Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: wDiiWVSDhZlVK5IOQuWDadbZe+w/8syd4u+Q0pAhD9c=
Subject key identifier: 61:C5:B8:73:15:70:E9:ED:7E:06:52:8F:8D:1A:EE:4D:E8:25:1E:6C
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 01967ED87FCCA9C51DDB82D03355C959543B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 0343
Signing time: Tue 29 Apr 2025 00:00:39 +0000
Manifest this update: Tue 29 Apr 2025 00:00:39 +0000
Manifest next update: Wed 30 Apr 2025 00:00:39 +0000
Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: hxHbU22Wsr2DTCO+dLuI3D4MuLxOlJlVvZfCHiRZ/EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:7f:cc:a9:c5:1d:db:82:d0:33:55:c9:59:54:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Apr 29 00:00:39 2025 GMT
Not After : Apr 30 00:00:39 2025 GMT
Subject: CN=61c5b8731570e9ed7e06528f8d1aee4de8251e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:08:43:fa:5e:0d:4e:3e:f3:bd:f6:ec:f5:
c1:64:41:39:b0:ce:83:51:76:3a:3a:8c:8f:f9:67:
38:d3:9e:a4:23:8c:c3:5b:92:83:e3:23:b6:e6:e8:
40:a0:2a:15:d7:67:4d:3c:e0:0d:96:cb:a2:af:e0:
55:05:87:66:05:43:09:00:e9:b8:44:77:ca:0e:87:
33:38:82:59:d1:8e:af:0d:d6:55:ce:29:30:6b:12:
48:15:9e:c4:b2:76:a9:f0:0b:9d:f3:20:41:cd:e2:
b2:07:6a:5e:75:72:09:6b:46:68:3d:4a:64:da:e6:
53:80:89:52:9f:e3:e8:9e:dd:6e:fa:1f:22:c9:b0:
7f:5c:90:0b:e2:98:72:47:a9:0f:20:1a:17:6f:f2:
9d:79:8f:b1:cf:a1:f1:13:08:32:b1:7d:fd:a0:a1:
7b:5c:67:7c:47:95:18:9e:a3:2c:51:c8:3e:94:5c:
11:df:48:1d:bf:2b:3b:28:54:72:64:9b:ff:6a:35:
12:53:68:1f:18:ca:44:9b:fd:7e:43:cf:b1:54:65:
f0:05:b1:ac:cf:1b:b0:f7:b1:6d:30:2f:6e:c1:c6:
e0:66:99:cf:fa:94:2b:75:5b:45:ea:14:aa:3a:68:
c2:d4:50:4c:44:d7:01:84:f1:2f:86:d8:c6:55:70:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:B8:73:15:70:E9:ED:7E:06:52:8F:8D:1A:EE:4D:E8:25:1E:6C
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3b:69:7d:5a:44:b9:98:46:09:4b:97:be:d5:ec:6b:74:39:
c8:63:73:12:e9:7d:50:76:03:a9:13:0e:e9:2f:ac:5b:e7:d0:
b6:6b:29:65:ac:de:22:7c:17:20:0a:30:f9:f7:a4:2a:16:c6:
ef:a3:57:1d:7a:97:5f:2b:a8:f5:47:c8:79:9b:34:58:ad:b5:
b4:5b:59:1a:ca:be:c5:b6:2e:56:1f:dd:2b:de:3d:06:51:92:
ed:4e:4c:c7:9f:1c:26:b4:24:bc:dc:5c:97:2a:88:71:59:c5:
8a:98:2c:0d:e1:cc:4e:47:d8:1a:c7:a6:49:b9:df:53:16:8a:
3f:56:5f:77:aa:45:01:54:b9:fc:66:8a:f3:01:80:b8:6a:94:
91:df:ee:cc:89:a5:7c:0a:a3:34:ee:c5:2c:58:33:72:53:dc:
93:67:c3:a4:6a:5d:95:0e:9d:73:c2:cc:c4:e8:de:de:c1:f4:
70:e3:68:ac:2a:17:4e:27:c7:04:bc:66:bd:5a:4e:5f:00:09:
f7:00:e8:24:6b:6e:e6:96:a6:e5:7e:84:98:5a:24:eb:86:10:
d3:74:7f:8b:02:8b:39:c7:a3:11:5d:ef:d2:82:44:e9:c3:5a:
63:b0:53:2c:97:60:72:a2:a9:67:08:f2:73:38:95:a8:35:b6:
ae:93:d4:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2H/MqcUd24LQM1XJWVQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3
YjRmZDYwHhcNMjUwNDI5MDAwMDM5WhcNMjUwNDMwMDAwMDM5WjAzMTEwLwYDVQQD
Eyg2MWM1Yjg3MzE1NzBlOWVkN2UwNjUyOGY4ZDFhZWU0ZGU4MjUxZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxncIQ/peDU4+87327PXBZEE5sM6D
UXY6OoyP+Wc4056kI4zDW5KD4yO25uhAoCoV12dNPOANlsuir+BVBYdmBUMJAOm4
RHfKDoczOIJZ0Y6vDdZVzikwaxJIFZ7Esnap8Aud8yBBzeKyB2pedXIJa0ZoPUpk
2uZTgIlSn+Pont1u+h8iybB/XJAL4phyR6kPIBoXb/KdeY+xz6HxEwgysX39oKF7
XGd8R5UYnqMsUcg+lFwR30gdvys7KFRyZJv/ajUSU2gfGMpEm/1+Q8+xVGXwBbGs
zxuw97FtMC9uwcbgZpnP+pQrdVtF6hSqOmjC1FBMRNcBhPEvhtjGVXBwEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHFuHMVcOntfgZSj40a7k3oJR5sMB8GA1UdIwQY
MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt
MTUzOThiYTViMGU3LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3
LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDtpfVpE
uZhGCUuXvtXsa3Q5yGNzEul9UHYDqRMO6S+sW+fQtmspZazeInwXIAow+fekKhbG
76NXHXqXXyuo9UfIeZs0WK21tFtZGsq+xbYuVh/dK949BlGS7U5Mx58cJrQkvNxc
lyqIcVnFipgsDeHMTkfYGsemSbnfUxaKP1Zfd6pFAVS5/GaK8wGAuGqUkd/uzIml
fAqjNO7FLFgzclPck2fDpGpdlQ6dc8LMxOje3sH0cONorCoXTifHBLxmvVpOXwAJ
9wDoJGtu5pam5X6EmFok64YQ03R/iwKLOcejEV3v0oJE6cNaY7BTLJdgcqKpZwjy
cziVqDW2rpPUKA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:21:42 2025 by rpki-client