Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: /epz1XXsDYfxoeONg+v/4Rx9hMENq88jbhbdsZdUyiI=
Subject key identifier: C0:C3:05:E6:50:49:38:72:F3:34:41:03:70:E1:C9:92:72:4E:9B:A4
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019688800C6FE3828341668A6867618856AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1489
Signing time: Wed 30 Apr 2025 21:00:15 +0000
Manifest this update: Wed 30 Apr 2025 21:00:15 +0000
Manifest next update: Thu 01 May 2025 21:00:15 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: XD5mO2MvIOCv9PS9M2JpH+pR2bDEjxCty/G46vJtons=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:0c:6f:e3:82:83:41:66:8a:68:67:61:88:56:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Apr 30 21:00:15 2025 GMT
Not After : May 1 21:00:15 2025 GMT
Subject: CN=c0c305e650493872f334410370e1c992724e9ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:fa:43:42:ce:d1:2b:87:f1:ed:00:79:34:
5a:8d:f9:a2:5a:29:66:3b:72:7b:95:10:0c:9d:57:
88:a8:01:77:da:55:7c:78:44:63:30:f7:dc:d4:d9:
a7:69:40:82:0d:84:25:94:c2:b0:30:67:d4:cb:a1:
d8:67:2c:53:f8:ac:c7:61:bd:ee:0c:ec:2a:65:eb:
11:c0:70:b0:2a:c6:a3:78:6d:25:64:49:7a:fc:66:
72:61:ec:ea:76:0a:06:14:09:1b:1c:5f:2e:f5:25:
bb:de:f0:09:f2:07:85:a6:08:92:9d:e1:08:8c:cd:
d7:ad:0c:f5:eb:a3:4b:d7:f7:d4:49:0f:82:f8:49:
05:67:51:b4:9a:59:3f:4a:3c:9b:f1:33:78:9d:c2:
68:1b:80:af:bc:f6:4c:ed:8e:91:02:d1:32:77:a2:
11:6e:0b:d0:b1:05:69:c6:24:44:09:98:10:f2:ea:
c4:de:77:da:c6:66:13:02:f9:78:12:2b:2d:d5:31:
ba:e2:9b:aa:b4:08:db:9f:c6:6a:0c:b7:9c:30:ff:
20:d9:66:31:60:2c:3f:3c:d8:17:22:97:ff:84:49:
92:80:56:97:c0:c0:2c:bb:ee:ed:89:96:d3:c4:ba:
4a:8f:29:93:7c:02:f0:f3:70:03:e7:99:f3:ca:c2:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C3:05:E6:50:49:38:72:F3:34:41:03:70:E1:C9:92:72:4E:9B:A4
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:30:33:a1:a6:d1:7b:dc:cb:b3:71:4a:7c:fb:43:66:d9:48:
cc:a0:34:17:d3:23:c3:ff:f4:6d:24:1d:fd:81:ff:62:c9:3b:
57:57:f8:fa:46:8e:f1:d0:29:48:9c:e6:09:80:de:6e:a4:42:
24:86:38:35:d2:1a:b2:f0:49:57:2b:d8:15:69:ad:f2:3c:6a:
a5:f3:4d:e9:8c:f2:e5:90:f1:a8:01:23:83:4c:b4:3d:da:37:
2a:d7:c3:ad:9b:82:ef:e2:62:f7:10:c6:f3:5f:ce:fe:de:9b:
a7:8d:18:89:ce:cb:97:1d:4b:49:9a:54:79:7a:11:ca:c6:96:
82:56:04:8e:e8:d7:7a:5e:0a:b0:5f:05:0e:2a:62:34:a6:13:
f8:fb:66:9e:cc:40:8c:5d:29:6e:84:8c:e0:c8:15:b5:a8:63:
a4:7f:f0:cc:c7:bf:e2:f8:74:46:2c:9f:df:0c:bd:6b:22:b2:
2d:b8:f6:47:75:11:08:bd:e6:6d:49:bc:20:5c:87:ef:73:6d:
2a:f8:c4:32:58:97:cc:1d:f2:4d:c1:e3:90:78:f8:20:cd:9e:
4b:cd:b7:cd:c5:24:7a:f3:08:5d:2f:71:6c:65:b3:be:b1:ed:
12:37:97:59:f3:66:a6:17:ef:dd:69:8c:f2:c8:52:d1:39:0f:
c8:a8:65:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIgAxv44KDQWaKaGdhiFaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2
OGZiZWEwHhcNMjUwNDMwMjEwMDE1WhcNMjUwNTAxMjEwMDE1WjAzMTEwLwYDVQQD
EyhjMGMzMDVlNjUwNDkzODcyZjMzNDQxMDM3MGUxYzk5MjcyNGU5YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q/6Q0LO0SuH8e0AeTRajfmiWilm
O3J7lRAMnVeIqAF32lV8eERjMPfc1NmnaUCCDYQllMKwMGfUy6HYZyxT+KzHYb3u
DOwqZesRwHCwKsajeG0lZEl6/GZyYezqdgoGFAkbHF8u9SW73vAJ8geFpgiSneEI
jM3XrQz166NL1/fUSQ+C+EkFZ1G0mlk/Sjyb8TN4ncJoG4CvvPZM7Y6RAtEyd6IR
bgvQsQVpxiRECZgQ8urE3nfaxmYTAvl4Eist1TG64puqtAjbn8ZqDLecMP8g2WYx
YCw/PNgXIpf/hEmSgFaXwMAsu+7tiZbTxLpKjymTfALw83AD55nzysJwgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDDBeZQSThy8zRBA3DhyZJyTpukMB8GA1UdIwQY
MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt
ZGE4MWYwOGY2MDAxLzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx
LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzAzoabR
e9zLs3FKfPtDZtlIzKA0F9Mjw//0bSQd/YH/Ysk7V1f4+kaO8dApSJzmCYDebqRC
JIY4NdIasvBJVyvYFWmt8jxqpfNN6Yzy5ZDxqAEjg0y0Pdo3KtfDrZuC7+Ji9xDG
81/O/t6bp40Yic7Llx1LSZpUeXoRysaWglYEjujXel4KsF8FDipiNKYT+PtmnsxA
jF0pboSM4MgVtahjpH/wzMe/4vh0Riyf3wy9ayKyLbj2R3URCL3mbUm8IFyH73Nt
KvjEMliXzB3yTcHjkHj4IM2eS823zcUkevMIXS9xbGWzvrHtEjeXWfNmphfv3WmM
8shS0TkPyKhlZQ==
-----END CERTIFICATE-----
Generated at Thu May 1 00:39:49 2025 by rpki-client