Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: 26T1SNyAbllObc7SA3u2imdwylyNT+JmuUcmBi+DS94=
Subject key identifier: 09:85:6C:22:5A:65:93:6E:3A:2B:9E:2C:A5:1F:8F:CB:E8:41:28:17
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 0194BABB80E1B212DA49FB2C98127ACFBB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 042F
Signing time: Fri 31 Jan 2025 05:00:37 +0000
Manifest this update: Fri 31 Jan 2025 05:00:37 +0000
Manifest next update: Sat 01 Feb 2025 05:00:37 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: 89jKTEFgRk0la/TGvOgp2qXayDGf9oaZTM9jgajO8gk=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:80:e1:b2:12:da:49:fb:2c:98:12:7a:cf:bb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Jan 31 05:00:37 2025 GMT
Not After : Feb 1 05:00:37 2025 GMT
Subject: CN=09856c225a65936e3a2b9e2ca51f8fcbe8412817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:7a:a0:9b:d3:ca:77:7a:11:d9:94:35:97:
1e:e2:65:29:eb:ef:47:04:d0:f7:0f:1d:8b:a1:6b:
14:75:e9:49:9a:22:c7:aa:ee:ab:49:f8:0c:75:7b:
99:a2:53:fe:2f:a4:86:a5:9e:65:14:17:db:df:74:
d8:db:ec:c1:4b:ed:07:e5:5f:a1:e5:26:03:9c:71:
39:9f:69:69:98:d1:f2:58:33:5a:49:33:96:bf:b5:
0b:ce:d6:c3:15:3c:78:55:b2:51:b0:06:5b:e2:50:
88:26:4b:49:99:3d:e7:05:4c:fa:64:db:0b:34:30:
4e:a3:6a:93:44:49:b0:16:85:da:c7:4c:ee:6b:07:
32:50:d1:29:fd:14:9c:26:5b:a9:5c:e8:b2:25:71:
14:58:ca:fc:17:17:ae:66:c2:0c:15:7a:0e:51:d3:
86:53:6c:d1:33:a1:ac:af:7f:ce:ed:e2:54:9b:32:
c3:16:cf:27:c6:b4:6b:26:1c:3a:69:2d:a7:e7:ec:
4c:bd:19:e9:e1:26:72:a1:02:a8:0d:c2:6a:82:36:
3d:0b:17:30:bc:cc:96:5f:72:76:87:10:21:59:ec:
c4:48:c7:45:02:60:0e:5d:ae:00:ff:01:d3:56:12:
f4:da:2b:16:e7:eb:cd:cd:4c:37:b5:84:ff:09:5b:
78:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:85:6C:22:5A:65:93:6E:3A:2B:9E:2C:A5:1F:8F:CB:E8:41:28:17
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:78:14:f9:9a:42:77:fe:76:8c:32:5c:ca:9d:6a:c4:59:1b:
e1:f6:14:43:66:fb:3d:19:46:ba:1d:63:55:8a:88:d8:2c:f3:
3d:94:db:61:0a:10:59:38:d0:fd:f8:1e:f5:7b:29:26:53:a5:
46:4a:fa:56:a7:eb:f2:c9:94:ea:77:a3:c5:c7:f4:ab:94:d9:
d7:b5:0f:b9:d2:a8:d5:22:3e:77:eb:ea:f7:c8:80:1a:06:11:
59:f9:f0:e4:5a:24:ea:b6:d2:e6:21:66:24:36:20:72:c7:cb:
a1:cf:4d:b7:eb:ab:d1:06:10:18:aa:c1:7e:4b:62:67:6d:17:
f2:ce:c6:75:80:17:53:6d:69:c2:c1:85:8a:f5:73:d3:fa:fa:
3a:d4:63:b1:ab:1c:54:c6:6b:a0:38:f4:00:45:c5:7e:7c:63:
b0:49:1c:14:23:ec:26:cd:46:fb:58:53:2d:23:53:40:38:b3:
4d:30:71:c1:68:d0:26:0f:4f:61:00:10:8f:6e:15:73:f1:c0:
a6:50:aa:bc:8e:cf:93:48:fb:fc:d8:68:a2:b1:30:6f:88:d5:
da:5e:ba:00:39:0b:91:54:61:1e:ed:f8:c6:ac:c2:f2:0c:4d:
8c:c8:9b:45:d9:7b:dd:26:91:5f:f5:ff:44:a8:8f:3c:2e:16:
5e:30:a6:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4DhshLaSfssmBJ6z7tRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzU3MDA3YWViZjAwMDk4YTgwMDIyOGRiMWY1OTMwZWU2
NmU2NzUwHhcNMjUwMTMxMDUwMDM3WhcNMjUwMjAxMDUwMDM3WjAzMTEwLwYDVQQD
EygwOTg1NmMyMjVhNjU5MzZlM2EyYjllMmNhNTFmOGZjYmU4NDEyODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BV6oJvTynd6EdmUNZce4mUp6+9H
BND3Dx2LoWsUdelJmiLHqu6rSfgMdXuZolP+L6SGpZ5lFBfb33TY2+zBS+0H5V+h
5SYDnHE5n2lpmNHyWDNaSTOWv7ULztbDFTx4VbJRsAZb4lCIJktJmT3nBUz6ZNsL
NDBOo2qTREmwFoXax0zuawcyUNEp/RScJlupXOiyJXEUWMr8FxeuZsIMFXoOUdOG
U2zRM6Gsr3/O7eJUmzLDFs8nxrRrJhw6aS2n5+xMvRnp4SZyoQKoDcJqgjY9Cxcw
vMyWX3J2hxAhWezESMdFAmAOXa4A/wHTVhL02isW5+vNzUw3tYT/CVt4bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmFbCJaZZNuOiueLKUfj8voQSgXMB8GA1UdIwQY
MBaAFFx1cAeuvwAJioACKNsfWTDuZuZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUt
YTdhNzMxOTQwMjhlLzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUtYTdhNzMxOTQwMjhl
LzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3gU+ZpC
d/52jDJcyp1qxFkb4fYUQ2b7PRlGuh1jVYqI2CzzPZTbYQoQWTjQ/fge9XspJlOl
Rkr6Vqfr8smU6nejxcf0q5TZ17UPudKo1SI+d+vq98iAGgYRWfnw5Fok6rbS5iFm
JDYgcsfLoc9Nt+ur0QYQGKrBfktiZ20X8s7GdYAXU21pwsGFivVz0/r6OtRjsasc
VMZroDj0AEXFfnxjsEkcFCPsJs1G+1hTLSNTQDizTTBxwWjQJg9PYQAQj24Vc/HA
plCqvI7Pk0j7/NhoorEwb4jV2l66ADkLkVRhHu34xqzC8gxNjMibRdl73SaRX/X/
RKiPPC4WXjCmUg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:01 2025 by rpki-client on console-fra.rpki-client.org