
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: 9DrB45lM23G4toeU6CDowDJ0bNf2ETDBmFYNFAxDi/Q=
Subject key identifier: BE:FF:5F:58:FF:5F:6C:AF:3F:1D:D2:AF:42:F0:85:15:37:B6:C3:55
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 01967FB4E178791F43F64B3872AB65FC3776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 150E
Signing time: Tue 29 Apr 2025 04:01:22 +0000
Manifest this update: Tue 29 Apr 2025 04:01:22 +0000
Manifest next update: Wed 30 Apr 2025 04:01:22 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: YK6p5kWy5PjTYOSrcJDMq6ABPjiBdpNn/O2h4QjZL6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:e1:78:79:1f:43:f6:4b:38:72:ab:65:fc:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Apr 29 04:01:22 2025 GMT
Not After : Apr 30 04:01:22 2025 GMT
Subject: CN=beff5f58ff5f6caf3f1dd2af42f0851537b6c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:07:63:5d:9a:15:00:ec:9b:6a:3c:82:e2:
e1:b6:f1:7d:06:e6:91:19:03:1f:00:75:02:50:9e:
10:71:97:12:22:40:ad:cc:09:04:26:1d:10:f0:c2:
9d:0d:ab:40:56:21:c8:16:9a:80:66:72:8d:7a:3a:
8c:6b:b0:ef:76:09:aa:55:31:d9:eb:3b:08:0b:5c:
95:62:94:56:26:06:b5:fb:42:d5:90:dd:3d:90:83:
de:c7:22:b1:fd:94:9a:62:ec:75:ac:d6:d3:db:58:
d6:df:16:c5:ed:b5:7b:ae:c5:3b:e5:68:c7:4b:c5:
ba:db:fc:a7:ac:ea:d5:ef:c3:fb:04:0f:8a:fa:f5:
cf:4f:d1:24:17:e9:dc:38:ba:ca:2c:32:3b:9e:b3:
a6:b6:76:7a:e8:ed:57:0c:b3:ea:69:b4:7b:15:ff:
42:6a:20:0f:e4:03:fb:d5:15:49:63:ab:b4:0a:a4:
9c:ac:ba:e1:03:2b:d7:5b:7e:a4:ca:e5:56:72:62:
1c:04:b5:9f:6e:23:66:b8:73:d3:14:bb:1b:ca:d5:
94:81:fd:75:71:eb:ff:ab:a7:cb:33:80:26:f1:14:
cd:7e:a3:0f:2e:33:d4:aa:7e:6b:d5:27:d2:85:93:
21:9f:30:c3:2b:be:74:22:5e:83:f9:1a:59:d1:fd:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FF:5F:58:FF:5F:6C:AF:3F:1D:D2:AF:42:F0:85:15:37:B6:C3:55
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:87:4e:ea:5f:4f:8b:7d:30:a9:03:89:5c:9f:fe:cd:29:
96:10:4a:91:2a:bb:a5:fc:0d:94:e3:13:c0:05:e9:d8:59:87:
5d:67:bc:ff:ca:5e:98:4b:8a:da:e2:bf:a4:46:59:69:f6:24:
0c:f9:48:2e:85:5b:5a:ea:49:88:fb:2e:d5:91:74:c9:1a:9d:
ec:55:76:31:ab:90:86:3c:39:a1:79:da:0e:e1:e0:89:c6:4a:
32:ba:2d:02:04:6b:01:92:91:98:8e:50:1f:e9:f2:56:49:3a:
f8:32:f1:41:6f:d5:67:c2:71:8b:90:74:fc:3a:21:53:4f:ef:
81:3c:a3:01:73:23:29:2b:4a:28:bb:64:36:68:a8:72:59:c3:
c7:60:d6:cb:f0:5e:8c:cc:b9:97:69:f0:60:51:ba:2e:ef:19:
0c:ae:1d:ee:59:a0:8e:ec:be:14:38:3c:43:fe:01:27:bd:fc:
3d:08:0e:95:7b:17:bb:5e:62:26:03:6f:ff:af:80:4d:62:71:
5e:de:e1:80:d9:48:e0:f6:5e:31:74:96:84:ae:8b:3c:a4:d1:
5d:7a:20:5d:4f:59:75:9c:0d:f8:d8:16:55:f8:15:c4:9f:c6:
72:db:ea:33:a0:01:67:f0:6f:6b:21:db:67:13:c1:37:f1:a8:
82:67:92:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tOF4eR9D9ks4cqtl/Dd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NWNmZGI5ODAzY2UwNTcxNDJkMTg3Zjg2YmM0ZjU2NzFk
N2ViN2IwHhcNMjUwNDI5MDQwMTIyWhcNMjUwNDMwMDQwMTIyWjAzMTEwLwYDVQQD
EyhiZWZmNWY1OGZmNWY2Y2FmM2YxZGQyYWY0MmYwODUxNTM3YjZjMzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d0HY12aFQDsm2o8guLhtvF9BuaR
GQMfAHUCUJ4QcZcSIkCtzAkEJh0Q8MKdDatAViHIFpqAZnKNejqMa7DvdgmqVTHZ
6zsIC1yVYpRWJga1+0LVkN09kIPexyKx/ZSaYux1rNbT21jW3xbF7bV7rsU75WjH
S8W62/ynrOrV78P7BA+K+vXPT9EkF+ncOLrKLDI7nrOmtnZ66O1XDLPqabR7Ff9C
aiAP5AP71RVJY6u0CqScrLrhAyvXW36kyuVWcmIcBLWfbiNmuHPTFLsbytWUgf11
cev/q6fLM4Am8RTNfqMPLjPUqn5r1SfShZMhnzDDK750Il6D+RpZ0f2F5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7/X1j/X2yvPx3Sr0LwhRU3tsNVMB8GA1UdIwQY
MBaAFMRc/bmAPOBXFC0Yf4a8T1Zx1+t7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQt
ZDVhMTc3MTc4ZjRhLzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMjU0YmQtMTQ1Yy00MDE5LTg4YTQtZDVhMTc3MTc4ZjRh
LzEveEZ6OXVZQTg0RmNVTFJoX2hyeFBWbkhYNjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0yHTupf
T4t9MKkDiVyf/s0plhBKkSq7pfwNlOMTwAXp2FmHXWe8/8pemEuK2uK/pEZZafYk
DPlILoVbWupJiPsu1ZF0yRqd7FV2MauQhjw5oXnaDuHgicZKMrotAgRrAZKRmI5Q
H+nyVkk6+DLxQW/VZ8Jxi5B0/DohU0/vgTyjAXMjKStKKLtkNmioclnDx2DWy/Be
jMy5l2nwYFG6Lu8ZDK4d7lmgjuy+FDg8Q/4BJ738PQgOlXsXu15iJgNv/6+ATWJx
Xt7hgNlI4PZeMXSWhK6LPKTRXXogXU9ZdZwN+NgWVfgVxJ/GctvqM6ABZ/BvayHb
ZxPBN/GogmeSKQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:34:13 2025 by rpki-client