Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
File: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft (raw, json)
Hash identifier: mANJqXQZtdu0DFR/ImLjElIh0i8yceB9VXgHD9ycIsY=
Subject key identifier: 0C:1F:4A:33:82:A8:B4:BD:33:57:A1:11:98:92:33:9F:D6:5E:A2:02
Authority key identifier: 5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
Certificate issuer: /CN=5efa30ee358e250e1cc66b468193a565d824d448
Certificate serial: 01967B327B1CF0841655AEE21773FC59040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
Manifest number: 0110
Signing time: Mon 28 Apr 2025 07:00:27 +0000
Manifest this update: Mon 28 Apr 2025 07:00:27 +0000
Manifest next update: Tue 29 Apr 2025 07:00:27 +0000
Files and hashes: 1: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl (hash: VoIvhhgSWLg+C3gZyMi+QX51fSDRwP/H4QHbRPybvlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:7b:1c:f0:84:16:55:ae:e2:17:73:fc:59:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efa30ee358e250e1cc66b468193a565d824d448
Validity
Not Before: Apr 28 07:00:27 2025 GMT
Not After : Apr 29 07:00:27 2025 GMT
Subject: CN=0c1f4a3382a8b4bd3357a1119892339fd65ea202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:45:e5:e0:36:41:df:ba:ae:a0:dd:98:1a:
c2:b5:c4:5c:f7:a6:ae:c0:85:3c:5d:f1:ba:06:dc:
ae:38:8e:f6:47:52:01:a1:41:56:81:86:fb:23:f0:
92:50:a9:2a:91:ca:fc:96:27:5c:39:24:44:b0:91:
d9:88:be:28:a6:85:f8:e7:49:74:3f:46:df:d1:54:
64:93:5e:a8:45:12:08:e8:a5:67:16:1c:67:01:3c:
12:71:24:6a:56:d3:16:0c:02:2e:c0:37:ed:a1:6b:
8d:8a:af:40:3d:e4:a2:9c:88:b8:b7:d2:e6:5c:27:
0d:6e:51:73:2e:a9:6a:15:a6:c4:b9:a4:96:8e:15:
90:b2:a0:a5:49:72:d4:64:b6:e5:7f:29:f8:4e:f7:
de:db:ef:0a:98:54:d2:bf:bc:0c:2b:c6:3a:f8:45:
02:e5:29:12:de:17:76:7c:ab:fc:c2:51:e2:a2:dd:
22:8f:e7:15:28:ef:ee:9a:99:94:84:57:04:d4:7c:
35:aa:35:e9:38:a0:64:9e:cd:a8:64:74:99:11:34:
00:97:e3:43:32:e8:1a:be:18:11:56:ae:1e:bc:43:
9c:e0:94:78:03:68:9c:78:df:55:20:2d:dd:73:b5:
7e:01:85:b7:04:0a:af:ed:91:51:91:54:61:f7:68:
3e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:4A:33:82:A8:B4:BD:33:57:A1:11:98:92:33:9F:D6:5E:A2:02
X509v3 Authority Key Identifier:
keyid:5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:67:0f:20:6a:76:d8:66:ee:d4:fd:ff:6f:2a:f9:98:10:b6:
98:71:2a:17:bd:b4:29:e2:8f:fe:fe:5b:f7:66:79:20:0b:c2:
0f:b3:9e:0f:60:c7:3b:01:64:53:3c:89:5b:be:23:d3:6d:10:
6d:d7:5d:7b:7a:be:2a:fb:76:d6:79:b7:08:a7:9a:88:4e:35:
f7:2e:f4:de:8f:8b:90:e4:53:71:25:24:cd:8c:3c:b8:4c:55:
64:70:65:3f:8a:93:a7:9f:4f:88:92:af:de:bb:9e:d1:05:81:
de:49:26:f2:ff:07:48:a4:d3:b2:00:d9:19:a7:62:4a:9b:9f:
f9:f4:fe:90:f9:12:2d:9f:36:f7:6b:51:d2:48:2a:fb:a1:aa:
9d:93:fd:ea:92:cd:ec:9b:6d:75:2a:bd:8d:35:65:fa:0a:dc:
23:23:30:3e:94:cc:b7:7e:b3:2a:2b:3e:56:51:f5:79:d3:21:
55:3b:ab:4a:52:dd:09:2b:bd:fc:7f:e5:95:20:59:54:e1:e0:
00:c6:65:bb:0d:92:6f:1f:22:92:93:18:0d:12:fe:6b:5f:d4:
3b:9e:2c:e5:a4:e4:b5:77:b4:8d:89:c5:bc:ff:0c:ce:79:2f:
01:cf:86:0a:f7:62:b8:bf:9e:4c:83:77:3e:3a:11:af:b1:b2:
13:cd:57:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7Mnsc8IQWVa7iF3P8WQQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZmEzMGVlMzU4ZTI1MGUxY2M2NmI0NjgxOTNhNTY1ZDgy
NGQ0NDgwHhcNMjUwNDI4MDcwMDI3WhcNMjUwNDI5MDcwMDI3WjAzMTEwLwYDVQQD
EygwYzFmNGEzMzgyYThiNGJkMzM1N2ExMTE5ODkyMzM5ZmQ2NWVhMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9xF5eA2Qd+6rqDdmBrCtcRc96au
wIU8XfG6BtyuOI72R1IBoUFWgYb7I/CSUKkqkcr8lidcOSREsJHZiL4opoX450l0
P0bf0VRkk16oRRII6KVnFhxnATwScSRqVtMWDAIuwDftoWuNiq9APeSinIi4t9Lm
XCcNblFzLqlqFabEuaSWjhWQsqClSXLUZLblfyn4Tvfe2+8KmFTSv7wMK8Y6+EUC
5SkS3hd2fKv8wlHiot0ij+cVKO/umpmUhFcE1Hw1qjXpOKBkns2oZHSZETQAl+ND
MugavhgRVq4evEOc4JR4A2iceN9VIC3dc7V+AYW3BAqv7ZFRkVRh92g+AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwfSjOCqLS9M1ehEZiSM5/WXqICMB8GA1UdIwQY
MBaAFF76MO41jiUOHMZrRoGTpWXYJNRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZvdzdqV09KUTRjeG10R2daT2xaZGdrMUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMzNjY2ItNzIzNS00MDljLWJkNmUt
YmJhYzNiODE4OTliLzEvWHZvdzdqV09KUTRjeG10R2daT2xaZGdrMUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wMzNjY2ItNzIzNS00MDljLWJkNmUtYmJhYzNiODE4OTli
LzEvWHZvdzdqV09KUTRjeG10R2daT2xaZGdrMUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2cPIGp2
2Gbu1P3/byr5mBC2mHEqF720KeKP/v5b92Z5IAvCD7OeD2DHOwFkUzyJW74j020Q
bddde3q+Kvt21nm3CKeaiE419y703o+LkORTcSUkzYw8uExVZHBlP4qTp59PiJKv
3rue0QWB3kkm8v8HSKTTsgDZGadiSpuf+fT+kPkSLZ8292tR0kgq+6GqnZP96pLN
7JttdSq9jTVl+grcIyMwPpTMt36zKis+VlH1edMhVTurSlLdCSu9/H/llSBZVOHg
AMZluw2Sbx8ikpMYDRL+a1/UO54s5aTktXe0jYnFvP8MznkvAc+GCvdiuL+eTIN3
PjoRr7GyE81XkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:42 2025 by rpki-client