Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: ik4PyGWr12ODvfeNugEOVzQk8m8J6qvUrcmqhZDDEUg=
Subject key identifier: D4:3B:E0:77:79:12:F8:CB:02:61:FA:C5:79:A1:15:84:E7:33:37:19
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 0195903DCADEFE496BC242EE3735D4B3C7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0854
Signing time: Thu 13 Mar 2025 16:02:03 +0000
Manifest this update: Thu 13 Mar 2025 16:02:03 +0000
Manifest next update: Fri 14 Mar 2025 16:02:03 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: IU54eDhUlkwWhDhJB9CGYObB+z72Pqd+Juekz9xPeaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:ca:de:fe:49:6b:c2:42:ee:37:35:d4:b3:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Mar 13 16:02:03 2025 GMT
Not After : Mar 14 16:02:03 2025 GMT
Subject: CN=d43be0777912f8cb0261fac579a11584e7333719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:5a:3e:d9:01:ea:dc:3f:5a:4f:19:4d:be:
10:6f:ed:d4:62:b9:9a:7a:63:57:f4:09:4d:d9:0a:
e4:58:6b:d5:31:f5:9f:55:86:b2:d8:0a:44:20:60:
49:59:e3:fc:54:1b:93:8e:c7:7f:f6:ff:7e:12:b8:
a6:ed:a6:0c:fd:d7:08:18:73:da:b0:d0:43:4a:d4:
d9:35:68:2a:22:ed:9b:06:2b:fa:ca:aa:06:72:0d:
6e:d0:c5:7d:06:42:6f:75:28:55:c9:d1:4c:ad:ed:
a7:1b:79:0e:3f:91:bd:f5:43:ea:c9:05:1e:82:03:
a8:5b:e2:6f:03:0a:05:bf:61:94:77:4b:91:eb:00:
1b:07:38:7b:ee:bb:8b:8d:49:95:e1:89:f4:f4:cd:
6a:2c:f7:bf:d4:5c:dd:56:d3:3e:bb:62:3e:85:02:
c0:76:ca:d9:2b:92:e1:4b:dd:d2:0d:7f:7f:52:cc:
28:78:ec:a5:10:5f:af:2a:dc:dd:31:51:a9:ed:62:
f3:8b:93:06:48:ba:50:d2:3f:23:b2:62:7d:30:de:
3f:10:0e:48:96:0f:db:4c:41:f2:ca:a9:eb:2a:d0:
10:49:3f:ff:b4:7b:6a:56:ca:02:a2:25:99:07:96:
85:7e:6e:34:b9:5b:6f:af:2e:88:5a:2a:71:1b:30:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:E0:77:79:12:F8:CB:02:61:FA:C5:79:A1:15:84:E7:33:37:19
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8f:d0:59:02:80:ee:db:5d:52:8c:21:1c:d3:2a:18:60:c2:
a6:f2:5c:9c:81:24:e9:b4:4d:41:e4:45:b3:fc:11:4f:ec:32:
95:df:40:7c:9c:e9:f1:4f:74:a0:d0:d7:b1:e4:c6:48:25:ea:
7f:e2:1e:56:9a:89:55:ac:b2:f7:66:01:82:4b:47:f3:6e:ab:
16:0b:83:97:29:16:45:eb:f0:a6:c3:10:c3:e6:5b:35:6f:ab:
ae:b0:c8:cd:eb:ce:b4:db:1d:cc:7f:6a:9d:a8:4a:a8:89:f1:
99:60:21:b4:3d:cb:1c:48:75:97:b3:a7:29:cc:be:82:fc:67:
d0:b7:75:20:86:85:8f:09:b0:3d:67:c7:5a:ba:2b:b3:13:62:
e7:dc:a5:82:05:04:12:31:ad:a0:52:cb:47:03:87:42:9f:0c:
27:80:d7:75:5c:bf:d8:28:e1:24:a1:c0:5f:1d:43:1c:57:91:
38:b2:09:67:ae:62:11:c7:b6:f6:e3:2d:37:40:61:9f:fe:56:
e4:59:34:26:cb:30:24:ef:c6:3a:b9:3a:5e:82:35:db:48:9c:
17:76:a1:eb:25:e3:9a:4f:e1:a9:61:f5:58:4b:d4:56:3a:6f:
a5:1b:b0:57:4d:a6:ea:c0:67:8e:9e:38:93:52:1f:d1:4a:a1:
ac:0e:4b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPcre/klrwkLuNzXUs8fKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzQyM2I2MDNhNjIwM2NiOTI4YzhkZWYzZTU4Y2Q4ZGFh
ZmQ2ODgwHhcNMjUwMzEzMTYwMjAzWhcNMjUwMzE0MTYwMjAzWjAzMTEwLwYDVQQD
EyhkNDNiZTA3Nzc5MTJmOGNiMDI2MWZhYzU3OWExMTU4NGU3MzMzNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth9aPtkB6tw/Wk8ZTb4Qb+3UYrma
emNX9AlN2QrkWGvVMfWfVYay2ApEIGBJWeP8VBuTjsd/9v9+Erim7aYM/dcIGHPa
sNBDStTZNWgqIu2bBiv6yqoGcg1u0MV9BkJvdShVydFMre2nG3kOP5G99UPqyQUe
ggOoW+JvAwoFv2GUd0uR6wAbBzh77ruLjUmV4Yn09M1qLPe/1FzdVtM+u2I+hQLA
dsrZK5LhS93SDX9/UswoeOylEF+vKtzdMVGp7WLzi5MGSLpQ0j8jsmJ9MN4/EA5I
lg/bTEHyyqnrKtAQST//tHtqVsoCoiWZB5aFfm40uVtvry6IWipxGzB0XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ74Hd5EvjLAmH6xXmhFYTnMzcZMB8GA1UdIwQY
MBaAFF40I7YDpiA8uSjI3vPljNjar9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMt
Y2RjZTY2N2QzY2E3LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMtY2RjZTY2N2QzY2E3
LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY/QWQKA
7ttdUowhHNMqGGDCpvJcnIEk6bRNQeRFs/wRT+wyld9AfJzp8U90oNDXseTGSCXq
f+IeVpqJVayy92YBgktH826rFguDlykWRevwpsMQw+ZbNW+rrrDIzevOtNsdzH9q
nahKqInxmWAhtD3LHEh1l7OnKcy+gvxn0Ld1IIaFjwmwPWfHWrorsxNi59ylggUE
EjGtoFLLRwOHQp8MJ4DXdVy/2CjhJKHAXx1DHFeROLIJZ65iEce29uMtN0Bhn/5W
5Fk0JsswJO/GOrk6XoI120icF3ah6yXjmk/hqWH1WEvUVjpvpRuwV02m6sBnjp44
k1If0UqhrA5Lyg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:45 2025 by rpki-client