Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: 39FTH3zena1Mzxnkv4VrnndQ0G2TJr7ZiNRE4KzQElM=
Subject key identifier: FD:C7:21:25:CD:F5:DB:DD:5A:EC:19:74:F6:DF:47:34:A7:85:B7:09
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 01968B13359BD58CE835AECD3E942E198536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 088D
Signing time: Thu 01 May 2025 09:00:14 +0000
Manifest this update: Thu 01 May 2025 09:00:14 +0000
Manifest next update: Fri 02 May 2025 09:00:14 +0000
Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=)
2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=)
3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: A+zWuXxzahUbbBbCtYTYEdoPvM+oUIJcj7k4KFvUSKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:35:9b:d5:8c:e8:35:ae:cd:3e:94:2e:19:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: May 1 09:00:14 2025 GMT
Not After : May 2 09:00:14 2025 GMT
Subject: CN=fdc72125cdf5dbdd5aec1974f6df4734a785b709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:98:20:25:6f:2e:38:ae:bc:b8:89:de:05:
65:b9:56:d4:28:f8:44:14:de:2d:90:98:67:3a:6e:
64:1d:8b:0f:61:a5:53:42:da:89:33:d4:3d:8c:69:
a5:a4:35:15:9d:14:dd:f5:3a:87:0c:7b:b8:c1:1d:
21:a6:55:ba:8b:96:b2:61:21:5a:31:40:5a:4e:9b:
52:b3:28:53:51:ee:0b:c4:07:12:06:5e:d0:83:00:
46:96:54:a1:c3:6a:50:ea:b7:9e:cd:6f:90:25:87:
3c:82:2c:10:42:ac:c4:3b:ff:71:90:ed:7d:82:a4:
03:68:b3:dd:79:7c:62:7d:76:66:7c:94:7e:dd:bf:
68:a1:29:96:d1:02:07:73:d3:ad:35:0d:28:81:34:
5a:a1:91:d2:1c:d3:5b:a6:2f:0a:d9:64:fe:2f:53:
c6:da:ec:3e:dc:5e:e4:f5:4c:4d:d4:82:bd:79:2a:
77:cf:45:c8:d9:73:b7:a8:9f:dd:73:d7:67:98:85:
b6:a9:fa:d4:0c:09:4f:04:6e:fc:c2:70:35:fc:41:
17:61:c1:41:b5:41:1d:50:87:16:d2:f3:e4:d2:25:
21:b3:4a:7c:db:4d:02:9c:4c:fc:48:44:3e:61:6e:
cd:01:36:b9:05:41:9a:ed:7e:f8:7c:15:a7:0d:6d:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:21:25:CD:F5:DB:DD:5A:EC:19:74:F6:DF:47:34:A7:85:B7:09
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:d4:0b:3e:d9:5c:27:80:78:64:2d:9a:7d:d1:55:71:3b:
b7:18:de:b6:16:b3:a8:25:9f:8d:e7:18:37:89:6e:07:2c:ae:
b3:01:0d:af:b0:3f:0c:8e:1e:e6:b0:8c:08:2e:e5:6a:01:e1:
4f:9b:6c:d6:78:3c:50:fb:c6:d8:d8:5c:e8:2b:13:4d:c5:f6:
d4:08:e1:07:3d:d6:19:6d:97:4f:d8:45:c8:7b:2c:dd:e9:9b:
6c:1a:26:1d:04:9a:51:c9:df:de:cb:13:6c:bb:ea:89:00:4a:
98:90:02:5a:ff:c5:6f:37:be:3a:8c:c8:dc:77:b4:96:3a:09:
dd:5a:87:d2:3f:e8:64:c3:c3:60:87:a0:44:56:88:da:fb:d3:
d6:2c:d1:fe:4b:ff:b6:8d:0d:59:b4:b5:4c:f4:4b:89:e0:f5:
7e:f1:e7:72:5d:2b:f9:9d:82:6b:34:bd:39:9a:a1:39:18:b7:
6e:e2:c7:c1:27:6f:98:65:17:69:d2:37:92:22:2d:33:98:dd:
a7:71:12:b2:44:44:bd:f2:35:ae:40:34:de:f8:bf:2f:e0:25:
96:91:ce:75:b0:0c:91:09:c3:cf:8a:b2:c5:88:8b:e2:88:6e:
37:bd:81:2b:24:50:3a:ba:3f:a5:17:d7:9a:31:6e:6e:c3:89:
4d:2a:3e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLEzWb1YzoNa7NPpQuGYU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi
NGIxMjgwHhcNMjUwNTAxMDkwMDE0WhcNMjUwNTAyMDkwMDE0WjAzMTEwLwYDVQQD
EyhmZGM3MjEyNWNkZjVkYmRkNWFlYzE5NzRmNmRmNDczNGE3ODViNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6YICVvLjiuvLiJ3gVluVbUKPhE
FN4tkJhnOm5kHYsPYaVTQtqJM9Q9jGmlpDUVnRTd9TqHDHu4wR0hplW6i5ayYSFa
MUBaTptSsyhTUe4LxAcSBl7QgwBGllShw2pQ6reezW+QJYc8giwQQqzEO/9xkO19
gqQDaLPdeXxifXZmfJR+3b9ooSmW0QIHc9OtNQ0ogTRaoZHSHNNbpi8K2WT+L1PG
2uw+3F7k9UxN1IK9eSp3z0XI2XO3qJ/dc9dnmIW2qfrUDAlPBG78wnA1/EEXYcFB
tUEdUIcW0vPk0iUhs0p8200CnEz8SEQ+YW7NATa5BUGa7X74fBWnDW11UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3HISXN9dvdWuwZdPbfRzSnhbcJMB8GA1UdIwQY
MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt
N2I0MTBiNzgxZGVmLzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm
LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpzUCz7Z
XCeAeGQtmn3RVXE7txjethazqCWfjecYN4luByyuswENr7A/DI4e5rCMCC7lagHh
T5ts1ng8UPvG2Nhc6CsTTcX21AjhBz3WGW2XT9hFyHss3embbBomHQSaUcnf3ssT
bLvqiQBKmJACWv/Fbze+OozI3He0ljoJ3VqH0j/oZMPDYIegRFaI2vvT1izR/kv/
to0NWbS1TPRLieD1fvHncl0r+Z2CazS9OZqhORi3buLHwSdvmGUXadI3kiItM5jd
p3ESskREvfI1rkA03vi/L+AllpHOdbAMkQnDz4qyxYiL4ohuN72BKyRQOro/pRfX
mjFubsOJTSo+0g==
-----END CERTIFICATE-----
Generated at Thu May 1 11:24:14 2025 by rpki-client