Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: foeyyg52WvY3N/iu969Cq9k3iGgVyTqkKbnfJa5smNY=
Subject key identifier: 5B:42:A7:64:19:F4:FB:5D:EA:25:D7:30:80:50:AD:B9:14:90:84:77
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01969E2C362665684A339A0E3ECF271C6756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 02:00:19 +0000
Manifest this update: Mon 05 May 2025 02:00:19 +0000
Manifest next update: Tue 06 May 2025 02:00:19 +0000
Files and hashes: 1: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
2: wLU7Avpjwwyht_SeRmMxUJPBxKU.roa (hash: qyTPwsJWIqpmw5jM+jwATaIOl6TIhuH+//rg/QLmAbQ=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: 7xCI6MC12GeWZdzzXGpl7WN6J5GI2OSfy03xXmD3G90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:36:26:65:68:4a:33:9a:0e:3e:cf:27:1c:67:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: May 5 02:00:19 2025 GMT
Not After : May 6 02:00:19 2025 GMT
Subject: CN=5b42a76419f4fb5dea25d7308050adb914908477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:6b:04:10:5a:2b:ad:fd:b8:34:ba:e0:3d:
bd:54:1b:11:a7:36:fb:e2:8b:99:f9:cb:e3:06:d1:
99:e4:ed:d7:5d:ff:7b:d1:27:0e:3b:49:ef:10:54:
2a:86:f1:fc:eb:b0:48:b8:e4:fa:ab:68:41:30:d4:
47:fb:a2:5f:1f:6e:74:d1:64:78:c2:06:f2:8c:e7:
6d:62:70:28:00:ab:75:1b:5c:a1:fc:c9:2c:7c:37:
0d:16:01:c6:cc:47:a2:fc:60:a7:6d:88:fe:0f:5b:
ec:11:6b:b7:95:72:6f:c0:93:55:c3:c9:7d:df:6c:
64:23:c1:05:ef:a8:f6:06:34:0d:d1:e7:83:19:c2:
ba:ec:62:69:19:5c:2d:91:af:62:e3:c9:30:77:72:
3b:81:11:01:de:12:b1:94:b9:4b:cf:63:54:89:be:
be:78:db:20:2d:00:00:b7:27:1e:7b:34:91:01:b1:
79:b5:8b:ac:cb:42:91:81:d3:6e:a5:a2:b8:b2:bd:
e3:f2:9b:0b:70:cc:74:0f:5a:ea:e8:9f:df:66:b2:
78:65:d3:0f:16:75:cb:e9:69:b8:f4:bf:57:de:56:
87:73:3c:e6:af:9e:2d:79:4f:64:82:08:ba:1a:77:
bd:dd:94:21:0b:a9:e5:8d:da:18:9d:76:eb:19:2d:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:A7:64:19:F4:FB:5D:EA:25:D7:30:80:50:AD:B9:14:90:84:77
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:48:eb:e6:66:50:8e:c3:fd:16:6f:66:5e:09:89:9f:98:
71:5e:aa:79:f4:91:db:99:4b:f2:15:82:f7:4b:8b:f8:11:8b:
30:0e:1e:a3:8f:41:f1:64:4e:17:c3:79:bb:9b:19:f3:b3:84:
9e:af:57:74:cf:23:af:9f:2b:f0:7c:63:c6:d0:13:4c:b1:5d:
d3:14:30:b5:ce:88:dc:72:fe:40:36:39:37:d2:41:c5:29:39:
3d:3a:f4:27:6b:2b:f5:12:03:e8:2e:43:91:01:cd:26:d7:43:
88:ab:9f:d7:a2:71:68:7a:fc:1c:20:7b:11:4d:48:6e:d3:0a:
87:ce:44:3e:ce:9c:ed:9e:b9:a0:0a:91:27:9e:ee:a1:49:d7:
bb:a5:56:44:66:c6:c8:77:a9:47:6b:8f:d4:fc:65:e6:04:34:
87:23:f8:5b:73:14:5f:30:d8:fe:cd:bf:db:44:d6:ba:03:fb:
22:b6:f9:e2:23:c4:93:ef:2c:9a:1b:4a:92:64:89:3d:24:2a:
13:8d:06:be:cb:39:ab:71:e3:7e:e4:6f:73:f8:78:6c:48:3f:
e7:8d:8d:f9:aa:49:53:80:dd:67:a4:69:2c:54:84:a1:1c:f1:
0c:9c:d2:79:6c:24:03:ca:7d:20:61:ae:b1:dc:94:5b:c0:48:
da:00:65:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLDYmZWhKM5oOPs8nHGdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4
ZGNhODcwHhcNMjUwNTA1MDIwMDE5WhcNMjUwNTA2MDIwMDE5WjAzMTEwLwYDVQQD
Eyg1YjQyYTc2NDE5ZjRmYjVkZWEyNWQ3MzA4MDUwYWRiOTE0OTA4NDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkhrBBBaK639uDS64D29VBsRpzb7
4ouZ+cvjBtGZ5O3XXf970ScOO0nvEFQqhvH867BIuOT6q2hBMNRH+6JfH2500WR4
wgbyjOdtYnAoAKt1G1yh/MksfDcNFgHGzEei/GCnbYj+D1vsEWu3lXJvwJNVw8l9
32xkI8EF76j2BjQN0eeDGcK67GJpGVwtka9i48kwd3I7gREB3hKxlLlLz2NUib6+
eNsgLQAAtyceezSRAbF5tYusy0KRgdNupaK4sr3j8psLcMx0D1rq6J/fZrJ4ZdMP
FnXL6Wm49L9X3laHczzmr54teU9kggi6Gne93ZQhC6nljdoYnXbrGS2RywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtCp2QZ9Ptd6iXXMIBQrbkUkIR3MB8GA1UdIwQY
MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt
ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh
LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMxI6+Zm
UI7D/RZvZl4JiZ+YcV6qefSR25lL8hWC90uL+BGLMA4eo49B8WROF8N5u5sZ87OE
nq9XdM8jr58r8HxjxtATTLFd0xQwtc6I3HL+QDY5N9JBxSk5PTr0J2sr9RID6C5D
kQHNJtdDiKuf16JxaHr8HCB7EU1IbtMKh85EPs6c7Z65oAqRJ57uoUnXu6VWRGbG
yHepR2uP1Pxl5gQ0hyP4W3MUXzDY/s2/20TWugP7Irb54iPEk+8smhtKkmSJPSQq
E40Gvss5q3HjfuRvc/h4bEg/542N+apJU4DdZ6RpLFSEoRzxDJzSeWwkA8p9IGGu
sdyUW8BI2gBlWA==
-----END CERTIFICATE-----
Generated at Mon May 5 09:52:30 2025 by rpki-client