Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
File: XtXKWxx3mVWyVz2isQzXxZH57hs.mft (raw, json)
Hash identifier: aL/oNQrEWFwiHV0nIkLEhhwgGsccVo84oWpYF+KJaQo=
Subject key identifier: B0:6C:51:1A:09:30:8E:8C:10:44:28:28:13:42:30:CF:EE:7B:21:6F
Authority key identifier: 5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
Certificate issuer: /CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Certificate serial: 01969ABD846D6241BABDD0879049738B13F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
Manifest number: 0A63
Signing time: Sun 04 May 2025 10:00:33 +0000
Manifest this update: Sun 04 May 2025 10:00:33 +0000
Manifest next update: Mon 05 May 2025 10:00:33 +0000
Files and hashes: 1: XtXKWxx3mVWyVz2isQzXxZH57hs.crl (hash: f2+9S6U1cdLoiFAewcrbWbvHeeXan+5LhGjETle1VjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bd:84:6d:62:41:ba:bd:d0:87:90:49:73:8b:13:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Validity
Not Before: May 4 10:00:33 2025 GMT
Not After : May 5 10:00:33 2025 GMT
Subject: CN=b06c511a09308e8c10442828134230cfee7b216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:aa:99:00:b2:95:4e:ca:6e:9a:21:42:41:
fd:11:ea:5a:38:1b:90:66:d7:49:2f:e6:16:b7:e7:
34:2f:dd:7c:70:8a:1d:26:fd:21:b2:d2:27:e8:db:
81:00:84:fe:1f:c7:f7:03:ff:03:98:da:8a:38:ad:
02:57:dc:ef:85:26:a3:05:b8:cd:de:17:59:cd:95:
65:d5:3c:58:2e:45:21:a3:34:dc:4e:9d:85:46:b9:
84:c6:f5:51:e2:f1:1f:87:97:99:a3:eb:a3:3c:aa:
bf:ea:65:51:5a:6a:e1:00:8b:9c:db:a8:21:73:0f:
60:ab:57:ce:38:9a:3f:ed:39:4e:8d:72:f7:35:0b:
ac:f8:fd:ab:c6:05:b3:73:80:03:4b:ee:b2:56:10:
7a:5a:59:5e:06:86:d6:aa:f3:d6:dd:7b:54:1f:41:
43:aa:00:5e:cf:58:60:fb:45:6d:a4:2e:59:5d:da:
49:46:f0:d8:c3:b4:f5:7a:19:d6:16:38:37:9f:29:
b4:f8:17:f2:a3:c4:05:83:13:49:3e:a9:1f:83:df:
96:02:3f:a3:fa:ce:c1:80:95:09:23:3a:92:4e:f9:
63:6e:14:89:59:2e:68:c3:6a:08:0d:df:9d:c7:ae:
14:00:2a:f4:6a:22:da:8b:b8:db:cc:22:dc:33:17:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:51:1A:09:30:8E:8C:10:44:28:28:13:42:30:CF:EE:7B:21:6F
X509v3 Authority Key Identifier:
keyid:5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:57:90:79:53:5b:67:bb:0b:98:a8:ba:00:13:00:52:46:e1:
09:f6:ee:d9:d3:28:2b:76:5f:82:6a:47:14:88:ef:73:81:e5:
53:96:ff:9f:7b:17:ba:3d:67:4f:af:0f:4d:3d:a0:b9:83:49:
e8:33:e5:bd:b3:f2:77:bf:e5:b7:88:fa:f9:e9:ec:4e:0a:f2:
9e:df:1a:60:94:70:65:e2:55:9e:d0:22:21:59:17:63:cb:22:
f5:de:2b:b4:b8:0f:42:03:07:58:a3:dd:3e:1b:53:ab:96:d1:
08:37:d8:c1:92:06:2e:74:72:65:52:68:7a:f8:bc:fd:a6:a3:
04:2a:42:15:9a:d4:a3:d5:28:1b:92:4f:3b:de:0e:4f:ee:b9:
e6:a0:8b:f3:fe:6a:57:a6:36:a3:af:b3:ec:e3:04:49:4d:50:
8a:0f:8b:b2:81:b7:b9:15:b2:99:02:45:47:02:13:6d:2e:62:
4e:65:fb:b6:8a:b0:e4:fd:0a:f5:ed:32:57:79:94:a9:a5:db:
c3:93:5c:9e:9c:a4:b8:45:e9:92:d1:ac:f1:45:58:7c:7a:ec:
f6:9f:32:d0:0e:1b:90:50:a3:97:c0:d9:7f:3d:7a:8e:13:0c:
71:57:07:2d:a7:b2:d6:ca:45:50:80:29:48:6c:1d:e9:82:ef:
89:d1:35:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaavYRtYkG6vdCHkElzixP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDVjYTViMWM3Nzk5NTViMjU3M2RhMmIxMGNkN2M1OTFm
OWVlMWIwHhcNMjUwNTA0MTAwMDMzWhcNMjUwNTA1MTAwMDMzWjAzMTEwLwYDVQQD
EyhiMDZjNTExYTA5MzA4ZThjMTA0NDI4MjgxMzQyMzBjZmVlN2IyMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx6qmQCylU7KbpohQkH9EepaOBuQ
ZtdJL+YWt+c0L918cIodJv0hstIn6NuBAIT+H8f3A/8DmNqKOK0CV9zvhSajBbjN
3hdZzZVl1TxYLkUhozTcTp2FRrmExvVR4vEfh5eZo+ujPKq/6mVRWmrhAIuc26gh
cw9gq1fOOJo/7TlOjXL3NQus+P2rxgWzc4ADS+6yVhB6WlleBobWqvPW3XtUH0FD
qgBez1hg+0VtpC5ZXdpJRvDYw7T1ehnWFjg3nym0+Bfyo8QFgxNJPqkfg9+WAj+j
+s7BgJUJIzqSTvljbhSJWS5ow2oIDd+dx64UACr0aiLai7jbzCLcMxcX2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBsURoJMI6MEEQoKBNCMM/ueyFvMB8GA1UdIwQY
MBaAFF7Vylscd5lVslc9orEM18WR+e4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRYS1d4eDNtVld5VnoyaXNRelh4Wkg1N2hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYzJlYTYtNzI4ZC00ZTg1LThkMGIt
YjQ4ZjE4NGY2ZGVmLzEvWHRYS1d4eDNtVld5VnoyaXNRelh4Wkg1N2hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mYzJlYTYtNzI4ZC00ZTg1LThkMGItYjQ4ZjE4NGY2ZGVm
LzEvWHRYS1d4eDNtVld5VnoyaXNRelh4Wkg1N2hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1eQeVNb
Z7sLmKi6ABMAUkbhCfbu2dMoK3ZfgmpHFIjvc4HlU5b/n3sXuj1nT68PTT2guYNJ
6DPlvbPyd7/lt4j6+ensTgrynt8aYJRwZeJVntAiIVkXY8si9d4rtLgPQgMHWKPd
PhtTq5bRCDfYwZIGLnRyZVJoevi8/aajBCpCFZrUo9UoG5JPO94OT+655qCL8/5q
V6Y2o6+z7OMESU1Qig+LsoG3uRWymQJFRwITbS5iTmX7toqw5P0K9e0yV3mUqaXb
w5NcnpykuEXpktGs8UVYfHrs9p8y0A4bkFCjl8DZfz16jhMMcVcHLaey1spFUIAp
SGwd6YLvidE1vg==
-----END CERTIFICATE-----
Generated at Sun May 4 14:00:34 2025 by rpki-client