Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: SkM8WaI23YN6FYak6ya/V9g5mXh370rX/0jJ4j47/5k=
Subject key identifier: DE:C4:47:C1:7B:57:15:81:13:BF:FC:9F:02:05:DF:5F:46:16:3B:DA
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 01968736A176E58FFA13A361E16AAC0CE016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 13F4
Signing time: Wed 30 Apr 2025 15:00:26 +0000
Manifest this update: Wed 30 Apr 2025 15:00:26 +0000
Manifest next update: Thu 01 May 2025 15:00:26 +0000
Files and hashes: 1: JsiUY4utQyGLQkMCxP2vm1DnYkM.roa (hash: t9dxvm0FP5XnZVQ8+CoMdOpLdpUdElKJXDgxciqeHNU=)
2: VS0vQXyTV30uKtTHz_uaATpRmNI.roa (hash: bd6zfzzABUQlbCGm2yH6xBJFNFWYvrN9JXn/fjw4bhU=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: iDARwhzToJEmIo8fvMUr+BfhjAZnbDvcYYEtd8hYjnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:a1:76:e5:8f:fa:13:a3:61:e1:6a:ac:0c:e0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Apr 30 15:00:26 2025 GMT
Not After : May 1 15:00:26 2025 GMT
Subject: CN=dec447c17b57158113bffc9f0205df5f46163bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:d5:b3:05:f9:ad:9e:ff:de:11:ca:4a:8f:
9c:17:ce:e6:ca:f3:5c:44:74:4d:77:61:b1:c7:00:
9c:18:22:e7:3d:81:bf:7f:9c:39:fe:d7:21:40:18:
dc:c8:f6:0c:f1:33:7b:91:a6:69:df:c6:e0:78:51:
0a:1f:d0:ba:07:38:b5:dc:1c:a4:d7:d4:9d:c7:6b:
ec:9c:dd:b2:d5:97:46:4f:e9:ea:c9:cd:66:14:5b:
0a:8a:66:d6:c1:a8:0a:1c:b4:6e:a9:c1:8f:fe:3f:
89:ca:ea:22:42:6c:50:b6:f2:d6:91:2e:4b:a5:f0:
1b:2f:73:fe:97:a7:e4:7f:36:44:26:26:e5:39:23:
3b:f6:0b:db:59:76:1e:86:39:b0:a7:eb:77:c3:48:
e3:15:6f:83:7b:b7:ed:15:e8:46:ee:2a:f7:8c:19:
c0:1b:d4:8f:01:96:fc:8f:6f:e2:d1:1e:17:f1:ed:
54:1a:e9:dc:cd:26:fa:1f:0e:26:04:ce:9b:69:0a:
1f:79:7b:5d:d5:31:8f:61:71:32:eb:3c:5b:c5:77:
24:9b:4a:22:9f:49:c1:b7:94:99:34:a8:52:79:22:
c0:15:c4:20:d1:58:e2:78:e0:74:45:8b:17:d3:b3:
46:d0:c9:87:6d:86:75:7b:2f:b6:ff:1d:b0:5f:03:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C4:47:C1:7B:57:15:81:13:BF:FC:9F:02:05:DF:5F:46:16:3B:DA
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:87:e7:40:ec:ea:dc:30:7b:c3:5e:9e:f6:f0:71:ea:d7:df:
6a:7c:fa:60:cf:2f:24:a5:a6:8f:b1:de:a7:61:ef:a8:7e:06:
fb:b5:db:00:e8:9f:7d:ad:cc:b8:9d:ce:89:d8:8e:39:d4:41:
3b:07:a4:bf:44:25:75:8d:69:cd:36:44:de:2e:60:a6:ac:33:
99:bb:96:e1:0f:b7:68:6d:01:55:0c:bc:63:5a:10:d0:db:fc:
df:f2:6e:01:1b:f1:44:df:5b:23:88:e2:fb:f6:a5:de:6c:88:
df:17:5b:aa:61:7c:21:1e:55:fd:31:d2:12:a3:9d:94:57:19:
bd:01:90:fe:a0:62:79:68:a2:0e:58:c3:fe:77:e6:c2:0a:39:
8a:e0:85:b2:34:01:1e:04:0e:54:29:48:06:85:98:2c:76:d2:
78:f6:44:9f:1a:26:aa:4f:25:09:08:78:7a:66:13:b9:8c:1b:
dd:f3:24:ae:98:af:44:d6:85:a6:62:07:44:0a:33:a5:13:be:
4b:e1:06:ef:2e:8f:e8:6b:16:70:03:7d:61:1b:0c:22:db:bf:
a2:d9:37:89:2d:4b:b6:2b:f6:7c:c9:7f:9f:d7:bd:a9:6c:3e:
7b:5d:ca:49:8e:e2:a0:cc:bd:b2:ba:63:3f:94:1e:e7:2d:9f:
cc:bc:34:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNqF25Y/6E6Nh4WqsDOAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTUzNWEyZWFlYmM2OGMxNjU3YWFmY2Y1YTc4OGM4NzUx
ZDliNjIwHhcNMjUwNDMwMTUwMDI2WhcNMjUwNTAxMTUwMDI2WjAzMTEwLwYDVQQD
EyhkZWM0NDdjMTdiNTcxNTgxMTNiZmZjOWYwMjA1ZGY1ZjQ2MTYzYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1LVswX5rZ7/3hHKSo+cF87myvNc
RHRNd2GxxwCcGCLnPYG/f5w5/tchQBjcyPYM8TN7kaZp38bgeFEKH9C6Bzi13Byk
19Sdx2vsnN2y1ZdGT+nqyc1mFFsKimbWwagKHLRuqcGP/j+JyuoiQmxQtvLWkS5L
pfAbL3P+l6fkfzZEJiblOSM79gvbWXYehjmwp+t3w0jjFW+De7ftFehG7ir3jBnA
G9SPAZb8j2/i0R4X8e1UGunczSb6Hw4mBM6baQofeXtd1TGPYXEy6zxbxXckm0oi
n0nBt5SZNKhSeSLAFcQg0VjieOB0RYsX07NG0MmHbYZ1ey+2/x2wXwP/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7ER8F7VxWBE7/8nwIF319GFjvaMB8GA1UdIwQY
MBaAFHMVNaLq68aMFleq/PWniMh1HZtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTkt
NDM1YmRhNWJkMDQ4LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85NjIwY2UtNDNmMC00MmJjLWFmNTktNDM1YmRhNWJkMDQ4
LzEvY3hVMW91cnJ4b3dXVjZyODlhZUl5SFVkbTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIfnQOzq
3DB7w16e9vBx6tffanz6YM8vJKWmj7Hep2HvqH4G+7XbAOiffa3MuJ3OidiOOdRB
Owekv0QldY1pzTZE3i5gpqwzmbuW4Q+3aG0BVQy8Y1oQ0Nv83/JuARvxRN9bI4ji
+/al3myI3xdbqmF8IR5V/THSEqOdlFcZvQGQ/qBieWiiDljD/nfmwgo5iuCFsjQB
HgQOVClIBoWYLHbSePZEnxomqk8lCQh4emYTuYwb3fMkrpivRNaFpmIHRAozpRO+
S+EG7y6P6GsWcAN9YRsMItu/otk3iS1Ltiv2fMl/n9e9qWw+e13KSY7ioMy9srpj
P5Qe5y2fzLw0Qg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:22:11 2025 by rpki-client