Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: gIodhmNX27TCiVvhdWXiJ1kw12ff7YkhGPrpyYxBboQ=
Subject key identifier: D2:98:57:B4:3A:48:51:13:CC:B2:D0:EB:CA:89:17:F8:08:3F:D8:8D
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 019674C2D425C31C480A52E0B49C880CE6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0D3F
Signing time: Sun 27 Apr 2025 01:00:47 +0000
Manifest this update: Sun 27 Apr 2025 01:00:47 +0000
Manifest next update: Mon 28 Apr 2025 01:00:47 +0000
Files and hashes: 1: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: DcSrXa6weUfzbqv1m1xJoQxCFy+nij2IePiLWep1aD4=)
2: rCcV6Zewu1Z9eZJuSlVmU21XPSI.roa (hash: faeDhvfDA6I7kGgODqOk5x1S+G4V8KqFh6Vs8sDfnGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:d4:25:c3:1c:48:0a:52:e0:b4:9c:88:0c:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Apr 27 01:00:47 2025 GMT
Not After : Apr 28 01:00:47 2025 GMT
Subject: CN=d29857b43a485113ccb2d0ebca8917f8083fd88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:4e:3f:e6:9e:bf:c3:78:7d:c3:17:23:9c:
40:e8:5b:20:6e:1b:55:d7:8c:f1:be:34:6c:57:8c:
97:3e:c2:10:f8:2d:a9:ed:7e:b7:ea:41:d5:93:d7:
50:2e:00:19:dc:b2:d9:fd:f2:3d:0b:d1:06:2f:9c:
99:f0:96:43:50:b2:ec:42:d2:65:5c:f5:8b:ed:f8:
81:db:06:2e:bf:74:2f:96:02:eb:18:4c:df:4c:5e:
61:25:18:fc:d6:6f:e8:68:b6:a6:80:3b:51:75:d0:
6e:93:c2:7e:d8:07:36:15:a6:41:0b:98:f9:a9:62:
e3:8f:71:f1:fb:7d:2b:b7:7a:f5:30:5f:db:fa:26:
ff:d8:aa:07:21:6b:41:84:0c:bb:b0:6f:2f:d8:77:
d4:80:07:e3:c2:98:cb:9e:87:e0:bc:72:59:42:05:
26:f0:b0:6f:eb:ba:58:3c:c6:03:ac:4b:7f:63:a6:
e7:d3:7c:7f:3f:8a:dd:0a:2e:90:cf:63:8d:ef:ac:
69:15:42:70:5f:ad:a5:68:ec:7d:e3:61:d5:fd:ca:
2a:f8:23:c3:9c:28:9b:92:fa:52:31:5e:41:6d:05:
2b:ab:e4:54:49:5c:7d:2c:17:fd:ca:3f:1a:be:58:
7d:09:8d:92:5a:f4:b5:89:d8:f7:f3:3a:05:c0:54:
61:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:57:B4:3A:48:51:13:CC:B2:D0:EB:CA:89:17:F8:08:3F:D8:8D
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e8:37:4f:d3:42:25:a2:42:64:78:7f:87:81:ed:c5:4c:09:
01:86:7f:7b:42:55:aa:17:2b:0f:3c:d5:d2:49:1b:b5:70:36:
81:30:82:93:73:c8:21:34:84:de:12:98:ca:5d:4a:57:df:d4:
54:f6:f5:96:a7:61:fa:6c:9a:81:6f:6a:85:94:ac:c1:24:ac:
9a:7d:1e:f6:85:8b:8c:d2:32:2a:10:20:ba:5e:12:6e:74:63:
a3:be:de:09:d7:c4:79:67:3d:92:c7:04:66:7d:be:80:bf:d2:
3e:d2:fe:6a:ab:12:19:cc:08:8e:bd:56:0e:ce:f8:ad:d5:46:
1e:54:71:2f:ad:01:64:d9:8e:bc:eb:d4:e5:f1:5e:11:a0:c3:
57:e5:9a:c6:a8:29:c6:13:7d:d2:ea:3f:72:1c:f6:a0:71:eb:
74:c6:8e:7c:e7:3d:42:f4:fa:78:d8:ae:dd:e6:05:20:69:6c:
c9:cc:cc:6d:6f:99:fa:e2:dd:fe:d2:98:fa:87:22:ad:b4:c9:
0e:83:f5:a0:33:dc:80:72:6f:76:09:00:a9:2f:5e:ad:ba:27:
92:3e:c9:90:41:e1:a8:18:97:ba:64:2f:f4:67:e7:e0:29:d4:
19:73:3b:49:5e:fd:72:41:8e:de:8b:c3:db:9d:69:9e:e6:28:
4e:ef:72:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wtQlwxxIClLgtJyIDOavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzlhY2Q0ZWU0MGZkYTQzMDIyYTJjOTY0MmIwNzFkYTY0
OTUyNmMwHhcNMjUwNDI3MDEwMDQ3WhcNMjUwNDI4MDEwMDQ3WjAzMTEwLwYDVQQD
EyhkMjk4NTdiNDNhNDg1MTEzY2NiMmQwZWJjYTg5MTdmODA4M2ZkODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE5OP+aev8N4fcMXI5xA6FsgbhtV
14zxvjRsV4yXPsIQ+C2p7X636kHVk9dQLgAZ3LLZ/fI9C9EGL5yZ8JZDULLsQtJl
XPWL7fiB2wYuv3QvlgLrGEzfTF5hJRj81m/oaLamgDtRddBuk8J+2Ac2FaZBC5j5
qWLjj3Hx+30rt3r1MF/b+ib/2KoHIWtBhAy7sG8v2HfUgAfjwpjLnofgvHJZQgUm
8LBv67pYPMYDrEt/Y6bn03x/P4rdCi6Qz2ON76xpFUJwX62laOx942HV/coq+CPD
nCibkvpSMV5BbQUrq+RUSVx9LBf9yj8avlh9CY2SWvS1idj38zoFwFRh/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKYV7Q6SFETzLLQ68qJF/gIP9iNMB8GA1UdIwQY
MBaAFF55rNTuQP2kMCKiyWQrBx2mSVJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYt
ZWI4ZGE1OTU0ZjNiLzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYtZWI4ZGE1OTU0ZjNi
LzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOg3T9NC
JaJCZHh/h4HtxUwJAYZ/e0JVqhcrDzzV0kkbtXA2gTCCk3PIITSE3hKYyl1KV9/U
VPb1lqdh+myagW9qhZSswSSsmn0e9oWLjNIyKhAgul4SbnRjo77eCdfEeWc9kscE
Zn2+gL/SPtL+aqsSGcwIjr1WDs74rdVGHlRxL60BZNmOvOvU5fFeEaDDV+Waxqgp
xhN90uo/chz2oHHrdMaOfOc9QvT6eNiu3eYFIGlsyczMbW+Z+uLd/tKY+ocirbTJ
DoP1oDPcgHJvdgkAqS9erbonkj7JkEHhqBiXumQv9Gfn4CnUGXM7SV79ckGO3ovD
251pnuYoTu9y9g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:51 2025 by rpki-client