Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: 4LPAa7soVdfU5BgqZuS3cgjuvFAw1Xu2RukyHeqLz5Y=
Subject key identifier: 1C:E9:C9:03:26:63:DD:59:A1:E2:1C:90:8A:95:1B:5C:74:75:38:FA
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 01967DFCF84FB592F9D0D23CF038FD023B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0CC9
Signing time: Mon 28 Apr 2025 20:00:52 +0000
Manifest this update: Mon 28 Apr 2025 20:00:52 +0000
Manifest next update: Tue 29 Apr 2025 20:00:52 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: 8vsLXpeHvkbPbtEVKGA4EM5kGcnTzeiOxOWZNfo85a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:f8:4f:b5:92:f9:d0:d2:3c:f0:38:fd:02:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Apr 28 20:00:52 2025 GMT
Not After : Apr 29 20:00:52 2025 GMT
Subject: CN=1ce9c9032663dd59a1e21c908a951b5c747538fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:6f:ab:db:ba:fb:9f:8f:6f:6c:ab:47:79:
ad:be:7f:7c:40:8c:96:8f:5b:7e:bd:cb:e8:6c:24:
e7:5c:de:05:e4:ff:ab:2c:a9:a7:07:2f:f6:5b:63:
9a:9c:71:17:c2:57:44:07:49:2c:30:01:26:1b:93:
5f:3a:76:c7:67:d7:8c:66:79:8d:a3:e0:80:15:b6:
62:2d:09:4b:82:86:74:94:53:72:7e:b5:d2:a8:6c:
8c:d6:1e:a0:f5:76:cc:01:12:68:d1:b6:ff:4f:ca:
7a:56:d2:3e:fa:1b:0f:59:f4:4d:36:1a:21:bc:bb:
bf:17:1a:96:03:68:5a:2f:3d:a5:c6:01:b3:97:a0:
fa:dd:f6:27:f2:02:c8:50:8a:1b:46:e5:15:05:7f:
10:b8:d6:4d:46:c0:2f:95:45:92:ce:59:fe:c0:62:
de:77:01:d1:39:02:65:38:5b:37:27:16:f6:d9:a3:
b1:37:4e:e8:c4:c1:46:03:dd:ff:da:1d:51:58:3a:
ee:6d:3f:00:02:a8:bc:f1:d4:f4:88:42:fd:9d:c8:
50:d5:a9:aa:1f:8a:8a:58:bd:8c:e9:de:4e:21:3b:
85:ad:a1:60:d0:2f:e5:f5:85:2f:92:e7:eb:30:ae:
f5:9e:55:06:dc:b2:c1:35:4d:10:d7:40:34:0d:57:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:C9:03:26:63:DD:59:A1:E2:1C:90:8A:95:1B:5C:74:75:38:FA
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b8:47:5d:d5:28:e0:a7:cb:7d:df:c3:a8:1d:22:2f:87:72:
a3:61:46:ab:a2:d8:97:15:f3:51:80:af:98:51:78:bf:38:9d:
83:86:c2:7d:c8:00:0d:4e:9b:a5:2e:49:d1:0c:61:f5:22:dd:
0b:3a:61:9a:0e:ba:43:a0:6b:35:66:94:e8:f0:e8:ac:50:11:
6d:ee:d7:18:6a:d7:d1:b8:65:90:25:2e:fb:06:dc:2c:a9:ec:
94:b3:3d:ec:e7:5a:62:66:95:82:33:26:75:4b:ea:f1:1f:f8:
f0:01:3f:c1:a3:bd:9d:ea:2e:02:e1:fa:35:bd:23:a9:c1:0c:
e6:3f:f4:7a:5f:08:3b:1a:06:ad:2d:6c:b0:22:72:d5:25:ef:
59:1a:d5:9d:73:92:cb:8f:68:e8:8a:e3:ea:e7:2a:58:13:a7:
e6:40:f9:7a:c4:b6:7f:95:d0:54:e1:6a:62:28:35:38:e8:de:
bd:b1:43:34:80:8a:14:41:df:84:fa:e5:56:19:7a:e4:93:bf:
f7:b8:ee:dd:ea:14:d0:e2:6a:23:bd:87:e3:7a:cc:fe:2b:bd:
e2:ab:f2:56:1e:50:5b:8a:d0:4e:a7:1b:43:50:22:fd:e8:5c:
80:07:1f:bb:a0:f5:c7:a8:93:6a:86:80:78:12:b2:af:86:f2:
19:fc:94:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9/PhPtZL50NI88Dj9AjtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2UyYWJhMDUxNWVjOTBkMTA5MTEwNjBmY2YyOTIzNmQ3
NmRkZGYwHhcNMjUwNDI4MjAwMDUyWhcNMjUwNDI5MjAwMDUyWjAzMTEwLwYDVQQD
EygxY2U5YzkwMzI2NjNkZDU5YTFlMjFjOTA4YTk1MWI1Yzc0NzUzOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuntvq9u6+5+Pb2yrR3mtvn98QIyW
j1t+vcvobCTnXN4F5P+rLKmnBy/2W2OanHEXwldEB0ksMAEmG5NfOnbHZ9eMZnmN
o+CAFbZiLQlLgoZ0lFNyfrXSqGyM1h6g9XbMARJo0bb/T8p6VtI++hsPWfRNNhoh
vLu/FxqWA2haLz2lxgGzl6D63fYn8gLIUIobRuUVBX8QuNZNRsAvlUWSzln+wGLe
dwHROQJlOFs3Jxb22aOxN07oxMFGA93/2h1RWDrubT8AAqi88dT0iEL9nchQ1amq
H4qKWL2M6d5OITuFraFg0C/l9YUvkufrMK71nlUG3LLBNU0Q10A0DVcUcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzpyQMmY91ZoeIckIqVG1x0dTj6MB8GA1UdIwQY
MBaAFMU+KroFFeyQ0QkRBg/PKSNtdt3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQt
MTIwNTNhZGU5ZmFmLzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQtMTIwNTNhZGU5ZmFm
LzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7hHXdUo
4KfLfd/DqB0iL4dyo2FGq6LYlxXzUYCvmFF4vzidg4bCfcgADU6bpS5J0Qxh9SLd
Czphmg66Q6BrNWaU6PDorFARbe7XGGrX0bhlkCUu+wbcLKnslLM97OdaYmaVgjMm
dUvq8R/48AE/waO9neouAuH6Nb0jqcEM5j/0el8IOxoGrS1ssCJy1SXvWRrVnXOS
y49o6Irj6ucqWBOn5kD5esS2f5XQVOFqYig1OOjevbFDNICKFEHfhPrlVhl65JO/
97ju3eoU0OJqI72H43rM/iu94qvyVh5QW4rQTqcbQ1Ai/ehcgAcfu6D1x6iTaoaA
eBKyr4byGfyUnQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:49 2025 by rpki-client