Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: m1V+5+wNpjlecrA6VDq3JK6LyfSJFso1HasCoIGd+Sk=
Subject key identifier: E0:0F:EA:7D:4C:FB:87:C2:7E:7E:7E:C7:E0:EC:BF:EA:BC:2E:04:C8
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 01967CEA48208CC8D9EB419ED78E9C4ED132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0AC4
Signing time: Mon 28 Apr 2025 15:00:50 +0000
Manifest this update: Mon 28 Apr 2025 15:00:50 +0000
Manifest next update: Tue 29 Apr 2025 15:00:50 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: 9/fi8G/xzf74T8qRmLLEazAkRsFwWsT6MbgEDXGB6Pg=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:48:20:8c:c8:d9:eb:41:9e:d7:8e:9c:4e:d1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Apr 28 15:00:50 2025 GMT
Not After : Apr 29 15:00:50 2025 GMT
Subject: CN=e00fea7d4cfb87c27e7e7ec7e0ecbfeabc2e04c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:b0:cc:e1:f1:44:9c:87:29:cb:91:c0:3f:
73:f2:97:f7:df:24:97:77:92:88:98:11:38:35:80:
65:b1:3c:d9:af:1f:d3:a2:79:df:d9:94:98:74:a4:
64:fe:36:16:17:bf:a3:20:38:6c:7f:7c:9d:04:9e:
ac:35:b4:d0:b9:50:9d:3f:b3:f3:94:61:03:51:01:
02:ba:60:63:4f:48:23:f1:fb:b3:f3:d7:dc:55:54:
7a:53:0c:84:72:5e:20:13:b7:39:9b:25:3f:d7:f0:
17:c1:bc:1d:df:3b:6c:ce:d4:f6:65:3c:bd:0c:f0:
de:50:6c:3e:b0:19:7e:68:2e:77:eb:6b:0f:bd:80:
5f:54:3d:a5:5b:ad:b1:6f:4d:22:df:a8:a5:45:e6:
dc:b9:69:77:f6:f7:a0:5a:9a:c3:56:66:96:55:0f:
50:80:59:2d:bb:08:76:4a:11:35:6d:b0:0c:07:93:
09:20:73:c6:81:cf:c7:4c:4a:e8:3c:25:db:ce:0f:
83:a2:81:8e:3e:4a:44:20:e8:5c:35:dd:ec:e7:47:
ef:59:f2:1e:cc:6f:3b:96:a6:48:14:d3:e9:32:84:
ea:3f:06:c2:28:de:d9:f3:ee:58:8a:b1:32:a6:87:
07:62:ac:30:95:4a:d6:5c:df:19:36:e3:e5:1c:9e:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:EA:7D:4C:FB:87:C2:7E:7E:7E:C7:E0:EC:BF:EA:BC:2E:04:C8
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d9:d3:c9:46:b7:12:92:d2:6a:2e:82:bf:33:c7:88:53:84:
72:2d:0f:1e:e5:bc:5b:20:22:74:e4:0b:d7:88:51:7d:00:e5:
12:68:40:13:43:f3:53:46:29:0b:9a:39:a8:23:72:d2:8a:d5:
f9:6e:0f:fc:6c:81:3c:0f:05:d1:d1:e4:61:c4:f9:a2:89:77:
1d:dc:68:15:bb:cb:4b:29:be:f7:58:33:1e:69:06:c6:9f:b9:
19:9c:8f:ae:46:85:fe:02:46:4a:05:8d:7a:83:33:64:09:30:
79:01:dc:fa:c8:f1:f6:bd:67:52:60:fa:ec:3e:87:4a:11:e7:
23:a8:c6:68:00:91:47:f3:51:8a:90:0c:56:0f:a3:7c:84:55:
81:b1:cc:e3:31:7a:a5:c7:c0:db:b3:5c:74:08:5b:6a:d8:d3:
5d:ba:df:bc:b9:07:db:38:2d:29:76:f6:0b:cc:af:b4:30:60:
a9:fe:ab:b2:79:76:d1:6b:a6:65:8d:18:09:2b:b8:02:41:dd:
93:5c:c6:26:05:97:1f:bb:ee:3e:03:35:48:8d:b4:e8:aa:bb:
14:f7:f1:b8:eb:f0:a7:f8:69:12:e8:98:c5:db:49:d5:6d:76:
bc:7a:97:0f:20:ea:51:ee:a1:68:2b:20:90:f2:85:e0:47:ab:
72:ed:5f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86kggjMjZ60Ge146cTtEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNzE3ZjNhYjYzOTQ1YTFiZTczOWMyYjNhMjU4OWJlYTU1
ZGRiNmUwHhcNMjUwNDI4MTUwMDUwWhcNMjUwNDI5MTUwMDUwWjAzMTEwLwYDVQQD
EyhlMDBmZWE3ZDRjZmI4N2MyN2U3ZTdlYzdlMGVjYmZlYWJjMmUwNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO6wzOHxRJyHKcuRwD9z8pf33ySX
d5KImBE4NYBlsTzZrx/Tonnf2ZSYdKRk/jYWF7+jIDhsf3ydBJ6sNbTQuVCdP7Pz
lGEDUQECumBjT0gj8fuz89fcVVR6UwyEcl4gE7c5myU/1/AXwbwd3ztsztT2ZTy9
DPDeUGw+sBl+aC5362sPvYBfVD2lW62xb00i36ilRebcuWl39vegWprDVmaWVQ9Q
gFktuwh2ShE1bbAMB5MJIHPGgc/HTEroPCXbzg+DooGOPkpEIOhcNd3s50fvWfIe
zG87lqZIFNPpMoTqPwbCKN7Z8+5YirEypocHYqwwlUrWXN8ZNuPlHJ6m+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAP6n1M+4fCfn5+x+Dsv+q8LgTIMB8GA1UdIwQY
MBaAFP1xfzq2OUWhvnOcKzolib6lXdtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yZjBhNjYtMTYzNC00MGZiLTk5YjAt
OTMxNTA1ZmY0MWM1LzEvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yZjBhNjYtMTYzNC00MGZiLTk5YjAtOTMxNTA1ZmY0MWM1
LzEvX1hGX09yWTVSYUctYzV3ck9pV0p2cVZkMjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdnTyUa3
EpLSai6CvzPHiFOEci0PHuW8WyAidOQL14hRfQDlEmhAE0PzU0YpC5o5qCNy0orV
+W4P/GyBPA8F0dHkYcT5ool3HdxoFbvLSym+91gzHmkGxp+5GZyPrkaF/gJGSgWN
eoMzZAkweQHc+sjx9r1nUmD67D6HShHnI6jGaACRR/NRipAMVg+jfIRVgbHM4zF6
pcfA27NcdAhbatjTXbrfvLkH2zgtKXb2C8yvtDBgqf6rsnl20WumZY0YCSu4AkHd
k1zGJgWXH7vuPgM1SI206Kq7FPfxuOvwp/hpEuiYxdtJ1W12vHqXDyDqUe6haCsg
kPKF4Eercu1fMA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:24:04 2025 by rpki-client