Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File: x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier: fkZ4AHlc29AqNK2uyKjaXoj3mePUySpUkxlEQYfxlCg=
Subject key identifier: 69:96:7F:7B:EB:18:90:B5:D2:EC:CB:F2:03:3E:8E:8D:08:AB:B3:71
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer: /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial: 01969560A56D08BEFE0A8CE26FDFBA2C7EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number: 1417
Signing time: Sat 03 May 2025 09:01:01 +0000
Manifest this update: Sat 03 May 2025 09:01:01 +0000
Manifest next update: Sun 04 May 2025 09:01:01 +0000
Files and hashes: 1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: IvGfaOPbkIrTYsSjsRHnawYysn3kiV9wD86iLMZxgds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:a5:6d:08:be:fe:0a:8c:e2:6f:df:ba:2c:7e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Validity
Not Before: May 3 09:01:01 2025 GMT
Not After : May 4 09:01:01 2025 GMT
Subject: CN=69967f7beb1890b5d2eccbf2033e8e8d08abb371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:9d:a0:d2:87:9a:70:8e:45:c2:9b:69:39:
a3:31:a1:80:56:35:57:69:39:b5:a5:de:c2:69:ab:
dc:f5:19:fb:7e:19:1c:57:ea:db:fe:e5:62:ab:f0:
69:cd:ad:53:02:a9:32:17:f2:76:08:c6:6e:35:57:
de:e8:d6:a3:78:0b:db:05:6f:2b:0c:9e:2d:30:a3:
72:56:93:4d:b2:0b:96:01:d8:2f:cd:b2:8f:65:fb:
bd:e2:57:da:3c:a9:9c:f6:2c:00:37:c1:41:0d:5b:
d1:ef:0b:d5:15:78:22:14:dd:67:9b:9d:2c:5a:75:
f4:11:18:f5:7b:a6:d8:c6:e8:68:dd:80:f8:61:bd:
5d:c7:fb:94:8f:30:dc:b9:d7:ee:1e:0b:05:97:10:
66:c3:42:f2:7c:5f:6c:05:d8:d2:52:27:5f:fa:e5:
27:99:c1:ca:06:8f:f2:7f:3b:eb:ab:36:fe:8f:02:
46:3e:e4:94:1b:ef:6a:e0:70:71:7e:70:69:0c:f1:
7b:a0:c4:b0:2d:71:35:1d:9c:f1:a7:ea:38:8f:2c:
18:43:8d:90:16:86:15:7f:84:c5:2f:bf:fc:e4:04:
4f:8b:3f:23:60:cf:7b:ad:08:f2:f5:82:84:98:6f:
9b:19:ae:02:f9:73:e3:36:fd:ca:b9:83:ea:bf:40:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:7F:7B:EB:18:90:B5:D2:EC:CB:F2:03:3E:8E:8D:08:AB:B3:71
X509v3 Authority Key Identifier:
keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:53:5c:ec:62:f1:1c:6b:aa:09:d3:3f:c1:6c:81:aa:71:12:
13:ee:41:7d:0e:ca:a4:ba:c0:88:41:5b:94:ea:dc:bb:3d:43:
29:ba:34:a6:5b:17:cb:d4:06:4f:36:9e:a8:f1:68:97:63:3f:
29:77:5d:24:34:f9:74:bb:c9:52:74:66:75:16:a4:94:aa:39:
a4:58:5f:99:e1:42:d4:4f:bb:ab:54:9e:3c:2d:72:78:37:74:
77:d1:98:5e:ee:e6:aa:c9:20:42:b5:02:6a:a0:72:f2:a2:6c:
d6:bb:4a:15:3c:37:0e:10:fe:ea:7c:13:ed:de:60:cd:bc:fe:
d9:9f:ab:37:f3:a1:08:97:47:a9:05:28:ad:37:1a:ba:ee:07:
b2:9a:a0:2e:dd:f3:16:19:99:27:62:c0:5a:ce:77:e3:ba:0b:
f2:d5:58:1f:f7:8f:1c:8e:23:52:b8:14:78:d4:89:fa:04:20:
26:67:03:6c:8f:83:70:2d:1a:e8:32:03:20:6b:bd:60:b2:0d:
d8:8c:55:45:f4:13:71:69:34:9e:49:f2:8a:04:df:ba:1c:1f:
b8:3e:bd:6b:22:cd:fc:22:cf:62:f3:f7:6c:b7:f7:2c:13:a2:
82:9d:e1:6d:49:ce:81:6b:83:bb:d0:7c:3a:fe:1d:55:3d:27:
8e:01:3d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVYKVtCL7+Cozib9+6LH6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGEwZGE3NTcwOTJkNmVjY2Y3ZDk0ZWRlMjc1ODc1M2Ex
Y2Q3ODQwHhcNMjUwNTAzMDkwMTAxWhcNMjUwNTA0MDkwMTAxWjAzMTEwLwYDVQQD
Eyg2OTk2N2Y3YmViMTg5MGI1ZDJlY2NiZjIwMzNlOGU4ZDA4YWJiMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+OdoNKHmnCORcKbaTmjMaGAVjVX
aTm1pd7Caavc9Rn7fhkcV+rb/uViq/Bpza1TAqkyF/J2CMZuNVfe6NajeAvbBW8r
DJ4tMKNyVpNNsguWAdgvzbKPZfu94lfaPKmc9iwAN8FBDVvR7wvVFXgiFN1nm50s
WnX0ERj1e6bYxuho3YD4Yb1dx/uUjzDcudfuHgsFlxBmw0LyfF9sBdjSUidf+uUn
mcHKBo/yfzvrqzb+jwJGPuSUG+9q4HBxfnBpDPF7oMSwLXE1HZzxp+o4jywYQ42Q
FoYVf4TFL7/85ARPiz8jYM97rQjy9YKEmG+bGa4C+XPjNv3KuYPqv0B4SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmWf3vrGJC10uzL8gM+jo0Iq7NxMB8GA1UdIwQY
MBaAFMdKDadXCS1uzPfZTt4nWHU6HNeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmFiZjMtNWIzMS00MTgxLWEzZjct
ZTdhY2I1YjQ0ZWVlLzEveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yNmFiZjMtNWIzMS00MTgxLWEzZjctZTdhY2I1YjQ0ZWVl
LzEveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1Nc7GLx
HGuqCdM/wWyBqnESE+5BfQ7KpLrAiEFblOrcuz1DKbo0plsXy9QGTzaeqPFol2M/
KXddJDT5dLvJUnRmdRaklKo5pFhfmeFC1E+7q1SePC1yeDd0d9GYXu7mqskgQrUC
aqBy8qJs1rtKFTw3DhD+6nwT7d5gzbz+2Z+rN/OhCJdHqQUorTcauu4HspqgLt3z
FhmZJ2LAWs5347oL8tVYH/ePHI4jUrgUeNSJ+gQgJmcDbI+DcC0a6DIDIGu9YLIN
2IxVRfQTcWk0nknyigTfuhwfuD69ayLN/CLPYvP3bLf3LBOigp3hbUnOgWuDu9B8
Ov4dVT0njgE9/w==
-----END CERTIFICATE-----
Generated at Sat May 3 11:18:26 2025 by rpki-client