Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: 0U5ozoy5HazRFxbko8FxcINx/7TdAkIwJoeSca6me+0=
Subject key identifier: F4:99:5B:3B:F5:47:14:CA:78:25:99:44:F2:88:4D:2B:38:D6:D8:BF
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019691833C665FB3B17E238487A9481900E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 10DB
Signing time: Fri 02 May 2025 15:00:18 +0000
Manifest this update: Fri 02 May 2025 15:00:18 +0000
Manifest next update: Sat 03 May 2025 15:00:18 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: 5sVJssDJhy40O9s7Zjnvwx/wAgwj4QC3AppiW1cDkfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:3c:66:5f:b3:b1:7e:23:84:87:a9:48:19:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: May 2 15:00:18 2025 GMT
Not After : May 3 15:00:18 2025 GMT
Subject: CN=f4995b3bf54714ca78259944f2884d2b38d6d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:06:d5:c9:2a:d4:4f:9e:c0:49:22:76:d0:
c2:8c:98:b3:62:b8:9e:42:c6:04:db:c7:16:80:bb:
49:8f:98:35:b4:58:43:79:56:0f:c1:a6:18:98:46:
d7:d0:ab:ec:4f:07:ed:64:80:bf:97:49:83:da:04:
74:ec:9c:dd:be:ba:e4:07:76:b1:c6:7c:cb:e3:61:
92:fe:da:35:bf:f3:37:e6:2a:92:3f:40:43:25:90:
f4:5f:4e:25:9b:89:54:5d:4d:25:e8:01:f9:77:14:
62:87:92:f0:95:2d:dd:d2:53:95:42:7a:f9:07:be:
bc:b1:03:58:e8:9f:9d:73:fa:91:56:34:27:ed:54:
48:11:f6:ea:cc:93:07:80:7b:79:3b:b3:10:eb:ce:
63:4c:df:1a:db:c3:21:bc:7a:76:94:22:4a:c8:5c:
96:ee:b8:68:62:63:22:9e:e7:c4:42:01:aa:ba:58:
57:35:4a:2b:3c:e9:ea:ff:8b:23:9c:78:60:b5:b1:
eb:e6:b5:b2:d8:7b:0e:1a:b4:ad:9f:4a:48:31:38:
78:90:44:b3:7e:2a:9d:3e:35:70:0e:6a:c7:f7:e0:
84:8e:6e:0c:b3:17:fb:e4:2a:72:df:b9:01:b6:72:
14:15:be:11:19:f2:66:6a:3b:cc:61:0f:bd:e9:2c:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:5B:3B:F5:47:14:CA:78:25:99:44:F2:88:4D:2B:38:D6:D8:BF
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a8:93:2c:61:bd:61:4c:89:8b:09:e7:fd:3f:03:2d:42:c2:
43:cd:28:b8:c2:fe:14:3d:4c:09:35:44:30:92:69:5f:ae:f7:
1a:54:73:93:fa:9b:ac:eb:87:23:58:1f:a5:cf:22:1e:ba:54:
61:0b:d9:cd:e0:11:ae:13:fc:2f:5c:9b:14:53:94:e2:bc:8c:
c7:9b:bf:85:0a:1d:6c:97:b2:35:db:6b:e1:ab:bc:0b:cc:9b:
ac:79:1e:3f:a9:e7:67:36:53:44:e0:a3:ff:30:a4:c2:e5:ef:
88:0f:c1:26:bf:c2:b8:3c:6e:3d:af:ec:35:a4:be:09:70:89:
93:29:7e:5f:77:e5:ac:d0:02:ef:a9:b6:76:86:c3:9f:ac:15:
26:b7:8f:39:52:76:a6:5e:8e:0e:57:c8:33:1d:32:e4:86:32:
aa:12:cc:fa:b6:69:98:8e:7e:4d:93:f0:66:26:5a:ca:1a:63:
7f:6b:d4:a9:cc:fc:41:81:78:3c:6f:93:b5:36:a9:86:45:6d:
be:9d:d7:28:1f:62:b8:55:50:5b:25:d9:9f:44:5f:9c:53:4e:
9c:17:58:eb:af:93:51:fb:17:b7:45:5e:a6:f9:28:51:f2:e1:
4e:12:b6:18:2a:ca:81:91:67:d0:50:92:db:2c:2c:d6:4b:77:
46:4c:3b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRgzxmX7OxfiOEh6lIGQDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1
MDhkNTcwHhcNMjUwNTAyMTUwMDE4WhcNMjUwNTAzMTUwMDE4WjAzMTEwLwYDVQQD
EyhmNDk5NWIzYmY1NDcxNGNhNzgyNTk5NDRmMjg4NGQyYjM4ZDZkOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOgG1ckq1E+ewEkidtDCjJizYrie
QsYE28cWgLtJj5g1tFhDeVYPwaYYmEbX0KvsTwftZIC/l0mD2gR07JzdvrrkB3ax
xnzL42GS/to1v/M35iqSP0BDJZD0X04lm4lUXU0l6AH5dxRih5LwlS3d0lOVQnr5
B768sQNY6J+dc/qRVjQn7VRIEfbqzJMHgHt5O7MQ685jTN8a28MhvHp2lCJKyFyW
7rhoYmMinufEQgGqulhXNUorPOnq/4sjnHhgtbHr5rWy2HsOGrStn0pIMTh4kESz
fiqdPjVwDmrH9+CEjm4Msxf75Cpy37kBtnIUFb4RGfJmajvMYQ+96Sz0/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSZWzv1RxTKeCWZRPKITSs41ti/MB8GA1UdIwQY
MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt
ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx
LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6iTLGG9
YUyJiwnn/T8DLULCQ80ouML+FD1MCTVEMJJpX673GlRzk/qbrOuHI1gfpc8iHrpU
YQvZzeARrhP8L1ybFFOU4ryMx5u/hQodbJeyNdtr4au8C8ybrHkeP6nnZzZTROCj
/zCkwuXviA/BJr/CuDxuPa/sNaS+CXCJkyl+X3flrNAC76m2dobDn6wVJrePOVJ2
pl6ODlfIMx0y5IYyqhLM+rZpmI5+TZPwZiZayhpjf2vUqcz8QYF4PG+TtTaphkVt
vp3XKB9iuFVQWyXZn0RfnFNOnBdY66+TUfsXt0VepvkoUfLhThK2GCrKgZFn0FCS
2yws1kt3Rkw7Rw==
-----END CERTIFICATE-----
Generated at Fri May 2 23:26:10 2025 by rpki-client