Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: DGYkYas5Y2y9ms41vl5hobO37yKvbgmh1zPXHvlr7NE=
Subject key identifier: 43:95:0D:AB:E9:42:DA:DA:EF:91:EE:0D:E7:42:51:40:52:77:56:C2
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 01967CE9AF458833B7DCEF89E4A1912DE54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 15:00:11 +0000
Manifest this update: Mon 28 Apr 2025 15:00:11 +0000
Manifest next update: Tue 29 Apr 2025 15:00:11 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: oD4UZ860n2sTWjvVpPQuUZrEOFo426eiyt1oLh4GCRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:af:45:88:33:b7:dc:ef:89:e4:a1:91:2d:e5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Apr 28 15:00:11 2025 GMT
Not After : Apr 29 15:00:11 2025 GMT
Subject: CN=43950dabe942dadaef91ee0de7425140527756c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:f9:f9:ad:50:63:bf:fd:53:69:60:5d:fa:
2e:d4:a6:c1:fd:5c:ef:c6:68:a0:2a:c3:c1:6f:e5:
e8:2a:55:c9:90:40:12:36:96:a9:2b:76:ad:4d:ed:
67:53:11:a9:11:73:0d:01:b1:46:f8:e5:c3:00:e4:
99:fe:7f:af:5c:3a:85:b9:6c:d6:53:56:22:ce:3a:
31:a8:70:81:56:54:ec:82:62:ee:31:93:02:91:3e:
3b:c7:48:cb:f9:90:01:c4:5e:c5:ef:b1:70:0a:17:
ec:09:15:d0:96:56:be:a5:b6:14:e7:15:71:12:4f:
02:c0:53:bc:f0:a3:b3:45:eb:35:ed:3e:2d:52:b3:
16:06:26:69:0d:9b:7f:6e:5d:19:23:8e:d8:fe:91:
77:22:bf:d9:12:3b:c0:a5:8d:d9:9c:e5:b1:1c:7e:
b9:b6:9b:b2:76:da:a4:f0:7a:62:3e:6d:44:f9:44:
95:5f:a3:e0:ee:ca:93:f8:f9:54:3f:2f:45:5e:5a:
77:20:bf:d6:54:27:79:80:72:74:2a:7d:08:18:b2:
7c:a7:16:cf:b6:d5:e9:53:63:a7:db:ab:0b:62:86:
01:65:40:fc:1f:d0:e5:c2:5c:16:94:b0:13:42:99:
dd:b9:76:ff:58:2f:35:5e:b9:67:fc:4d:98:26:d5:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:95:0D:AB:E9:42:DA:DA:EF:91:EE:0D:E7:42:51:40:52:77:56:C2
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:71:f6:8b:a3:fe:85:05:cd:86:93:08:a9:7b:b7:94:07:
e6:bf:02:85:ef:76:62:2a:55:83:2d:85:42:46:10:80:0e:53:
26:5a:05:b0:5a:73:ca:75:f5:3b:a9:41:75:61:61:85:f8:ae:
c4:2f:25:7a:bc:28:21:ee:36:3c:96:bc:3f:a6:54:d0:1e:29:
db:da:66:97:52:75:0e:d4:7c:63:a3:16:c8:2c:5a:49:42:34:
04:23:ad:65:8b:a3:08:a4:4b:4f:d7:01:1e:50:d9:8b:6b:43:
59:e7:3e:33:e4:91:ec:87:4e:48:b7:b1:15:62:41:7b:be:c7:
59:1d:65:1e:03:80:ea:89:cd:50:2a:ba:b1:70:20:2b:b7:21:
d9:86:5d:fb:6d:b7:d9:66:d0:2d:77:ea:ba:f1:13:e5:32:61:
03:cb:f4:d8:77:26:d5:d4:2e:0a:77:1a:a9:81:16:84:41:73:
61:6a:4c:4d:5e:f5:88:99:f1:4e:e5:d8:cf:8f:2a:64:f2:04:
27:c5:bf:b6:22:97:d2:c7:f5:19:9f:e7:07:01:75:3d:d5:53:
f3:28:a8:ee:12:c4:14:4c:4a:f7:14:2b:15:e0:be:db:a5:f2:
c9:ac:ac:25:2e:d7:22:8b:04:fe:03:f0:90:0d:b3:b2:11:e8:
94:a1:e2:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86a9FiDO33O+J5KGRLeVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MGZmY2E5ZDhjYTA4ZjIxM2U2MGEwMDQ4YzE3ZmJiMGJm
NjBlN2MwHhcNMjUwNDI4MTUwMDExWhcNMjUwNDI5MTUwMDExWjAzMTEwLwYDVQQD
Eyg0Mzk1MGRhYmU5NDJkYWRhZWY5MWVlMGRlNzQyNTE0MDUyNzc1NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26n5+a1QY7/9U2lgXfou1KbB/Vzv
xmigKsPBb+XoKlXJkEASNpapK3atTe1nUxGpEXMNAbFG+OXDAOSZ/n+vXDqFuWzW
U1YizjoxqHCBVlTsgmLuMZMCkT47x0jL+ZABxF7F77FwChfsCRXQlla+pbYU5xVx
Ek8CwFO88KOzRes17T4tUrMWBiZpDZt/bl0ZI47Y/pF3Ir/ZEjvApY3ZnOWxHH65
tpuydtqk8HpiPm1E+USVX6Pg7sqT+PlUPy9FXlp3IL/WVCd5gHJ0Kn0IGLJ8pxbP
ttXpU2On26sLYoYBZUD8H9DlwlwWlLATQpnduXb/WC81Xrln/E2YJtVB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOVDavpQtra75HuDedCUUBSd1bCMB8GA1UdIwQY
MBaAFMYP/KnYygjyE+YKAEjBf7sL9g58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGdfOHFkaktDUElUNWdvQVNNRl91d3YyRG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81Y2Y5YTUtMTFlMC00ODc2LTlmZTQt
ZjUwZjcxZDVlMGM4LzEveGdfOHFkaktDUElUNWdvQVNNRl91d3YyRG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81Y2Y5YTUtMTFlMC00ODc2LTlmZTQtZjUwZjcxZDVlMGM4
LzEveGdfOHFkaktDUElUNWdvQVNNRl91d3YyRG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdZx9ouj
/oUFzYaTCKl7t5QH5r8Che92YipVgy2FQkYQgA5TJloFsFpzynX1O6lBdWFhhfiu
xC8lerwoIe42PJa8P6ZU0B4p29pml1J1DtR8Y6MWyCxaSUI0BCOtZYujCKRLT9cB
HlDZi2tDWec+M+SR7IdOSLexFWJBe77HWR1lHgOA6onNUCq6sXAgK7ch2YZd+223
2WbQLXfquvET5TJhA8v02Hcm1dQuCncaqYEWhEFzYWpMTV71iJnxTuXYz48qZPIE
J8W/tiKX0sf1GZ/nBwF1PdVT8yio7hLEFExK9xQrFeC+26XyyaysJS7XIosE/gPw
kA2zshHolKHiLQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:09 2025 by rpki-client