Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: KETcz6otsPDQ+8Ez1CcvLxifx/x0JhdWgTNXLCvky9M=
Subject key identifier: E9:0A:76:20:7E:BD:52:14:E5:DF:5C:35:62:E7:7A:D9:4B:9D:FD:98
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 0196A61CD2D2FE1F5F850B6F25A2F0AA21A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0C8D
Signing time: Tue 06 May 2025 15:00:28 +0000
Manifest this update: Tue 06 May 2025 15:00:28 +0000
Manifest next update: Wed 07 May 2025 15:00:28 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: XZGseqILpWj0/JbSYzk8ciWcgJBIr3tVrsbO2YdhRzg=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:d2:d2:fe:1f:5f:85:0b:6f:25:a2:f0:aa:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: May 6 15:00:28 2025 GMT
Not After : May 7 15:00:28 2025 GMT
Subject: CN=e90a76207ebd5214e5df5c3562e77ad94b9dfd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:25:08:bc:69:39:47:a8:89:59:50:0d:c8:
46:03:e6:97:67:91:7a:f4:73:6f:c1:bb:bd:92:68:
c4:ba:f8:8f:b3:50:2d:47:dd:0f:ab:5f:11:bf:3a:
84:ab:99:e7:4a:af:a8:69:50:08:8e:85:c7:f8:01:
b4:87:c6:9e:ce:eb:67:62:7c:6a:1a:7f:3a:52:03:
f3:d2:cd:8c:f8:58:38:c3:bd:31:7b:6d:e8:7e:c7:
46:63:c2:ab:9a:a6:f5:58:fa:e6:f6:e4:66:4d:0a:
4c:4f:cb:3e:2f:74:05:66:f5:30:0e:43:65:4c:16:
b5:23:4b:f3:22:97:5d:e5:13:64:c3:a4:0c:9b:18:
b0:56:da:bd:29:c7:dd:7e:9b:9f:36:91:71:ba:7d:
b4:fa:51:84:55:11:70:b2:41:f2:08:25:b1:06:5a:
29:e1:a0:57:be:94:5f:1b:f9:92:2d:57:58:75:25:
39:56:4f:c0:61:ed:0d:ea:69:90:55:e3:21:e3:ef:
8c:41:03:b4:6b:f2:6f:65:70:d9:30:b9:3d:31:c8:
ea:de:50:ab:b0:0f:7a:44:c3:01:36:5e:86:66:15:
66:02:fb:a8:4f:43:e2:e8:cb:64:94:86:ff:c5:f0:
0a:26:74:31:d8:1e:87:6f:b4:74:2b:72:e9:94:03:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:76:20:7E:BD:52:14:E5:DF:5C:35:62:E7:7A:D9:4B:9D:FD:98
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:01:a1:ab:c2:c9:d8:d5:ac:4f:30:b5:44:06:e5:81:ff:12:
d2:59:ce:aa:57:6d:bb:50:b4:5d:08:7d:78:7e:4a:cc:91:1e:
a2:39:f0:b0:ee:5a:4d:02:72:59:ca:ac:35:ba:e5:6d:c9:35:
58:d2:fd:20:6a:95:c5:63:37:7e:d2:84:38:a0:94:a1:d8:46:
81:34:74:65:8d:e8:90:3b:fb:86:dc:fc:e0:df:94:82:a6:cf:
c5:c7:09:37:0d:c6:12:11:1f:90:f4:9e:d0:d2:83:58:f6:f3:
c5:e1:43:ca:2f:61:25:20:a3:a0:27:7c:ae:f0:11:5b:56:ef:
99:4d:6f:9b:16:96:6f:56:a8:1a:67:10:c9:8e:8b:e3:9b:69:
c4:ab:7a:3b:90:02:2b:13:92:3a:48:2e:86:af:42:ba:1b:5f:
5f:60:7c:3b:b1:89:47:20:84:f6:73:db:08:51:74:cb:9f:6c:
c3:35:ab:d3:a5:d0:04:94:09:ce:10:ca:e1:0d:a4:55:8c:66:
3f:cb:f7:05:d0:f0:90:20:e5:26:ef:c5:cb:16:32:5d:d0:2c:
c9:b6:9a:ff:62:2d:a2:22:d0:4c:91:25:ef:e4:2f:c3:ed:20:
20:e2:3d:96:56:46:27:fc:12:f0:cc:8c:df:e5:9a:a6:f4:00:
7a:09:4c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamHNLS/h9fhQtvJaLwqiGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx
ZDVjYTgwHhcNMjUwNTA2MTUwMDI4WhcNMjUwNTA3MTUwMDI4WjAzMTEwLwYDVQQD
EyhlOTBhNzYyMDdlYmQ1MjE0ZTVkZjVjMzU2MmU3N2FkOTRiOWRmZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d4lCLxpOUeoiVlQDchGA+aXZ5F6
9HNvwbu9kmjEuviPs1AtR90Pq18RvzqEq5nnSq+oaVAIjoXH+AG0h8aezutnYnxq
Gn86UgPz0s2M+Fg4w70xe23ofsdGY8Krmqb1WPrm9uRmTQpMT8s+L3QFZvUwDkNl
TBa1I0vzIpdd5RNkw6QMmxiwVtq9KcfdfpufNpFxun20+lGEVRFwskHyCCWxBlop
4aBXvpRfG/mSLVdYdSU5Vk/AYe0N6mmQVeMh4++MQQO0a/JvZXDZMLk9Mcjq3lCr
sA96RMMBNl6GZhVmAvuoT0Pi6MtklIb/xfAKJnQx2B6Hb7R0K3LplAP4/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkKdiB+vVIU5d9cNWLnetlLnf2YMB8GA1UdIwQY
MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct
M2VjNDQ3MzEwZGZiLzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi
LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQGhq8LJ
2NWsTzC1RAblgf8S0lnOqldtu1C0XQh9eH5KzJEeojnwsO5aTQJyWcqsNbrlbck1
WNL9IGqVxWM3ftKEOKCUodhGgTR0ZY3okDv7htz84N+UgqbPxccJNw3GEhEfkPSe
0NKDWPbzxeFDyi9hJSCjoCd8rvARW1bvmU1vmxaWb1aoGmcQyY6L45tpxKt6O5AC
KxOSOkguhq9CuhtfX2B8O7GJRyCE9nPbCFF0y59swzWr06XQBJQJzhDK4Q2kVYxm
P8v3BdDwkCDlJu/FyxYyXdAsybaa/2ItoiLQTJEl7+Qvw+0gIOI9llZGJ/wS8MyM
3+WapvQAeglMCA==
-----END CERTIFICATE-----
Generated at Wed May 7 00:18:43 2025 by rpki-client