Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: HCLAALnyYgygtUYn77iJuXUCPRBFi3DEETAM+EJr6BY=
Subject key identifier: 52:70:FD:CC:0E:61:12:4E:83:11:AA:BC:01:A7:C7:7D:50:10:B7:5C
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 01969304DBDDD79DADA5DD96D64DF2407BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 092A
Signing time: Fri 02 May 2025 22:01:31 +0000
Manifest this update: Fri 02 May 2025 22:01:31 +0000
Manifest next update: Sat 03 May 2025 22:01:31 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: TuAqnVvCSWiOGgcsOKO0HlLAjnJYnH3W928zccV9xqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:db:dd:d7:9d:ad:a5:dd:96:d6:4d:f2:40:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: May 2 22:01:31 2025 GMT
Not After : May 3 22:01:31 2025 GMT
Subject: CN=5270fdcc0e61124e8311aabc01a7c77d5010b75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:91:75:51:3c:96:19:5a:f8:53:f2:3e:0a:
a0:49:cb:06:be:50:be:73:97:09:6c:cd:78:57:79:
6e:b6:e1:3e:98:e0:08:0f:f5:70:09:6e:97:6d:d3:
17:b4:ad:4a:fc:00:cf:b3:47:53:77:0d:32:44:a2:
95:04:1d:9d:b1:20:be:ef:30:2b:8c:aa:95:b4:0f:
cd:a9:28:9b:06:a6:0b:f9:2e:01:fa:8c:6c:35:1b:
e9:a5:93:c1:63:20:b7:17:54:e3:36:61:cd:ab:51:
38:ee:30:40:a6:d2:2a:4a:c2:ba:7c:11:2e:34:41:
ee:95:44:b8:8b:4f:94:b1:8d:37:a6:5f:d8:da:d0:
38:db:06:c2:35:ce:9a:22:e6:cf:eb:8d:58:a3:2e:
c4:5b:03:00:99:ab:47:1f:60:ec:5a:78:1f:e7:ef:
32:bd:d5:97:9f:3b:09:98:7b:ba:b3:be:a7:b9:4b:
85:a2:ba:75:9e:0d:74:a2:85:b6:8d:37:a2:b0:15:
29:0f:ef:28:fb:01:81:60:cb:88:7f:2c:92:4b:cd:
08:98:6c:18:f6:16:6b:fa:6e:f0:e4:d6:bd:92:0b:
4d:5b:56:98:83:62:9a:3d:97:6d:e2:6c:fb:65:38:
60:8a:bc:ef:23:38:b7:2c:7b:8a:e2:fe:80:6c:73:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:FD:CC:0E:61:12:4E:83:11:AA:BC:01:A7:C7:7D:50:10:B7:5C
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:06:53:c9:6f:6a:c4:da:a9:dc:7b:51:f5:02:4d:7b:20:8e:
f1:1c:d7:42:c0:fe:fc:a7:f3:ac:08:2e:a5:6f:a6:b7:aa:dd:
34:bc:31:cc:a4:2b:b6:ad:1f:fe:f9:8e:95:e1:a1:fb:5a:6e:
9b:c7:74:0a:6f:7f:ad:81:f3:00:bf:91:84:86:e8:69:22:e8:
a4:cc:c1:9a:6d:9a:6d:24:72:3e:a8:91:15:03:95:66:15:de:
f1:67:8f:e7:d8:10:d9:e7:82:8d:ad:77:08:a2:48:cf:3c:49:
63:db:45:9b:fb:94:47:30:99:ce:f8:c5:72:51:1b:72:e3:e0:
97:64:21:07:ce:35:2f:f6:56:cb:60:dd:3b:20:5b:1d:2c:b2:
c8:d8:7e:f9:62:48:59:7f:2b:93:25:77:37:d1:b2:27:dc:28:
32:3e:c9:77:cf:1e:d3:b0:fb:cb:4a:36:74:7c:3e:0c:08:f6:
7c:6c:48:16:49:80:4b:5c:56:81:93:59:a7:43:1e:3b:2e:c1:
ff:50:33:aa:fd:b5:e7:20:ea:c8:d4:83:ff:46:59:52:2b:54:
fb:e8:e8:9e:30:da:dc:ce:cd:bc:d6:72:2f:71:2b:f5:0a:1d:
01:80:22:18:f0:a2:d9:ba:50:19:20:c7:53:c0:58:90:55:9a:
b4:4a:35:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTBNvd152tpd2W1k3yQHvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2FhNDQ3ZjA5YmNiMGRkZjhhZmMxMGM3M2U4ZTkxYmJm
MDhlNTUwHhcNMjUwNTAyMjIwMTMxWhcNMjUwNTAzMjIwMTMxWjAzMTEwLwYDVQQD
Eyg1MjcwZmRjYzBlNjExMjRlODMxMWFhYmMwMWE3Yzc3ZDUwMTBiNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYmRdVE8lhla+FPyPgqgScsGvlC+
c5cJbM14V3lutuE+mOAID/VwCW6XbdMXtK1K/ADPs0dTdw0yRKKVBB2dsSC+7zAr
jKqVtA/NqSibBqYL+S4B+oxsNRvppZPBYyC3F1TjNmHNq1E47jBAptIqSsK6fBEu
NEHulUS4i0+UsY03pl/Y2tA42wbCNc6aIubP641Yoy7EWwMAmatHH2DsWngf5+8y
vdWXnzsJmHu6s76nuUuForp1ng10ooW2jTeisBUpD+8o+wGBYMuIfyySS80ImGwY
9hZr+m7w5Na9kgtNW1aYg2KaPZdt4mz7ZThgirzvIzi3LHuK4v6AbHMdbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJw/cwOYRJOgxGqvAGnx31QELdcMB8GA1UdIwQY
MBaAFF7KpEfwm8sN34r8EMc+jpG78I5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDIt
OTNjNDRhYzg0MTRlLzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDItOTNjNDRhYzg0MTRl
LzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAZTyW9q
xNqp3HtR9QJNeyCO8RzXQsD+/KfzrAgupW+mt6rdNLwxzKQrtq0f/vmOleGh+1pu
m8d0Cm9/rYHzAL+RhIboaSLopMzBmm2abSRyPqiRFQOVZhXe8WeP59gQ2eeCja13
CKJIzzxJY9tFm/uURzCZzvjFclEbcuPgl2QhB841L/ZWy2DdOyBbHSyyyNh++WJI
WX8rkyV3N9GyJ9woMj7Jd88e07D7y0o2dHw+DAj2fGxIFkmAS1xWgZNZp0MeOy7B
/1Azqv215yDqyNSD/0ZZUitU++jonjDa3M7NvNZyL3Er9QodAYAiGPCi2bpQGSDH
U8BYkFWatEo1Jg==
-----END CERTIFICATE-----
Generated at Sat May 3 00:27:17 2025 by rpki-client