Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: sQku+pY4SFGN2DqUcwnqxzUdJMnr2CuM78lALJ4KEpI=
Subject key identifier: 79:C7:A1:CF:51:61:AC:38:5C:65:DF:C0:9C:47:30:2E:70:35:26:2D
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 01967F4654CDBDCE0D8EF1C73B21CFBA36D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 1521
Signing time: Tue 29 Apr 2025 02:00:37 +0000
Manifest this update: Tue 29 Apr 2025 02:00:37 +0000
Manifest next update: Wed 30 Apr 2025 02:00:37 +0000
Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=)
2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=)
3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=)
4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: nHumbBlFvlgCcDGQ9VJDAn8ctt4IGgCl8GAOKVNcwAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:54:cd:bd:ce:0d:8e:f1:c7:3b:21:cf:ba:36:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Apr 29 02:00:37 2025 GMT
Not After : Apr 30 02:00:37 2025 GMT
Subject: CN=79c7a1cf5161ac385c65dfc09c47302e7035262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:67:3a:9f:6e:98:fa:50:c6:47:63:fd:88:
37:06:53:74:e6:e8:45:0d:5e:a8:b1:9a:61:63:bb:
93:7d:9a:ab:29:8a:90:9d:cd:b9:94:ef:f6:94:f0:
65:11:c7:ac:3d:0a:0b:c9:cf:b4:28:ce:8a:36:fd:
ef:df:51:4d:04:b6:6a:3b:1c:d8:17:83:54:3c:c1:
42:ec:f2:b1:c6:95:93:63:99:f0:a5:53:ca:07:cd:
d3:d4:7d:3f:52:41:2c:7a:df:2b:f4:de:ad:44:16:
7b:de:2c:eb:c3:5a:4b:f8:b4:17:75:76:b4:23:ec:
9e:e6:c8:a2:fb:71:6d:b6:23:b7:0a:4d:86:bf:0b:
6d:a2:42:12:dc:cf:10:06:6d:84:5f:72:df:a9:5a:
7d:c5:89:75:88:93:f1:a3:41:27:f4:39:48:98:b3:
1f:d8:54:1e:72:b5:81:61:ff:f6:4d:4d:3a:28:42:
22:1f:d8:99:0b:bf:1d:ff:7f:97:85:6f:9a:ee:c1:
91:3b:32:53:8d:16:6b:8d:c9:1c:17:ab:e6:b5:e8:
42:9e:08:a3:41:c1:4b:01:1b:10:26:12:f2:59:e8:
ae:cb:eb:4d:83:08:0f:dd:42:04:90:26:ee:f6:b5:
f5:6b:89:63:5f:05:7a:57:3e:f1:c0:2b:55:b3:eb:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:A1:CF:51:61:AC:38:5C:65:DF:C0:9C:47:30:2E:70:35:26:2D
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d0:3f:38:02:83:9f:e1:f5:65:09:b4:8e:42:51:9b:6f:39:
a5:78:d5:08:66:ac:38:c4:3f:0b:57:1f:1f:75:50:68:66:5f:
6d:0d:19:dd:0a:5c:b3:42:33:ca:8b:01:37:81:1e:86:02:0b:
80:0e:d2:35:f1:4b:e9:8e:0d:ea:d0:a4:5e:7c:54:6b:f5:30:
f3:7f:7e:ab:e3:7f:01:a2:a8:dc:d5:83:2b:76:13:fd:01:a8:
de:d5:8f:02:13:6b:92:5d:00:10:f0:17:51:f3:e9:3a:61:d5:
c1:20:ab:a0:9e:e3:c2:28:c0:07:31:0e:6c:ca:8e:67:36:50:
72:de:00:83:50:d3:05:db:f1:15:d1:fa:4d:57:3a:fc:ea:d7:
b6:e4:e1:a4:95:83:48:02:55:15:1a:3d:ec:6a:d2:c7:31:a0:
f6:87:89:8e:4b:c6:2b:41:a2:55:57:ec:8f:80:ff:00:03:d5:
8c:05:16:9b:34:81:ee:fd:8c:92:6d:56:bc:3a:95:c4:b7:ac:
a5:e5:cc:81:5d:f5:f6:21:84:a7:fb:13:db:fb:45:89:c0:22:
e0:c8:e7:85:a7:8a:2a:89:dd:8d:ab:70:c7:f4:1c:09:7a:22:
41:fa:dd:d6:63:40:2b:54:b2:66:a2:dd:c6:dc:1f:85:4c:a8:
86:bd:97:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/RlTNvc4NjvHHOyHPujbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjUwNDI5MDIwMDM3WhcNMjUwNDMwMDIwMDM3WjAzMTEwLwYDVQQD
Eyg3OWM3YTFjZjUxNjFhYzM4NWM2NWRmYzA5YzQ3MzAyZTcwMzUyNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ1nOp9umPpQxkdj/Yg3BlN05uhF
DV6osZphY7uTfZqrKYqQnc25lO/2lPBlEcesPQoLyc+0KM6KNv3v31FNBLZqOxzY
F4NUPMFC7PKxxpWTY5nwpVPKB83T1H0/UkEset8r9N6tRBZ73izrw1pL+LQXdXa0
I+ye5sii+3FttiO3Ck2GvwttokIS3M8QBm2EX3LfqVp9xYl1iJPxo0En9DlImLMf
2FQecrWBYf/2TU06KEIiH9iZC78d/3+XhW+a7sGROzJTjRZrjckcF6vmtehCngij
QcFLARsQJhLyWeiuy+tNgwgP3UIEkCbu9rX1a4ljXwV6Vz7xwCtVs+tsrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnHoc9RYaw4XGXfwJxHMC5wNSYtMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNA/OAKD
n+H1ZQm0jkJRm285pXjVCGasOMQ/C1cfH3VQaGZfbQ0Z3Qpcs0IzyosBN4EehgIL
gA7SNfFL6Y4N6tCkXnxUa/Uw839+q+N/AaKo3NWDK3YT/QGo3tWPAhNrkl0AEPAX
UfPpOmHVwSCroJ7jwijABzEObMqOZzZQct4Ag1DTBdvxFdH6TVc6/OrXtuThpJWD
SAJVFRo97GrSxzGg9oeJjkvGK0GiVVfsj4D/AAPVjAUWmzSB7v2Mkm1WvDqVxLes
peXMgV319iGEp/sT2/tFicAi4MjnhaeKKondjatwx/QcCXoiQfrd1mNAK1SyZqLd
xtwfhUyohr2X5Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:51 2025 by rpki-client