Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: ya5fjJY0nctBfHXGHrizLiMxdXa/Kf4zGI/DBjwO/IM=
Subject key identifier: 08:C8:84:D2:1C:9B:2E:02:50:34:54:1B:42:82:A2:70:9D:AB:F5:FC
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019657CB97D3D8A359EB08E42EDAF49141E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 10:01:22 +0000
Manifest this update: Mon 21 Apr 2025 10:01:22 +0000
Manifest next update: Tue 22 Apr 2025 10:01:22 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: meMrTNJ3ULqjywQX9iWtP0w344R+HMeF9JwYzupfeYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:97:d3:d8:a3:59:eb:08:e4:2e:da:f4:91:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Apr 21 10:01:22 2025 GMT
Not After : Apr 22 10:01:22 2025 GMT
Subject: CN=08c884d21c9b2e025034541b4282a2709dabf5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:50:b2:a0:55:fa:f3:00:19:47:f6:15:b5:
d7:40:c6:ec:0f:cc:8a:b4:9b:48:28:1c:c1:8b:a9:
56:ac:4a:12:f0:d5:2c:42:1f:60:68:ff:75:a7:f8:
e8:e3:33:b2:81:9f:45:4c:9b:f8:b4:a0:2d:a9:b6:
b1:d7:22:3b:79:4b:ce:6e:75:27:e3:b6:6a:b7:5f:
b4:a5:2e:f6:ca:df:b6:78:47:f8:38:2a:41:69:62:
25:17:85:bc:8a:54:73:a7:c2:50:ab:ac:e4:95:67:
35:99:cb:77:2a:46:b8:8a:1a:7d:57:ae:c8:8c:8d:
82:0a:33:6c:3d:a3:17:2d:4f:91:8b:dc:48:88:bb:
a6:67:d7:8a:7c:e3:ed:64:a1:f6:0f:c9:eb:0c:ee:
95:f2:63:42:bd:ef:a4:c7:7d:7a:94:d8:f4:4e:95:
0c:13:0d:3b:e0:1d:b3:05:cc:bb:70:bd:6e:b4:81:
53:6a:44:89:bf:de:f8:42:09:a3:0c:63:d3:4a:ae:
24:e3:70:d7:35:61:af:d0:20:eb:9e:60:57:75:2e:
fd:87:fd:f2:81:92:2f:49:ff:47:89:ca:e5:48:6d:
88:0c:cd:03:4d:c9:00:10:07:1c:6b:5c:df:40:11:
82:cc:4b:71:9d:a0:2e:0a:b0:70:86:4e:72:5f:f6:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:84:D2:1C:9B:2E:02:50:34:54:1B:42:82:A2:70:9D:AB:F5:FC
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:78:19:af:88:49:23:dd:0c:48:9e:92:ef:4f:d0:8f:03:16:
9b:6a:f0:b9:ac:7d:26:32:01:2c:22:6a:01:e6:42:7e:7b:b8:
e6:d5:88:b9:92:30:26:ff:63:84:82:2a:20:85:7f:3b:02:4c:
4a:35:e0:9f:00:fe:13:01:e8:ef:75:a0:43:23:16:95:ee:c3:
8a:eb:66:67:65:a7:09:65:39:12:27:bb:1c:7b:75:23:63:c3:
32:e2:94:46:1d:03:ea:59:f4:a7:66:9a:bd:d4:cc:c1:62:1c:
a5:3c:a3:b7:6a:18:2c:b3:c1:e2:af:83:4a:33:d7:c5:60:60:
f2:68:20:d8:0d:3d:af:9a:47:b8:e3:e2:92:ba:6f:df:c6:c6:
66:18:03:96:75:75:84:3f:39:12:52:88:18:2e:f3:5b:a6:6e:
a9:83:9a:f5:86:7c:f7:55:33:b4:9f:82:1f:32:b1:d2:fc:44:
5c:02:a3:e1:59:c8:f9:ab:17:79:fb:f0:0b:54:68:18:98:af:
ca:4f:7a:49:76:7c:f5:e0:07:7d:ad:76:c0:20:a1:7a:06:0c:
32:00:ad:12:c8:1d:71:e1:05:9f:68:94:71:a3:a0:e4:56:63:
14:e0:cf:5e:08:0a:94:7d:c4:9e:ea:6c:22:49:bc:0b:5a:ad:
33:49:56:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXy5fT2KNZ6wjkLtr0kUHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk
NzAxNDIwHhcNMjUwNDIxMTAwMTIyWhcNMjUwNDIyMTAwMTIyWjAzMTEwLwYDVQQD
EygwOGM4ODRkMjFjOWIyZTAyNTAzNDU0MWI0MjgyYTI3MDlkYWJmNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfNQsqBV+vMAGUf2FbXXQMbsD8yK
tJtIKBzBi6lWrEoS8NUsQh9gaP91p/jo4zOygZ9FTJv4tKAtqbax1yI7eUvObnUn
47Zqt1+0pS72yt+2eEf4OCpBaWIlF4W8ilRzp8JQq6zklWc1mct3Kka4ihp9V67I
jI2CCjNsPaMXLU+Ri9xIiLumZ9eKfOPtZKH2D8nrDO6V8mNCve+kx316lNj0TpUM
Ew074B2zBcy7cL1utIFTakSJv974QgmjDGPTSq4k43DXNWGv0CDrnmBXdS79h/3y
gZIvSf9HicrlSG2IDM0DTckAEAcca1zfQBGCzEtxnaAuCrBwhk5yX/YY0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjIhNIcmy4CUDRUG0KConCdq/X8MB8GA1UdIwQY
MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt
OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy
LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3gZr4hJ
I90MSJ6S70/QjwMWm2rwuax9JjIBLCJqAeZCfnu45tWIuZIwJv9jhIIqIIV/OwJM
SjXgnwD+EwHo73WgQyMWle7DiutmZ2WnCWU5Eie7HHt1I2PDMuKURh0D6ln0p2aa
vdTMwWIcpTyjt2oYLLPB4q+DSjPXxWBg8mgg2A09r5pHuOPikrpv38bGZhgDlnV1
hD85ElKIGC7zW6ZuqYOa9YZ891UztJ+CHzKx0vxEXAKj4VnI+asXefvwC1RoGJiv
yk96SXZ89eAHfa12wCChegYMMgCtEsgdceEFn2iUcaOg5FZjFODPXggKlH3Enups
Ikm8C1qtM0lWTw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:21:25 2025 by rpki-client