:d2:8e:fe:c5:dc:55:18:
93:5c:f3:66:a0:56:27:fc:62:21:95:f1:45:0d:04:06:ee:8b:
aa:7f:1f:5a:f2:42:06:d8:e0:53:7d:63:a4:0f:0c:c4:d7:a2:
90:4a:8b:41:9f:20:64:80:b4:c8:c0:e6:f2:20:31:b7:dd:dc:
a2:6f:16:5d:1b:94:1d:20:f9:97:6a:8e:48:52:e4:36:99:a4:
65:db:8a:9f:15:cb:47:03:f8:67:a9:5f:36:bf:bd:4e:33:ba:
b6:45:68:a7:ab:7a:e5:26:ae:55:e5:c8:a8:06:a8:ca:97:63:
58:d9:96:51:6a:80:98:24:53:b0:f4:43:cc:98:40:c1:47:f1:
a8:5f:ee:88:bf:bf:04:cc:e4:5a:60:fb:0d:cd:12:9b:2b:16:
2c:97:71:dc:90:96:ff:fc:54:7b:4f:ec:15:79:a2:49:bb:49:
28:b9:83:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbrLgP2cIOGDHow5adUoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjUwNDIwMjMwMDQwWhcNMjUwNDIxMjMwMDQwWjAzMTEwLwYDVQQD
Eyg2ZjU1MDAxZmMzNzc3NWQzYzVlODZlMTdhZDYxNGIxNzE2ODI1ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyR5Qac+07L7CEerAJ9cW6duDemU
CmdL75ANBwKU6lOGQzwvZcEP/geQ6swulk0duRkBJ0dH3NZ1sG8s4zzfIdBX6HMT
5SYuDE2jZYaRdw71s/0dpNW0MgWIOiSeWdEC2sZH4gkew1PGFmVE8+pnsndL/BFq
xPtV3TPK2cBOaTja3415aRmgamJMYym6Dmgs88RRbhUKVPWKUBVw4Xj5wCK7498H
LLb5WWIvL6bLJoWLA7PlrjtCniPtkzQg1wS06NQkTT1GefPHX9eCzqGVSbc0mEgx
LLr6pYFRTu70DYN6ZywLFR4zhUCaLkIc84QYB8IFvz1pPi7ZfltVI95C+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9VAB/Dd3XTxehuF61hSxcWgl66MB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVnoBkmo
OPQkJrquqG3jeRjtXc4Ovc+M40PjLCoXcMUurXN6gBImHqZ8ZrnSkJiWriybBA9f
WDZYddh/zEs5W46IAdiN4v/VV43rb9fyaA0BdJrSjv7F3FUYk1zzZqBWJ/xiIZXx
RQ0EBu6Lqn8fWvJCBtjgU31jpA8MxNeikEqLQZ8gZIC0yMDm8iAxt93com8WXRuU
HSD5l2qOSFLkNpmkZduKnxXLRwP4Z6lfNr+9TjO6tkVop6t65SauVeXIqAaoypdj
WNmWUWqAmCRTsPRDzJhAwUfxqF/uiL+/BMzkWmD7Dc0SmysWLJdx3JCW//xUe0/s
FXmiSbtJKLmDNQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:01 2025 by rpki-client