
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: SvELHjQHpEluzPRnhzLAJyqVoX/TUoRmpBE4upsX7bk=
Subject key identifier: 91:BD:90:06:58:07:62:CC:AD:D8:1C:68:64:30:71:36:99:33:08:C2
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019677FB9D565011BE920874ECB8D252E757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 16:01:40 +0000
Manifest this update: Sun 27 Apr 2025 16:01:40 +0000
Manifest next update: Mon 28 Apr 2025 16:01:40 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: UHpWFxL9kPqN+FVCNaM+3Pk23d4JJkkpclml/o042Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:9d:56:50:11:be:92:08:74:ec:b8:d2:52:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Apr 27 16:01:40 2025 GMT
Not After : Apr 28 16:01:40 2025 GMT
Subject: CN=91bd9006580762ccadd81c6864307136993308c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:3a:7b:bb:84:88:7f:02:d0:b0:f9:53:d0:
9a:20:ab:b2:e3:ce:65:65:aa:74:54:3c:a1:af:56:
b5:12:1b:30:5c:dc:8c:c2:9d:4c:13:71:3c:3f:ba:
71:51:95:93:39:6d:82:87:bf:bc:51:12:8b:2a:b7:
20:d1:ac:e7:b9:9f:f0:a9:24:ee:4f:5d:00:f0:ce:
66:6e:3c:58:2d:c6:3f:d6:81:40:fa:18:0c:59:66:
6f:7c:b6:6c:52:c6:40:ee:dc:15:69:06:c5:78:92:
88:bc:f1:f4:0d:b4:a7:a5:da:5c:44:18:4c:46:ce:
dd:92:51:34:ad:81:48:15:53:03:69:74:40:cd:09:
a4:a0:9e:5b:47:53:5a:9a:04:d8:0f:21:94:87:c3:
e8:45:ef:8b:88:f7:b6:50:74:c5:a5:2d:c0:20:87:
c2:4d:4c:36:68:54:ea:c7:e5:f4:19:af:6c:3d:0f:
1a:38:e3:33:d1:1d:1c:06:91:cf:d1:59:71:00:59:
ef:ae:05:92:61:c6:fb:10:6d:ba:03:8f:1b:4c:ad:
c3:fe:9b:07:5f:68:26:d8:60:bc:b4:00:17:d4:29:
6d:6c:0c:2a:40:cb:0e:23:eb:ff:80:c3:9e:07:44:
d3:45:dc:b8:7a:8a:55:46:47:06:31:2b:62:23:fc:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:90:06:58:07:62:CC:AD:D8:1C:68:64:30:71:36:99:33:08:C2
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:29:39:58:fe:7f:78:99:10:80:70:a4:c9:76:96:9f:03:76:
7d:bf:c4:f6:3b:f0:f5:48:d0:bd:3d:7c:40:0f:39:4a:d3:27:
cf:3c:b1:04:31:96:09:0c:9d:02:d6:46:4c:2f:9c:a2:01:0d:
4b:f2:6e:0d:3a:cd:e2:75:be:50:4c:16:6f:41:8a:03:bf:39:
57:47:fd:e9:f2:02:02:7d:7c:63:2e:2d:27:d0:04:e5:7b:07:
60:6e:b7:0c:8f:21:38:4b:1a:cb:63:d5:36:a2:a8:cf:5a:af:
42:65:83:e9:a1:8d:e8:42:f9:47:46:5c:3a:6c:14:d1:e7:8f:
4e:02:74:cc:bc:45:05:10:60:ce:0f:de:69:f5:42:d2:9a:1a:
e4:0e:68:81:de:51:1b:a7:03:30:df:5b:10:33:0c:99:0d:a6:
5a:6a:b3:33:09:90:c1:20:8c:92:66:04:59:a7:5b:b9:b0:8d:
a4:2d:fa:83:63:cd:1c:14:a9:55:ce:f8:92:d1:2f:50:0e:cd:
2c:0d:a1:4b:7a:3d:69:21:4a:a9:02:87:fd:ce:73:08:2d:f0:
68:2b:36:c3:6e:c4:ef:24:7e:83:11:09:21:2f:b2:fc:da:f4:
fd:01:a8:7d:cc:0d:e9:01:ca:fb:43:e4:90:9e:d9:bd:37:54:
b6:cd:58:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+51WUBG+kgh07LjSUudXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDQ5MTA5MjEzMGRlZGQ4NDY2ZmZkNWNjNTEwNTc2Yzg5
NGRmNmUwHhcNMjUwNDI3MTYwMTQwWhcNMjUwNDI4MTYwMTQwWjAzMTEwLwYDVQQD
Eyg5MWJkOTAwNjU4MDc2MmNjYWRkODFjNjg2NDMwNzEzNjk5MzMwOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LQ6e7uEiH8C0LD5U9CaIKuy485l
Zap0VDyhr1a1EhswXNyMwp1ME3E8P7pxUZWTOW2Ch7+8URKLKrcg0aznuZ/wqSTu
T10A8M5mbjxYLcY/1oFA+hgMWWZvfLZsUsZA7twVaQbFeJKIvPH0DbSnpdpcRBhM
Rs7dklE0rYFIFVMDaXRAzQmkoJ5bR1NamgTYDyGUh8PoRe+LiPe2UHTFpS3AIIfC
TUw2aFTqx+X0Ga9sPQ8aOOMz0R0cBpHP0VlxAFnvrgWSYcb7EG26A48bTK3D/psH
X2gm2GC8tAAX1CltbAwqQMsOI+v/gMOeB0TTRdy4eopVRkcGMStiI/wOtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG9kAZYB2LMrdgcaGQwcTaZMwjCMB8GA1UdIwQY
MBaAFMUEkQkhMN7dhGb/1cxRBXbIlN9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgt
YmYxOTFkOWEyYzljLzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2EyNmMtYzM3My00ZTZkLTlmZDgtYmYxOTFkOWEyYzlj
LzEveFFTUkNTRXczdDJFWnZfVnpGRUZkc2lVMzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnik5WP5/
eJkQgHCkyXaWnwN2fb/E9jvw9UjQvT18QA85StMnzzyxBDGWCQydAtZGTC+cogEN
S/JuDTrN4nW+UEwWb0GKA785V0f96fICAn18Yy4tJ9AE5XsHYG63DI8hOEsay2PV
NqKoz1qvQmWD6aGN6EL5R0ZcOmwU0eePTgJ0zLxFBRBgzg/eafVC0poa5A5ogd5R
G6cDMN9bEDMMmQ2mWmqzMwmQwSCMkmYEWadbubCNpC36g2PNHBSpVc74ktEvUA7N
LA2hS3o9aSFKqQKH/c5zCC3waCs2w27E7yR+gxEJIS+y/Nr0/QGofcwN6QHK+0Pk
kJ7ZvTdUts1YwQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:34:02 2025 by rpki-client