Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: KdeB3uVvZ8Hfo7bBsIY2l3UJYo33wqTNDDTb59OosYc=
Subject key identifier: 45:06:45:A5:47:71:46:AA:69:31:F4:D3:23:0F:F7:C8:5F:F8:19:C0
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 01967BD7B4E0C66793FDE4F065D09993A606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 0CDD
Signing time: Mon 28 Apr 2025 10:00:56 +0000
Manifest this update: Mon 28 Apr 2025 10:00:56 +0000
Manifest next update: Tue 29 Apr 2025 10:00:56 +0000
Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: WuA3ZNspERoHjmDGS23soV8x0e4t27eBEdjwboTAlYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:b4:e0:c6:67:93:fd:e4:f0:65:d0:99:93:a6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Apr 28 10:00:56 2025 GMT
Not After : Apr 29 10:00:56 2025 GMT
Subject: CN=450645a5477146aa6931f4d3230ff7c85ff819c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:8a:57:85:52:9c:b9:df:eb:89:1d:ed:80:
ec:9a:77:6b:a4:28:94:80:a5:14:c2:0f:e8:7b:a3:
73:11:c7:8e:c3:2b:4f:47:6f:fa:19:df:20:95:7c:
b8:8d:c9:a3:84:f3:66:fa:30:9d:f7:ae:38:8f:ba:
55:bc:ee:b4:40:60:4c:fd:a5:a0:3d:cc:50:61:e4:
5c:3e:25:d9:e1:9c:d8:c9:35:0d:d7:34:fd:fd:ce:
68:f0:4b:31:b8:78:c5:cb:2b:cf:cf:8b:7f:bb:94:
93:22:d2:85:68:6a:6d:94:7d:89:f3:9d:a1:ef:8b:
a3:bb:46:e1:13:31:34:17:13:cd:9b:36:37:9f:4d:
28:e6:3a:4f:05:6e:98:65:90:80:53:ad:24:35:cc:
b1:a1:67:1b:de:33:14:c0:bd:70:25:bc:70:d1:98:
64:81:be:2c:47:43:e2:e4:d7:2c:eb:4a:3a:3f:fe:
3c:ac:a5:88:81:af:9a:ca:00:cd:5a:0c:1a:80:4e:
e7:4a:a4:3c:4f:c9:9e:c5:d7:5b:f6:77:23:35:da:
a9:ff:50:70:4d:fb:83:24:cc:84:94:bd:cf:de:7a:
90:f8:f6:1d:d2:0a:32:7a:56:4f:38:c2:6f:4a:2b:
a2:09:dc:68:5d:f6:93:69:bf:7d:31:bc:0a:5f:40:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:45:A5:47:71:46:AA:69:31:F4:D3:23:0F:F7:C8:5F:F8:19:C0
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f4:df:df:a0:d1:a3:a8:d0:e8:67:6a:22:4d:2e:9d:46:a0:
06:78:c0:85:61:b1:5d:07:72:4c:d5:1d:78:7e:8f:0f:2b:bb:
0b:24:5c:39:12:78:d3:ec:d6:da:e8:81:9d:10:4e:fb:77:25:
85:30:dd:9b:f9:1e:af:52:af:d2:9f:73:03:e8:91:f5:03:7a:
ac:8b:75:ab:bb:88:4e:d9:ee:85:39:68:c1:1f:ba:78:56:67:
d5:99:88:02:71:53:28:d8:97:5f:51:7a:a6:ac:ac:a7:37:8b:
74:23:37:7d:ed:4a:4d:ca:81:e5:62:68:77:14:61:b5:86:4e:
3b:cf:41:ec:8b:f5:b4:b0:a7:e6:51:81:a5:14:57:a2:39:3a:
02:11:69:8f:37:df:47:e7:08:b0:2a:e8:6b:2d:b4:5b:57:ed:
2d:4e:30:00:69:44:f4:61:dd:3a:a2:e9:8e:b7:82:a8:bc:2f:
9e:f9:c6:18:6a:c3:44:f2:97:40:ec:4d:fe:a9:45:56:a9:79:
97:1c:4a:1d:9c:b3:69:d1:34:e6:1d:aa:39:7c:61:ac:c6:e1:
3f:1e:52:2b:b4:e6:03:06:1c:a1:da:ad:fa:1c:b0:80:97:d6:
90:9a:27:24:82:03:02:18:db:fa:32:6e:41:2c:13:6a:e0:16:
6a:19:32:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ717TgxmeT/eTwZdCZk6YGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ODI3MzVhYTk4ZDQ2NDVkMDQxMDkzYTc2NjJhMTIzNzk1
MDNhMzEwHhcNMjUwNDI4MTAwMDU2WhcNMjUwNDI5MTAwMDU2WjAzMTEwLwYDVQQD
Eyg0NTA2NDVhNTQ3NzE0NmFhNjkzMWY0ZDMyMzBmZjdjODVmZjgxOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqeKV4VSnLnf64kd7YDsmndrpCiU
gKUUwg/oe6NzEceOwytPR2/6Gd8glXy4jcmjhPNm+jCd9644j7pVvO60QGBM/aWg
PcxQYeRcPiXZ4ZzYyTUN1zT9/c5o8EsxuHjFyyvPz4t/u5STItKFaGptlH2J852h
74uju0bhEzE0FxPNmzY3n00o5jpPBW6YZZCAU60kNcyxoWcb3jMUwL1wJbxw0Zhk
gb4sR0Pi5Ncs60o6P/48rKWIga+aygDNWgwagE7nSqQ8T8mexddb9ncjNdqp/1Bw
TfuDJMyElL3P3nqQ+PYd0goyelZPOMJvSiuiCdxoXfaTab99MbwKX0A9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUGRaVHcUaqaTH00yMP98hf+BnAMB8GA1UdIwQY
MBaAFMeCc1qpjUZF0EEJOnZioSN5UDoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYt
YjQ5M2E5ZGY0ZjhmLzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wNTgyZmYtNzE4OS00YzNjLWE0NWYtYjQ5M2E5ZGY0Zjhm
LzEveDRKeldxbU5Sa1hRUVFrNmRtS2hJM2xRT2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfTf36DR
o6jQ6GdqIk0unUagBnjAhWGxXQdyTNUdeH6PDyu7CyRcORJ40+zW2uiBnRBO+3cl
hTDdm/ker1Kv0p9zA+iR9QN6rIt1q7uITtnuhTlowR+6eFZn1ZmIAnFTKNiXX1F6
pqyspzeLdCM3fe1KTcqB5WJodxRhtYZOO89B7Iv1tLCn5lGBpRRXojk6AhFpjzff
R+cIsCroay20W1ftLU4wAGlE9GHdOqLpjreCqLwvnvnGGGrDRPKXQOxN/qlFVql5
lxxKHZyzadE05h2qOXxhrMbhPx5SK7TmAwYcodqt+hywgJfWkJonJIIDAhjb+jJu
QSwTauAWahkybA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:15:48 2025 by rpki-client