Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: SYaHt/6eLwJFm0x7+8Vlyn1lB1NMPlZFViOoMkCCIKk=
Subject key identifier: 33:47:6B:27:E9:2F:9C:BE:71:E8:3E:E8:51:1C:F9:58:9A:87:ED:9F
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0196741EC15C543A045FFEF27B04C6EF484D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1515
Signing time: Sat 26 Apr 2025 22:01:34 +0000
Manifest this update: Sat 26 Apr 2025 22:01:34 +0000
Manifest next update: Sun 27 Apr 2025 22:01:34 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: N+UDG3sP/vaJ5AJ30trabpDROZTJIkXzjgPdHVJ8FIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:c1:5c:54:3a:04:5f:fe:f2:7b:04:c6:ef:48:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Apr 26 22:01:34 2025 GMT
Not After : Apr 27 22:01:34 2025 GMT
Subject: CN=33476b27e92f9cbe71e83ee8511cf9589a87ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:11:36:86:7e:47:43:d5:e5:d0:fa:34:86:
a9:9d:2d:5a:e0:31:d0:8b:65:dc:de:df:e3:75:34:
fd:9a:d2:64:b7:5e:9d:be:f5:e2:b5:04:5f:bd:6d:
4a:eb:69:62:89:10:c7:b7:5e:40:51:5d:f6:7a:3f:
0f:68:a7:95:e2:c7:83:3f:9a:30:16:8f:9f:45:d0:
97:79:71:a7:38:51:67:82:1d:9b:df:40:c0:46:48:
d0:4e:ea:83:03:62:26:42:f5:a4:a2:d8:f5:d1:c6:
d0:5f:bc:1e:7f:36:e0:d2:e4:28:5e:89:d1:a1:46:
44:2c:d2:a2:88:51:28:9c:a2:04:a4:82:85:e1:ea:
b3:5d:38:bd:6b:5c:f1:43:5e:49:63:6a:12:92:af:
ae:26:8b:f9:e8:26:1a:28:53:18:fe:d5:16:35:b1:
12:b6:39:f6:8e:17:ab:c3:34:6c:02:c0:7d:c5:e2:
fb:c0:8d:a0:7f:e0:03:f0:75:bc:52:84:d2:52:33:
cc:81:cd:cc:6d:e6:44:9f:b9:f3:c2:55:0c:0c:e0:
11:e5:2a:e0:cf:15:30:6a:09:83:9f:c0:54:cd:d8:
71:40:3b:04:d5:cf:ac:8e:42:74:8f:a0:8a:c4:aa:
cf:b3:d6:8a:2d:3b:71:b7:14:5b:ed:dc:a5:56:fd:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:6B:27:E9:2F:9C:BE:71:E8:3E:E8:51:1C:F9:58:9A:87:ED:9F
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:30:6f:00:6c:63:45:62:a1:b9:70:23:d2:f1:bb:ce:b8:6d:
fa:0c:05:66:5b:6a:df:8c:58:4f:1f:09:05:3a:1a:5b:f8:92:
83:5e:09:ca:0f:dd:c5:05:14:29:40:f9:4d:2f:11:e3:cb:d4:
bd:9b:ca:75:89:56:33:d3:eb:70:8c:b7:95:2d:7a:2f:6f:ef:
84:f0:a5:df:7d:30:1b:a2:73:41:5b:97:ce:a5:be:3c:1b:ea:
6c:66:b7:cb:fb:25:60:ac:e0:06:45:5d:db:4c:7d:40:ec:cf:
fd:11:78:2e:de:a9:9a:eb:5e:05:84:48:75:c8:ad:75:25:41:
60:27:63:ae:7f:da:b1:71:5d:28:b2:bc:00:c1:a0:2b:6e:54:
cc:a7:e3:12:9d:b1:43:f3:c3:8c:ec:de:af:9b:44:59:8a:10:
05:59:27:8b:70:e2:73:9a:36:68:7e:e1:e9:f0:48:60:72:c8:
8f:7e:4b:85:35:8f:07:07:66:d4:28:a4:2c:40:7a:30:59:ce:
50:3b:af:4a:6c:b1:ee:71:75:27:62:f5:2a:a0:53:ff:e7:de:
48:3c:6d:84:45:94:91:48:21:ed:92:12:e9:34:9c:00:72:66:
62:50:94:65:d5:f7:d9:48:71:02:13:2c:f0:41:a0:6a:3b:02:
fe:bd:d0:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HsFcVDoEX/7yewTG70hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjUwNDI2MjIwMTM0WhcNMjUwNDI3MjIwMTM0WjAzMTEwLwYDVQQD
EygzMzQ3NmIyN2U5MmY5Y2JlNzFlODNlZTg1MTFjZjk1ODlhODdlZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPwRNoZ+R0PV5dD6NIapnS1a4DHQ
i2Xc3t/jdTT9mtJkt16dvvXitQRfvW1K62liiRDHt15AUV32ej8PaKeV4seDP5ow
Fo+fRdCXeXGnOFFngh2b30DARkjQTuqDA2ImQvWkotj10cbQX7wefzbg0uQoXonR
oUZELNKiiFEonKIEpIKF4eqzXTi9a1zxQ15JY2oSkq+uJov56CYaKFMY/tUWNbES
tjn2jherwzRsAsB9xeL7wI2gf+AD8HW8UoTSUjPMgc3MbeZEn7nzwlUMDOAR5Srg
zxUwagmDn8BUzdhxQDsE1c+sjkJ0j6CKxKrPs9aKLTtxtxRb7dylVv32zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNHayfpL5y+ceg+6FEc+Viah+2fMB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzBvAGxj
RWKhuXAj0vG7zrht+gwFZltq34xYTx8JBToaW/iSg14Jyg/dxQUUKUD5TS8R48vU
vZvKdYlWM9PrcIy3lS16L2/vhPCl330wG6JzQVuXzqW+PBvqbGa3y/slYKzgBkVd
20x9QOzP/RF4Lt6pmuteBYRIdcitdSVBYCdjrn/asXFdKLK8AMGgK25UzKfjEp2x
Q/PDjOzer5tEWYoQBVkni3Dic5o2aH7h6fBIYHLIj35LhTWPBwdm1CikLEB6MFnO
UDuvSmyx7nF1J2L1KqBT/+feSDxthEWUkUgh7ZIS6TScAHJmYlCUZdX32UhxAhMs
8EGgajsC/r3QVw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:07:24 2025 by rpki-client