Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: +Wi8IIQoDrkOxTXkMJQkQL3ykL7U0WqWKFAJH6UecTc=
Subject key identifier: 11:11:69:ED:85:B6:B2:44:A5:0A:E3:2C:E4:EE:65:77:6F:DE:BE:11
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019678D5FBCF5F8211AD2791EA560FA23B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 20:00:11 +0000
Manifest this update: Sun 27 Apr 2025 20:00:11 +0000
Manifest next update: Mon 28 Apr 2025 20:00:11 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: ldHeV/IuYfil0gxat1qDtyW+Y8i+BP8UguTY0jJY1j4=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d5:fb:cf:5f:82:11:ad:27:91:ea:56:0f:a2:3b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Apr 27 20:00:11 2025 GMT
Not After : Apr 28 20:00:11 2025 GMT
Subject: CN=111169ed85b6b244a50ae32ce4ee65776fdebe11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:4a:7e:52:e4:c7:1b:d5:98:bf:fb:98:ca:
b9:f2:52:80:42:af:be:2e:be:e4:f3:88:6a:95:15:
b4:fe:f4:54:70:48:c1:b3:c6:57:91:ef:61:c6:f2:
65:cd:19:6d:c0:de:8b:8b:1b:e2:02:f8:d6:a9:24:
d3:a3:94:a6:a5:0e:20:c8:04:d1:56:36:2f:f2:ea:
0e:b5:38:b2:de:7d:6e:99:21:70:2a:fd:1a:bf:d9:
40:d1:60:50:ad:76:4d:63:fa:20:e7:da:39:4f:a5:
61:b2:b6:10:3b:ab:6a:dc:92:8f:c6:30:7c:17:17:
32:be:4a:a4:8c:d1:fd:e4:a8:71:e5:05:f5:f6:4c:
e9:77:32:a2:da:90:fd:56:ed:cb:65:73:23:99:7e:
9a:b1:d4:c5:ea:57:f1:07:d6:ab:d1:8d:e0:a9:c9:
61:0e:7b:fc:55:59:99:93:b4:6a:39:bc:6a:78:39:
d6:f6:68:f5:42:66:64:7d:da:29:6d:2d:a7:3d:31:
20:bb:b6:5a:a0:0f:77:29:df:f1:9b:c7:35:64:ba:
51:d8:c2:1c:b5:d1:f3:8d:0e:61:cd:9b:e1:5b:02:
2e:b3:11:b8:40:4b:3f:f6:5d:9a:fa:ed:0e:36:e4:
88:d2:5b:ed:5b:8c:88:1c:59:ea:08:c0:98:a6:9a:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:69:ED:85:B6:B2:44:A5:0A:E3:2C:E4:EE:65:77:6F:DE:BE:11
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:33:36:37:12:20:10:d7:54:62:22:04:88:53:12:46:ed:
05:fc:02:44:8e:80:3f:57:0f:fb:fc:58:14:e0:3a:64:14:a9:
a3:66:58:1e:b9:f3:de:0f:21:0f:3e:c7:f2:52:42:c0:6a:99:
a2:55:66:fb:58:ee:41:02:02:ee:c9:2c:24:59:6d:93:1f:b6:
c1:0a:20:73:5e:8c:20:15:fa:83:dd:2c:cc:23:45:13:eb:34:
f5:f9:76:26:07:99:34:2a:90:23:b1:6f:23:f2:cd:21:31:d4:
87:d4:e9:ef:18:e9:16:8a:b3:87:f9:e2:f9:90:3c:09:65:f5:
c5:0b:42:e0:2b:b6:d6:24:fe:a5:46:34:6f:39:d9:fb:8b:3a:
bc:81:fd:70:ef:a4:81:95:d7:d8:ae:63:b3:85:7d:51:9f:f9:
b7:51:4b:6e:5c:cb:59:d7:25:9d:8e:35:b1:5c:8a:1c:d0:2f:
de:24:2c:ce:e3:c2:46:d4:67:38:38:37:b4:9e:e5:a8:f5:3b:
e5:c3:ee:81:08:ed:2d:46:40:70:87:1d:5e:a1:04:7a:ff:cb:
da:26:2a:15:14:b5:32:b5:23:ad:1d:16:c5:80:ee:62:4f:55:
20:71:77:19:06:75:ec:b6:8b:91:f3:06:bf:29:72:c6:55:c0:
03:72:6f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41fvPX4IRrSeR6lYPojtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjUwNDI3MjAwMDExWhcNMjUwNDI4MjAwMDExWjAzMTEwLwYDVQQD
EygxMTExNjllZDg1YjZiMjQ0YTUwYWUzMmNlNGVlNjU3NzZmZGViZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8BKflLkxxvVmL/7mMq58lKAQq++
Lr7k84hqlRW0/vRUcEjBs8ZXke9hxvJlzRltwN6LixviAvjWqSTTo5SmpQ4gyATR
VjYv8uoOtTiy3n1umSFwKv0av9lA0WBQrXZNY/og59o5T6VhsrYQO6tq3JKPxjB8
FxcyvkqkjNH95Khx5QX19kzpdzKi2pD9Vu3LZXMjmX6asdTF6lfxB9ar0Y3gqclh
Dnv8VVmZk7RqObxqeDnW9mj1QmZkfdopbS2nPTEgu7ZaoA93Kd/xm8c1ZLpR2MIc
tdHzjQ5hzZvhWwIusxG4QEs/9l2a+u0ONuSI0lvtW4yIHFnqCMCYpprzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBERae2FtrJEpQrjLOTuZXdv3r4RMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbszNjcS
IBDXVGIiBIhTEkbtBfwCRI6AP1cP+/xYFOA6ZBSpo2ZYHrnz3g8hDz7H8lJCwGqZ
olVm+1juQQIC7sksJFltkx+2wQogc16MIBX6g90szCNFE+s09fl2JgeZNCqQI7Fv
I/LNITHUh9Tp7xjpFoqzh/ni+ZA8CWX1xQtC4Cu21iT+pUY0bznZ+4s6vIH9cO+k
gZXX2K5js4V9UZ/5t1FLblzLWdclnY41sVyKHNAv3iQszuPCRtRnODg3tJ7lqPU7
5cPugQjtLUZAcIcdXqEEev/L2iYqFRS1MrUjrR0WxYDuYk9VIHF3GQZ17LaLkfMG
vylyxlXAA3Jv9w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:16 2025 by rpki-client