Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: IQzWyv0viyVjXFpFP4zfN+IirZPPyIR6uBhwmvR8suc=
Subject key identifier: 30:5D:FE:C1:47:66:D5:B8:4D:E7:4E:2D:A7:D1:F2:6E:39:22:7E:23
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019682B514F4F0282DD0CFD944A14268C3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 18:00:27 +0000
Manifest this update: Tue 29 Apr 2025 18:00:27 +0000
Manifest next update: Wed 30 Apr 2025 18:00:27 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: 7VxDiosvJADYf+AmFNhMVDXpj5tN3eKF78o6Jd5pVFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:14:f4:f0:28:2d:d0:cf:d9:44:a1:42:68:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Apr 29 18:00:27 2025 GMT
Not After : Apr 30 18:00:27 2025 GMT
Subject: CN=305dfec14766d5b84de74e2da7d1f26e39227e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:e4:ee:3f:f4:19:c9:10:08:f6:e6:53:9f:
09:ef:1c:c6:25:d6:96:21:e4:a4:25:a3:af:fb:65:
f0:6b:43:03:ec:51:f0:ef:5f:e9:e2:32:17:31:ce:
ff:6b:3f:98:1c:f4:4a:9a:b9:fb:5b:ce:40:a8:f1:
fe:58:3d:b7:02:d4:26:e6:37:85:72:2a:a7:cd:0e:
5e:9b:91:35:ec:7a:62:a9:ab:45:b6:8b:02:df:bd:
be:fb:22:05:6a:0a:21:7b:04:64:13:27:5b:bd:6f:
39:4b:a2:53:f1:55:44:9e:9d:ce:6b:24:90:84:cb:
a1:6f:8b:a5:e4:a1:2e:30:b9:61:b0:09:48:e8:1f:
48:c6:a7:9b:ef:0a:6a:2f:9f:3f:b1:be:39:6e:6c:
89:82:6f:ce:c9:64:39:33:3a:28:ed:0d:4a:b7:36:
43:19:67:31:23:b5:04:ad:ea:77:f2:38:f1:1d:e9:
29:4c:fa:21:74:ac:bd:a9:c0:b5:dd:47:e5:61:5e:
1c:88:c2:42:78:dd:7e:87:af:cf:c9:63:1b:56:a7:
a2:65:ed:95:ac:2d:ea:98:8a:a5:ac:0e:ee:79:ee:
cc:e0:2e:3c:9e:ab:4d:1a:b7:06:11:0d:66:6c:cd:
95:78:68:22:54:05:d5:6d:e2:36:3f:75:a5:9b:06:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:FE:C1:47:66:D5:B8:4D:E7:4E:2D:A7:D1:F2:6E:39:22:7E:23
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b5:4d:0f:70:05:f7:ad:40:a7:39:38:c2:6c:4c:22:31:ec:
fc:09:6c:cb:ea:aa:3c:d7:ba:a8:86:89:cd:ca:08:d2:f1:cb:
38:24:2e:a8:5f:25:e7:fa:70:ff:15:a6:2d:f0:ba:d5:7a:fa:
3c:da:51:9f:66:8f:2d:42:91:ac:82:d2:ee:a8:60:ab:ab:97:
5a:1b:02:b2:78:b8:e6:5e:2b:61:9f:4a:86:f7:59:05:e6:ff:
d0:66:1e:54:64:37:45:70:36:10:2b:cd:7b:44:97:b5:5d:4a:
da:db:ef:59:43:af:42:19:c7:c2:81:bd:78:92:49:dc:63:75:
4e:71:bc:a6:a8:a8:6b:94:cc:dc:68:5b:44:8c:9b:c0:f4:07:
b1:47:73:38:3a:97:c5:e6:19:82:5a:f3:a5:23:32:a3:6c:5a:
fd:44:5a:b3:c1:f6:d0:b3:75:c6:05:17:de:ea:3e:82:6b:f7:
a1:e2:56:ca:db:4d:82:ad:07:59:0f:8c:24:ed:ed:ae:1a:dc:
0e:93:c0:8c:da:53:8c:33:c0:7e:bf:bd:27:46:d5:6e:9a:06:
17:a1:3e:bc:91:30:99:00:fa:3b:fd:c1:08:bd:20:ad:b1:a2:
1c:15:ff:67:b0:78:6a:cb:d0:5e:d9:84:2b:7a:d9:34:11:b9:
0f:f3:5f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCtRT08Cgt0M/ZRKFCaMPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2Y2ZkOTQyMzdlZmQyMDBkZDBiMTE2ZTFmNmY5YjdiY2E2
NTljYTcwHhcNMjUwNDI5MTgwMDI3WhcNMjUwNDMwMTgwMDI3WjAzMTEwLwYDVQQD
EygzMDVkZmVjMTQ3NjZkNWI4NGRlNzRlMmRhN2QxZjI2ZTM5MjI3ZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9bk7j/0GckQCPbmU58J7xzGJdaW
IeSkJaOv+2Xwa0MD7FHw71/p4jIXMc7/az+YHPRKmrn7W85AqPH+WD23AtQm5jeF
ciqnzQ5em5E17HpiqatFtosC372++yIFagohewRkEydbvW85S6JT8VVEnp3OaySQ
hMuhb4ul5KEuMLlhsAlI6B9Ixqeb7wpqL58/sb45bmyJgm/OyWQ5Mzoo7Q1KtzZD
GWcxI7UErep38jjxHekpTPohdKy9qcC13UflYV4ciMJCeN1+h6/PyWMbVqeiZe2V
rC3qmIqlrA7uee7M4C48nqtNGrcGEQ1mbM2VeGgiVAXVbeI2P3WlmwZtVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBd/sFHZtW4TedOLafR8m45In4jMB8GA1UdIwQY
MBaAFMbP2UI379IA3QsRbh9vm3vKZZynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEt
ZGM4ODRmMWJlM2U1LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wYjcyNzEtMDIyMS00NjBlLTgzMWEtZGM4ODRmMWJlM2U1
LzEveHNfWlFqZnYwZ0RkQ3hGdUgyLWJlOHBsbktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7VND3AF
961Apzk4wmxMIjHs/Alsy+qqPNe6qIaJzcoI0vHLOCQuqF8l5/pw/xWmLfC61Xr6
PNpRn2aPLUKRrILS7qhgq6uXWhsCsni45l4rYZ9KhvdZBeb/0GYeVGQ3RXA2ECvN
e0SXtV1K2tvvWUOvQhnHwoG9eJJJ3GN1TnG8pqioa5TM3GhbRIybwPQHsUdzODqX
xeYZglrzpSMyo2xa/URas8H20LN1xgUX3uo+gmv3oeJWyttNgq0HWQ+MJO3trhrc
DpPAjNpTjDPAfr+9J0bVbpoGF6E+vJEwmQD6O/3BCL0grbGiHBX/Z7B4asvQXtmE
K3rZNBG5D/NfrQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:19:24 2025 by rpki-client