Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: E8n5J0lXI+61O/0dIYofUd62wuAceRavz5ZGGbwspss=
Subject key identifier: C0:3B:13:21:E4:A7:CF:79:90:63:58:4A:E2:01:85:5F:B2:35:28:66
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 019674F9E3745AE24B1D7D41E9F0EEB0A409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0B90
Signing time: Sun 27 Apr 2025 02:00:55 +0000
Manifest this update: Sun 27 Apr 2025 02:00:55 +0000
Manifest next update: Mon 28 Apr 2025 02:00:55 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: LsMqkYSuqjRwBaLwYZU9eWH2BueGd0rooT93hsrATtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:e3:74:5a:e2:4b:1d:7d:41:e9:f0:ee:b0:a4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Apr 27 02:00:55 2025 GMT
Not After : Apr 28 02:00:55 2025 GMT
Subject: CN=c03b1321e4a7cf799063584ae201855fb2352866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:83:64:03:c9:69:dc:0c:bd:9f:f3:ef:aa:
c2:14:55:52:3d:48:5e:1e:59:60:67:58:6a:dc:d1:
0c:c2:e7:a5:64:b7:98:b9:f2:fe:43:76:ff:cf:36:
8b:74:30:b9:ee:eb:ac:59:57:b7:e0:18:34:f5:3e:
3d:98:7b:3f:09:92:69:fc:4e:43:fb:ba:e1:d6:a0:
a9:f4:75:50:24:fc:40:a0:ea:a5:44:b7:36:d3:b3:
f4:0f:a7:3e:31:aa:1c:50:90:c8:b5:0f:30:71:0e:
72:8a:16:23:f7:68:f7:78:41:fb:81:35:60:2f:b6:
ad:83:3d:71:18:64:14:16:bb:cc:51:55:e3:c0:bd:
92:59:ac:20:a9:58:d4:f8:a0:f0:e2:e8:a5:dd:c0:
74:a6:a4:7c:15:76:a0:d9:da:bb:fc:8e:6a:f5:0c:
bf:aa:7e:e7:c2:89:94:14:03:db:d7:5a:e1:c3:0d:
cb:05:9d:c1:1f:51:05:d2:70:89:48:9d:65:3a:f8:
a7:a1:7a:55:03:15:fe:f4:15:d4:67:3d:24:36:11:
7d:f0:62:db:9e:a7:dd:a3:d9:45:11:cf:d4:d2:cd:
57:74:08:71:7b:98:72:67:38:29:97:b5:e0:c2:b7:
27:67:7e:73:4f:28:24:62:fe:a5:f3:2b:bd:48:aa:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:13:21:E4:A7:CF:79:90:63:58:4A:E2:01:85:5F:B2:35:28:66
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2c:5d:d5:27:47:35:84:3c:7b:7f:73:d3:db:e9:5c:71:1f:
ce:e6:a8:89:73:45:5a:d8:05:a2:3d:0f:05:5e:ad:1d:80:19:
7c:a5:45:4b:8b:2c:92:9d:1f:50:45:10:a3:8e:18:d9:7c:ed:
d5:9c:e0:72:03:96:58:f9:57:c9:72:32:37:66:4a:e6:b7:e9:
79:b0:8b:4a:9c:0d:c2:8f:05:a9:a3:2b:70:fc:58:7d:45:b6:
c6:b3:b5:b5:b4:d6:27:7b:56:24:d8:33:31:f4:7a:7c:a4:00:
f3:3c:7f:ec:bc:4d:fa:f4:45:85:8e:4b:24:a2:ea:f2:78:7a:
3a:ca:f8:bf:86:71:f8:c3:ee:b5:c7:98:da:78:30:f8:de:0a:
0c:64:7e:57:38:8a:f5:48:4d:c3:e5:77:c4:f7:70:8b:bb:f2:
09:51:01:e2:40:a2:48:a9:b5:5e:c6:a5:34:a6:8c:aa:ee:3c:
53:3c:7b:89:d8:e3:b2:6d:f7:63:39:97:62:a2:24:97:f1:8b:
6d:98:e1:07:80:39:98:6a:15:69:5e:ef:33:6b:c6:6e:f0:de:
06:f6:bb:4f:87:c5:ec:57:14:ed:72:d6:5e:de:ab:d2:a3:48:
17:8b:e6:ba:b1:ea:66:df:5b:f0:26:96:37:84:fc:a0:78:6b:
c0:b2:1c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+eN0WuJLHX1B6fDusKQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj
YjdlZjkwHhcNMjUwNDI3MDIwMDU1WhcNMjUwNDI4MDIwMDU1WjAzMTEwLwYDVQQD
EyhjMDNiMTMyMWU0YTdjZjc5OTA2MzU4NGFlMjAxODU1ZmIyMzUyODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwmDZAPJadwMvZ/z76rCFFVSPUhe
HllgZ1hq3NEMwuelZLeYufL+Q3b/zzaLdDC57uusWVe34Bg09T49mHs/CZJp/E5D
+7rh1qCp9HVQJPxAoOqlRLc207P0D6c+MaocUJDItQ8wcQ5yihYj92j3eEH7gTVg
L7atgz1xGGQUFrvMUVXjwL2SWawgqVjU+KDw4uil3cB0pqR8FXag2dq7/I5q9Qy/
qn7nwomUFAPb11rhww3LBZ3BH1EF0nCJSJ1lOvinoXpVAxX+9BXUZz0kNhF98GLb
nqfdo9lFEc/U0s1XdAhxe5hyZzgpl7XgwrcnZ35zTygkYv6l8yu9SKr4bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA7EyHkp895kGNYSuIBhV+yNShmMB8GA1UdIwQY
MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt
MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk
LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCxd1SdH
NYQ8e39z09vpXHEfzuaoiXNFWtgFoj0PBV6tHYAZfKVFS4sskp0fUEUQo44Y2Xzt
1ZzgcgOWWPlXyXIyN2ZK5rfpebCLSpwNwo8FqaMrcPxYfUW2xrO1tbTWJ3tWJNgz
MfR6fKQA8zx/7LxN+vRFhY5LJKLq8nh6Osr4v4Zx+MPutceY2ngw+N4KDGR+VziK
9UhNw+V3xPdwi7vyCVEB4kCiSKm1XsalNKaMqu48Uzx7idjjsm33YzmXYqIkl/GL
bZjhB4A5mGoVaV7vM2vGbvDeBva7T4fF7FcU7XLWXt6r0qNIF4vmurHqZt9b8CaW
N4T8oHhrwLIcWw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:17 2025 by rpki-client