Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: kMyGDKN+3C+DXWqjNgZbACEA6sS0ThEIRCzkn0Mc27s=
Subject key identifier: 15:F9:BC:6A:4B:5D:FB:92:14:F5:63:AA:25:B1:5B:80:76:77:78:53
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019676E7CCC344D6319361D138DDCBE52D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 06CC
Signing time: Sun 27 Apr 2025 11:00:24 +0000
Manifest this update: Sun 27 Apr 2025 11:00:24 +0000
Manifest next update: Mon 28 Apr 2025 11:00:24 +0000
Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: KlfUwri+mrwXDNaqNbki8XfrMyfKT2vZrubOzDrRagM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:cc:c3:44:d6:31:93:61:d1:38:dd:cb:e5:2d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Apr 27 11:00:24 2025 GMT
Not After : Apr 28 11:00:24 2025 GMT
Subject: CN=15f9bc6a4b5dfb9214f563aa25b15b8076777853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:78:dd:94:11:41:e4:73:72:d4:87:18:82:
a6:9d:79:00:bd:ff:35:f3:83:1d:07:08:e8:92:67:
2d:a9:fe:74:75:00:6b:b7:63:52:3c:e3:71:45:ef:
94:c9:0f:6d:84:af:31:b9:d9:34:92:49:06:24:4d:
1d:a1:91:35:1c:8e:9b:ee:e8:42:39:cd:1f:34:b4:
c9:7a:82:14:18:6d:c4:f0:c7:68:0b:00:ff:b7:58:
8a:f9:b5:3f:0f:df:71:e6:04:3a:fc:cb:1f:02:42:
49:33:47:ea:6a:5d:36:77:8d:35:c7:69:c1:2e:ac:
66:48:f7:81:10:f7:1b:87:89:d2:40:c9:6c:21:7e:
d1:5b:2b:cc:9e:ed:dc:2f:b7:cf:66:ed:fd:b4:81:
68:33:b8:f4:29:d5:5d:a0:f4:ed:7e:91:60:27:37:
d7:79:0a:02:f6:33:e0:83:2e:95:ab:62:8b:02:b4:
bb:be:c2:5e:61:80:d6:67:0c:36:45:2c:c7:78:eb:
48:dd:f5:83:3b:93:32:a8:af:46:cd:6c:0a:ad:6a:
21:ec:13:f6:32:ca:90:a1:04:7b:79:b2:ee:c5:12:
13:7a:d4:67:68:5d:5e:26:c4:7d:6b:49:eb:26:37:
19:76:c4:c8:b0:5d:0a:96:32:6f:e9:9c:47:0e:4d:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:BC:6A:4B:5D:FB:92:14:F5:63:AA:25:B1:5B:80:76:77:78:53
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:1b:a6:40:0c:41:eb:4a:b9:d4:d7:ca:f6:4a:ee:00:83:
ca:3a:8f:dd:da:a4:49:40:dd:fa:41:ca:61:29:b4:26:38:7a:
d1:15:8c:7b:24:7f:ef:59:2b:23:a3:a8:23:29:1b:05:c2:39:
f5:13:7a:c8:5a:24:d5:41:bb:5c:9b:0a:c6:8f:00:f1:2b:3a:
4a:97:5c:62:73:cd:1f:77:88:6e:3e:a2:f8:51:e8:ef:cf:3a:
28:70:51:65:6a:99:de:c3:33:3d:98:5b:8b:fd:54:a8:f3:bb:
19:5c:dc:3f:3a:13:3c:8d:4a:cc:8e:41:4b:2d:e5:c8:93:d5:
1b:85:db:b3:47:69:35:63:a1:9b:67:51:60:f4:93:c1:ab:09:
f5:8a:89:04:6d:b8:b3:b6:ee:87:2f:7d:37:ea:bd:24:ae:a5:
be:43:70:37:f3:7a:cf:44:c5:18:91:97:2d:1a:09:b7:30:43:
46:36:a6:9b:61:2c:10:a5:2c:12:5c:82:ae:36:03:0e:19:8f:
c4:a0:1b:c3:fa:fe:af:e7:79:fd:0e:49:a6:3a:89:37:87:85:
ca:e2:9c:60:d2:ee:af:bb:47:b3:e0:5c:e0:e1:3d:fc:4b:09:
dc:75:27:45:92:26:25:fa:1f:38:20:4f:83:3d:94:97:9d:85:
91:93:df:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ258zDRNYxk2HRON3L5S11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1
ZDQ5MWUwHhcNMjUwNDI3MTEwMDI0WhcNMjUwNDI4MTEwMDI0WjAzMTEwLwYDVQQD
EygxNWY5YmM2YTRiNWRmYjkyMTRmNTYzYWEyNWIxNWI4MDc2Nzc3ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl143ZQRQeRzctSHGIKmnXkAvf81
84MdBwjokmctqf50dQBrt2NSPONxRe+UyQ9thK8xudk0kkkGJE0doZE1HI6b7uhC
Oc0fNLTJeoIUGG3E8MdoCwD/t1iK+bU/D99x5gQ6/MsfAkJJM0fqal02d401x2nB
LqxmSPeBEPcbh4nSQMlsIX7RWyvMnu3cL7fPZu39tIFoM7j0KdVdoPTtfpFgJzfX
eQoC9jPggy6Vq2KLArS7vsJeYYDWZww2RSzHeOtI3fWDO5MyqK9GzWwKrWoh7BP2
MsqQoQR7ebLuxRITetRnaF1eJsR9a0nrJjcZdsTIsF0KljJv6ZxHDk06dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX5vGpLXfuSFPVjqiWxW4B2d3hTMB8GA1UdIwQY
MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt
YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw
LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQgbpkAM
QetKudTXyvZK7gCDyjqP3dqkSUDd+kHKYSm0Jjh60RWMeyR/71krI6OoIykbBcI5
9RN6yFok1UG7XJsKxo8A8Ss6SpdcYnPNH3eIbj6i+FHo7886KHBRZWqZ3sMzPZhb
i/1UqPO7GVzcPzoTPI1KzI5BSy3lyJPVG4Xbs0dpNWOhm2dRYPSTwasJ9YqJBG24
s7buhy99N+q9JK6lvkNwN/N6z0TFGJGXLRoJtzBDRjamm2EsEKUsElyCrjYDDhmP
xKAbw/r+r+d5/Q5JpjqJN4eFyuKcYNLur7tHs+Bc4OE9/EsJ3HUnRZImJfofOCBP
gz2Ul52FkZPfgw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:35:56 2025 by rpki-client