Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: eHJwdD+hMLKW2bh3W45O7Qi83uwIrsnic8fjTU+sDnE=
Subject key identifier: B6:35:39:A9:EC:A0:A1:E2:B1:88:BB:57:FB:37:A3:5F:83:05:D9:03
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 01967831B737A7EA3869212439C8343047EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 17:00:46 +0000
Manifest this update: Sun 27 Apr 2025 17:00:46 +0000
Manifest next update: Mon 28 Apr 2025 17:00:46 +0000
Files and hashes: 1: SxFF3ZURcZJdwD8_1vGA3WdUL0g.roa (hash: RJe7dDjJagaac3SQE7MDMwaxQL/mMnlWG9ytHOYHflM=)
2: uun5L09jXYEGXJtFrgW0cvRe_KQ.roa (hash: WnN/CnTVkPE7SxyO4PbdiYAhklcuoQlzHVaZbDdUOFQ=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: U6H4+c/XJ+rb4c4TCebUaFyGgvjtD4yn2h3LJPQpJHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b7:37:a7:ea:38:69:21:24:39:c8:34:30:47:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: Apr 27 17:00:46 2025 GMT
Not After : Apr 28 17:00:46 2025 GMT
Subject: CN=b63539a9eca0a1e2b188bb57fb37a35f8305d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:12:3d:9d:fe:bb:b9:9f:26:33:48:96:77:
0a:cf:01:e8:ef:fc:af:37:c7:1f:ee:78:d3:40:d9:
75:d0:04:3c:7f:76:13:cd:cb:b6:cb:11:fc:3a:0f:
d8:4b:b7:ed:ef:e4:8a:d0:d5:b8:9c:37:ad:38:18:
fd:9f:bd:15:b8:40:93:36:9d:93:0b:1b:a9:9a:56:
7d:62:7d:4c:ed:2f:16:81:e7:9a:58:66:42:09:a3:
f1:a9:58:f8:06:1c:73:13:33:c6:cc:17:48:c1:43:
56:d2:13:ea:43:eb:0a:34:c5:53:5c:06:8f:78:10:
35:05:b8:00:5b:d5:47:cd:3f:c1:ce:ab:7b:72:07:
58:e6:1d:68:8f:b2:2b:71:8e:3b:b4:3d:12:af:de:
3c:5b:3a:ba:56:07:67:ad:42:7f:86:4c:9e:75:59:
23:14:b7:2d:1c:f0:23:c6:f4:d5:c6:3a:00:ea:73:
2a:22:19:c4:a6:5a:71:34:2d:97:cf:b8:fb:85:c0:
ad:6b:e9:85:c0:02:69:b6:c7:2b:b8:5f:ae:d1:d8:
8b:cd:6d:21:0c:a9:8f:f6:dd:be:8d:7a:29:62:a9:
79:49:69:30:a4:71:72:53:8b:59:d7:1d:5f:d5:50:
07:de:c8:bb:c4:d2:c1:7a:46:1f:fb:c3:8e:5f:5a:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:39:A9:EC:A0:A1:E2:B1:88:BB:57:FB:37:A3:5F:83:05:D9:03
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:c4:3d:60:c6:7d:55:2d:fd:12:50:fb:e2:83:bf:09:98:
17:cc:47:14:9d:e4:3b:d3:88:f9:80:17:a4:ec:e0:58:6e:27:
14:ab:14:e6:75:e2:18:79:2b:50:20:6e:ad:7a:62:a4:a9:5d:
78:fc:7b:73:be:0c:89:4b:d7:07:a5:c5:54:d8:8d:54:81:36:
61:ed:75:31:a9:1a:f6:6a:4a:39:48:d9:67:21:27:45:81:17:
ed:25:b9:3c:3b:e2:3c:0b:bf:d0:45:28:bd:45:d0:d5:f0:cf:
f1:47:dd:2b:47:d7:c1:14:ca:a6:3b:e4:fb:88:73:fb:c8:d6:
49:93:71:56:a4:49:a1:a7:98:1e:e8:3e:89:86:f4:f9:ce:5b:
86:e7:58:5a:35:bd:e4:37:b3:c6:db:39:a7:37:03:7f:82:27:
22:cb:53:40:9c:d9:a7:4f:21:25:66:a5:a9:22:06:1b:7d:ed:
19:ee:bb:1d:82:bd:53:cc:b9:bc:e2:08:3a:18:4f:35:5d:22:
b0:70:5a:3c:4b:92:1b:32:a1:94:79:a6:08:fa:33:b0:99:e7:
c6:1d:f5:fe:ea:a4:cb:15:57:d8:81:b2:aa:6f:1b:27:46:26:
2d:1a:b1:6e:a5:99:a5:fb:73:d1:92:35:cd:8c:d2:68:86:7c:
17:10:37:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4Mbc3p+o4aSEkOcg0MEfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDE4NjUzZmJmYjZmZDU3MzJkYzk0MGMxZDY1ZDc3YWIw
YmJmYTMwHhcNMjUwNDI3MTcwMDQ2WhcNMjUwNDI4MTcwMDQ2WjAzMTEwLwYDVQQD
EyhiNjM1MzlhOWVjYTBhMWUyYjE4OGJiNTdmYjM3YTM1ZjgzMDVkOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaoSPZ3+u7mfJjNIlncKzwHo7/yv
N8cf7njTQNl10AQ8f3YTzcu2yxH8Og/YS7ft7+SK0NW4nDetOBj9n70VuECTNp2T
CxupmlZ9Yn1M7S8WgeeaWGZCCaPxqVj4BhxzEzPGzBdIwUNW0hPqQ+sKNMVTXAaP
eBA1BbgAW9VHzT/Bzqt7cgdY5h1oj7IrcY47tD0Sr948Wzq6VgdnrUJ/hkyedVkj
FLctHPAjxvTVxjoA6nMqIhnEplpxNC2Xz7j7hcCta+mFwAJptscruF+u0diLzW0h
DKmP9t2+jXopYql5SWkwpHFyU4tZ1x1f1VAH3si7xNLBekYf+8OOX1rrbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY1OansoKHisYi7V/s3o1+DBdkDMB8GA1UdIwQY
MBaAFMbRhlP7+2/Vcy3JQMHWXXerC7+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2Yt
NWM2NTAyYmZmYTFmLzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDY5NDMtY2E3NS00MzcyLWI3N2YtNWM2NTAyYmZmYTFm
LzEveHRHR1VfdjdiOVZ6TGNsQXdkWmRkNnNMdjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzzEPWDG
fVUt/RJQ++KDvwmYF8xHFJ3kO9OI+YAXpOzgWG4nFKsU5nXiGHkrUCBurXpipKld
ePx7c74MiUvXB6XFVNiNVIE2Ye11Maka9mpKOUjZZyEnRYEX7SW5PDviPAu/0EUo
vUXQ1fDP8UfdK0fXwRTKpjvk+4hz+8jWSZNxVqRJoaeYHug+iYb0+c5bhudYWjW9
5Dezxts5pzcDf4InIstTQJzZp08hJWalqSIGG33tGe67HYK9U8y5vOIIOhhPNV0i
sHBaPEuSGzKhlHmmCPozsJnnxh31/uqkyxVX2IGyqm8bJ0YmLRqxbqWZpftz0ZI1
zYzSaIZ8FxA3uQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:44:49 2025 by rpki-client