Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
File: XL1s2RrWpyhrIfZQn92fUP7nXYc.mft (raw, json)
Hash identifier: 8bKywzhGmrVDiJGarkcNhVstK+vochvkk3OVw7Ce/d4=
Subject key identifier: E0:03:B1:32:29:1A:62:97:82:41:F1:69:5D:E8:7C:63:69:DD:08:39
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 01967FB3F570C7D9E74959D21E3E51B0E824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
Manifest number: 1441
Signing time: Tue 29 Apr 2025 04:00:22 +0000
Manifest this update: Tue 29 Apr 2025 04:00:22 +0000
Manifest next update: Wed 30 Apr 2025 04:00:22 +0000
Files and hashes: 1: LfsV7f6LxRRDF8DgEB39eI0JGcY.roa (hash: 57HPzdZv/cmkcVMLJmynj7OnbXGj1b4sWVjtj2VnRws=)
2: XL1s2RrWpyhrIfZQn92fUP7nXYc.crl (hash: DgqHo7dqKD/mMaP47t+o6x47jXYNHWcEFp3kmjnccP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:f5:70:c7:d9:e7:49:59:d2:1e:3e:51:b0:e8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Apr 29 04:00:22 2025 GMT
Not After : Apr 30 04:00:22 2025 GMT
Subject: CN=e003b132291a62978241f1695de87c6369dd0839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:5a:16:56:6b:91:79:69:06:6e:c5:76:19:
b6:b0:aa:31:de:db:ef:ef:0f:66:23:48:a6:47:2c:
ca:bb:af:76:de:48:40:22:bd:f0:cc:94:38:fc:a8:
c0:5e:d4:9b:55:4c:d6:40:38:8a:4a:de:ed:f4:ad:
21:a8:f5:6f:d9:79:bb:38:71:bb:8a:d4:63:b8:10:
cd:94:6d:0b:43:0d:87:2a:0a:30:d2:bd:af:06:17:
f6:d2:57:d5:2d:f6:33:84:10:ec:d1:89:44:78:fb:
a7:1a:8e:43:6c:a7:87:5c:fb:96:0c:4a:01:fb:b6:
d8:42:3f:1f:6c:22:e1:b5:09:a5:57:95:5c:78:ac:
b5:da:8a:bf:34:6e:12:14:f2:a0:3c:72:94:73:9d:
d9:a0:e5:65:3a:7d:6b:d1:6e:77:d6:f3:0e:76:3d:
ee:a2:26:67:69:b8:52:fb:9b:00:74:0b:be:8c:8b:
0e:39:a9:b8:06:68:b1:3a:2e:6c:01:1e:2b:ae:18:
e9:cd:cb:4a:36:90:97:be:37:26:52:82:ca:a1:c1:
47:71:31:07:21:fa:cf:64:13:cf:e7:95:a5:c6:56:
b7:20:6b:a1:11:42:9f:2c:71:e7:88:19:a0:c5:1d:
4f:e4:01:11:0e:bf:57:2f:d0:a7:12:c1:fb:07:21:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:B1:32:29:1A:62:97:82:41:F1:69:5D:E8:7C:63:69:DD:08:39
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:e2:11:67:65:84:0a:f4:93:d2:d1:a5:fc:aa:12:8d:8e:
26:e3:72:06:2b:51:63:0a:54:ef:31:84:b6:8f:0a:a6:8b:70:
fe:3e:b0:8b:98:04:31:98:b4:07:86:ed:bb:b6:32:50:ae:4e:
04:bb:ad:a7:5a:20:b6:44:88:85:4b:b7:55:6f:dd:e8:9a:72:
b6:fd:53:9f:81:54:7d:0c:65:1f:8f:17:45:7e:90:53:5b:93:
47:05:a2:e9:7b:1f:fb:0b:e7:1f:0a:29:56:16:8f:a1:df:76:
4a:16:c0:e5:ca:94:61:f9:12:68:8c:bf:3b:d7:da:93:22:8e:
74:cc:40:0d:b7:e3:ca:1b:cf:23:17:9e:48:98:a7:85:b3:e1:
3b:88:16:53:a0:13:e5:a1:26:80:7f:23:8a:a8:70:9b:2b:eb:
9a:3d:90:d3:d7:6b:0d:ab:00:d2:7b:f7:f6:b0:f2:5b:0b:de:
7c:fb:f6:17:db:37:d3:7a:1a:ae:be:dd:90:4a:a8:c0:d9:53:
ef:30:14:2e:11:ab:fe:99:86:d0:e1:77:6f:36:3e:db:a3:c5:
f4:dd:fb:2a:92:83:a9:9a:68:5d:8a:43:f4:5b:58:16:57:05:
5a:da:d0:4a:72:ee:d4:1a:12:e2:9d:a5:1a:5d:17:12:8e:95:
37:50:a8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/s/Vwx9nnSVnSHj5RsOgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmQ2Y2Q5MWFkNmE3Mjg2YjIxZjY1MDlmZGQ5ZjUwZmVl
NzVkODcwHhcNMjUwNDI5MDQwMDIyWhcNMjUwNDMwMDQwMDIyWjAzMTEwLwYDVQQD
EyhlMDAzYjEzMjI5MWE2Mjk3ODI0MWYxNjk1ZGU4N2M2MzY5ZGQwODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsVaFlZrkXlpBm7Fdhm2sKox3tvv
7w9mI0imRyzKu6923khAIr3wzJQ4/KjAXtSbVUzWQDiKSt7t9K0hqPVv2Xm7OHG7
itRjuBDNlG0LQw2HKgow0r2vBhf20lfVLfYzhBDs0YlEePunGo5DbKeHXPuWDEoB
+7bYQj8fbCLhtQmlV5VceKy12oq/NG4SFPKgPHKUc53ZoOVlOn1r0W531vMOdj3u
oiZnabhS+5sAdAu+jIsOOam4BmixOi5sAR4rrhjpzctKNpCXvjcmUoLKocFHcTEH
IfrPZBPP55Wlxla3IGuhEUKfLHHniBmgxR1P5AERDr9XL9CnEsH7ByFu2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOADsTIpGmKXgkHxaV3ofGNp3Qg5MB8GA1UdIwQY
MBaAFFy9bNka1qcoayH2UJ/dn1D+512HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEwxczJScldweWhySWZaUW45MmZVUDduWFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lMDIyM2EtMzFmZC00Y2FjLTgxNjQt
ZmJhMDc0YmExYjkwLzEvWEwxczJScldweWhySWZaUW45MmZVUDduWFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lMDIyM2EtMzFmZC00Y2FjLTgxNjQtZmJhMDc0YmExYjkw
LzEvWEwxczJScldweWhySWZaUW45MmZVUDduWFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKriEWdl
hAr0k9LRpfyqEo2OJuNyBitRYwpU7zGEto8Kpotw/j6wi5gEMZi0B4btu7YyUK5O
BLutp1ogtkSIhUu3VW/d6Jpytv1Tn4FUfQxlH48XRX6QU1uTRwWi6Xsf+wvnHwop
VhaPod92ShbA5cqUYfkSaIy/O9fakyKOdMxADbfjyhvPIxeeSJinhbPhO4gWU6AT
5aEmgH8jiqhwmyvrmj2Q09drDasA0nv39rDyWwvefPv2F9s303oarr7dkEqowNlT
7zAULhGr/pmG0OF3bzY+26PF9N37KpKDqZpoXYpD9FtYFlcFWtrQSnLu1BoS4p2l
Gl0XEo6VN1CoYA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:23:14 2025 by rpki-client