Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: LcWBLJc5xOmijy/rOF1kZfgZMsM2MGn+tRKZuNsvp+o=
Subject key identifier: A4:BA:63:A7:6B:F2:1D:C4:60:9C:45:FA:97:A0:4B:A7:88:A2:9E:27
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01967642CF4F99DA5D9BDB6E93CAF29171C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 08:00:11 +0000
Manifest this update: Sun 27 Apr 2025 08:00:11 +0000
Manifest next update: Mon 28 Apr 2025 08:00:11 +0000
Files and hashes: 1: PPdmXUd6h6Gu02gE3yHsYWcFAtE.roa (hash: EHG3aVLscM/89/8uYl8i9vTpEj6hPmRskxw2S3UAzw0=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: UhIoMcUTr5XThaRcsGLA57Jxb+XiuDV5rExHp/I0iIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:cf:4f:99:da:5d:9b:db:6e:93:ca:f2:91:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Apr 27 08:00:11 2025 GMT
Not After : Apr 28 08:00:11 2025 GMT
Subject: CN=a4ba63a76bf21dc4609c45fa97a04ba788a29e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:bf:ff:5f:2b:64:6b:1f:ad:01:3a:c7:18:
7b:b6:59:3e:c4:56:73:03:2c:ab:8e:e9:15:68:1d:
8f:95:51:f8:a1:74:6e:ee:44:66:9e:94:50:e5:2f:
92:63:96:05:88:13:45:b1:01:5b:40:98:45:2c:2d:
e8:57:9f:51:ce:12:76:50:81:1d:c7:28:90:71:f9:
97:71:bb:9b:e1:9a:9d:dd:26:ed:17:9d:37:2a:af:
63:0b:58:39:76:5c:15:f9:3c:c5:c6:48:2e:fb:d0:
9d:bb:56:d7:8b:b4:8b:cb:49:41:1b:f5:f0:50:06:
c1:e1:05:42:87:aa:d2:70:91:a8:41:4f:57:9b:fe:
c3:31:ad:7f:4d:e6:77:87:c9:22:21:3a:31:7c:20:
be:5e:ce:14:39:68:39:3e:4a:0b:2c:65:ca:d0:93:
e7:a4:1c:4b:4e:8b:6a:b0:88:a5:65:f9:fa:2e:38:
0c:34:4c:1e:f2:a1:85:74:81:3f:9e:5d:12:c4:2a:
31:d0:0b:0d:c0:21:8c:09:c8:78:0b:0b:01:9c:80:
93:05:2c:5e:b2:d6:bf:e6:86:81:95:fb:dd:9c:02:
35:0c:80:88:c5:df:aa:86:ac:af:c4:43:49:0a:cf:
14:46:14:3e:c1:3f:94:3d:7e:d9:22:3a:e3:12:bb:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:63:A7:6B:F2:1D:C4:60:9C:45:FA:97:A0:4B:A7:88:A2:9E:27
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:04:20:10:06:e9:14:91:96:d0:c4:4c:5e:77:44:39:ca:46:
6e:48:46:12:f1:24:33:ff:bf:bb:bc:89:7f:42:b8:99:de:ca:
af:c1:f2:28:97:2b:80:8f:03:ea:48:93:0f:f6:8f:de:3e:07:
21:c6:91:d0:be:51:b3:e9:c8:17:47:4d:20:7e:19:a6:d6:45:
5c:64:2f:26:ee:ec:c5:49:c4:a7:ad:5f:04:0d:55:22:b0:41:
f7:51:42:41:46:83:0e:58:bb:fd:07:7e:82:45:02:60:8c:d1:
d9:80:3d:12:27:76:9f:1f:df:2b:06:9f:e3:00:39:61:e5:e2:
f7:0d:85:ba:02:3e:3b:4a:d0:d0:bb:b8:40:39:4a:82:3d:bb:
15:e3:e4:70:d7:30:d3:7f:98:c9:aa:f1:4b:27:01:54:64:42:
45:d0:3b:31:01:0d:d6:58:cc:f9:2a:19:b5:fa:21:a9:67:07:
b3:e0:fa:55:e4:a1:c6:ab:72:65:68:08:f1:b6:fd:66:f2:e8:
56:66:9b:f8:8e:a9:36:77:15:1f:08:83:ea:14:52:f4:22:95:
17:86:99:c3:cf:d2:c6:31:43:75:69:e6:73:f1:bc:26:e2:08:
fe:86:a5:11:04:14:b2:a7:64:6f:9c:0a:cb:9f:b6:29:af:8e:
c1:6e:9d:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Qs9Pmdpdm9tuk8rykXHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODhhMDc5ZTRjZWI2YmIyNGMyM2M1MjcxZTQ1ODNlMWNm
MmY5YTkwHhcNMjUwNDI3MDgwMDExWhcNMjUwNDI4MDgwMDExWjAzMTEwLwYDVQQD
EyhhNGJhNjNhNzZiZjIxZGM0NjA5YzQ1ZmE5N2EwNGJhNzg4YTI5ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtu//18rZGsfrQE6xxh7tlk+xFZz
AyyrjukVaB2PlVH4oXRu7kRmnpRQ5S+SY5YFiBNFsQFbQJhFLC3oV59RzhJ2UIEd
xyiQcfmXcbub4Zqd3SbtF503Kq9jC1g5dlwV+TzFxkgu+9Cdu1bXi7SLy0lBG/Xw
UAbB4QVCh6rScJGoQU9Xm/7DMa1/TeZ3h8kiIToxfCC+Xs4UOWg5PkoLLGXK0JPn
pBxLTotqsIilZfn6LjgMNEwe8qGFdIE/nl0SxCox0AsNwCGMCch4CwsBnICTBSxe
sta/5oaBlfvdnAI1DICIxd+qhqyvxENJCs8URhQ+wT+UPX7ZIjrjErsVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS6Y6dr8h3EYJxF+pegS6eIop4nMB8GA1UdIwQY
MBaAFMWIoHnkzra7JMI8UnHkWD4c8vmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTIt
MTdlZGI5OGJiYjA4LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYjRiOGYtYjZhMi00ZDAwLTk2MTItMTdlZGI5OGJiYjA4
LzEveFlpZ2VlVE90cnNrd2p4U2NlUllQaHp5LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAQgEAbp
FJGW0MRMXndEOcpGbkhGEvEkM/+/u7yJf0K4md7Kr8HyKJcrgI8D6kiTD/aP3j4H
IcaR0L5Rs+nIF0dNIH4ZptZFXGQvJu7sxUnEp61fBA1VIrBB91FCQUaDDli7/Qd+
gkUCYIzR2YA9Eid2nx/fKwaf4wA5YeXi9w2FugI+O0rQ0Lu4QDlKgj27FePkcNcw
03+YyarxSycBVGRCRdA7MQEN1ljM+SoZtfohqWcHs+D6VeShxqtyZWgI8bb9ZvLo
Vmab+I6pNncVHwiD6hRS9CKVF4aZw8/SxjFDdWnmc/G8JuII/oalEQQUsqdkb5wK
y5+2Ka+OwW6dAA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:57:41 2025 by rpki-client