Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: yegj/sbF5nJYUPEUB6XY+PWNhQbJOId4cE3qHTiezlE=
Subject key identifier: 0B:CF:F9:3D:51:A0:E6:6F:C6:9D:D2:E7:4E:C1:83:2A:55:4E:A4:A4
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 01967CEA2A856E8ADEA6AC12162D1337AAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 1444
Signing time: Mon 28 Apr 2025 15:00:43 +0000
Manifest this update: Mon 28 Apr 2025 15:00:43 +0000
Manifest next update: Tue 29 Apr 2025 15:00:43 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: fQDmeGtHIWUwTJTNvIRkcaTkMWA0FoM+9mUyJ6YG+Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:2a:85:6e:8a:de:a6:ac:12:16:2d:13:37:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Apr 28 15:00:43 2025 GMT
Not After : Apr 29 15:00:43 2025 GMT
Subject: CN=0bcff93d51a0e66fc69dd2e74ec1832a554ea4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:45:5f:88:74:93:e9:1a:d2:30:69:6c:ae:
5c:b5:b5:81:bb:90:d0:e4:75:d5:15:70:c0:87:ff:
e1:d2:df:7e:28:43:2c:ab:40:7c:24:ec:f3:a2:8a:
f4:e9:b4:8a:29:fe:75:cc:b5:d6:0a:4c:de:bd:8a:
cc:00:e2:dd:69:16:77:e3:2d:f2:a9:bc:0e:c9:ce:
41:25:cb:c8:7f:a2:90:a8:08:a5:1d:ca:01:43:52:
69:77:b8:bb:c5:cb:5b:08:fd:9b:73:e5:71:47:0a:
bb:91:3a:11:f3:a3:ff:43:fe:95:cc:1e:f6:65:67:
ca:41:bf:05:29:74:b6:ee:2a:fd:5d:ea:28:5b:b7:
3c:47:cf:b5:0a:df:84:ad:4a:c4:08:75:55:e8:2d:
51:10:f7:b7:57:08:55:b5:fe:c6:39:d1:01:b1:5f:
b0:39:d5:b9:dd:6f:b4:e6:c3:ee:e2:d8:ae:47:9d:
66:67:69:61:e5:c4:69:57:9a:6d:3b:c9:aa:fe:ee:
42:fa:ff:ca:8b:4d:e8:70:53:3e:0c:43:98:14:db:
6d:f1:40:b0:7f:5e:88:36:e5:08:0d:c3:3f:e2:bb:
4a:f6:0e:bd:a7:b6:4a:4d:18:3d:d2:f8:c0:a2:1d:
8d:69:e1:f0:57:d3:9f:be:a6:9a:5d:85:52:54:02:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CF:F9:3D:51:A0:E6:6F:C6:9D:D2:E7:4E:C1:83:2A:55:4E:A4:A4
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:80:cc:9f:95:24:b8:c6:65:1d:1c:04:45:fe:0d:42:89:f8:
35:bf:0f:51:c3:2f:72:70:96:ea:61:d4:79:70:fc:36:f7:db:
c3:0e:51:49:90:dd:ca:23:38:5a:3f:7b:89:ea:5c:a9:2f:e4:
9b:0b:d9:2e:53:0b:60:30:f1:1f:ca:90:cb:4d:bc:1f:77:1f:
68:a4:1b:5f:f3:a8:c0:fd:39:80:c2:2f:9e:c4:a2:da:ef:6a:
24:b8:0f:02:72:85:d8:89:b5:2b:39:74:0b:0e:d9:18:8f:57:
d8:69:34:ec:24:18:90:4c:06:27:83:d6:a2:00:97:94:45:a1:
d6:fd:a7:2b:6d:32:d9:9a:b1:72:8f:b0:87:b5:14:89:9a:4d:
49:28:a4:cb:06:e9:c1:27:bb:bc:77:00:e4:ff:4b:9f:2e:dd:
14:f7:7a:3d:a1:da:f0:89:38:bc:68:f8:21:92:17:77:95:ff:
f0:ed:8b:6d:dd:9a:65:db:21:e9:56:82:9d:04:1a:86:ce:6b:
fe:65:aa:af:9d:40:4a:84:8c:6a:65:a5:3e:ab:b5:26:2f:83:
cb:61:3c:2e:08:dc:a7:8d:ee:76:92:d3:ec:a4:b1:93:76:2f:
c6:1b:67:ac:25:55:c8:ae:da:a1:df:54:e3:ba:cb:7d:cc:73:
9f:1b:67:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ86iqFborepqwSFi0TN6qhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwNDI4MTUwMDQzWhcNMjUwNDI5MTUwMDQzWjAzMTEwLwYDVQQD
EygwYmNmZjkzZDUxYTBlNjZmYzY5ZGQyZTc0ZWMxODMyYTU1NGVhNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MhFX4h0k+ka0jBpbK5ctbWBu5DQ
5HXVFXDAh//h0t9+KEMsq0B8JOzzoor06bSKKf51zLXWCkzevYrMAOLdaRZ34y3y
qbwOyc5BJcvIf6KQqAilHcoBQ1Jpd7i7xctbCP2bc+VxRwq7kToR86P/Q/6VzB72
ZWfKQb8FKXS27ir9XeooW7c8R8+1Ct+ErUrECHVV6C1REPe3VwhVtf7GOdEBsV+w
OdW53W+05sPu4tiuR51mZ2lh5cRpV5ptO8mq/u5C+v/Ki03ocFM+DEOYFNtt8UCw
f16INuUIDcM/4rtK9g69p7ZKTRg90vjAoh2NaeHwV9OfvqaaXYVSVAJiMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvP+T1RoOZvxp3S507BgypVTqSkMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToDMn5Uk
uMZlHRwERf4NQon4Nb8PUcMvcnCW6mHUeXD8Nvfbww5RSZDdyiM4Wj97iepcqS/k
mwvZLlMLYDDxH8qQy028H3cfaKQbX/OowP05gMIvnsSi2u9qJLgPAnKF2Im1Kzl0
Cw7ZGI9X2Gk07CQYkEwGJ4PWogCXlEWh1v2nK20y2Zqxco+wh7UUiZpNSSikywbp
wSe7vHcA5P9Lny7dFPd6PaHa8Ik4vGj4IZIXd5X/8O2Lbd2aZdsh6VaCnQQahs5r
/mWqr51ASoSMamWlPqu1Ji+Dy2E8Lgjcp43udpLT7KSxk3YvxhtnrCVVyK7aod9U
47rLfcxznxtntg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:15:38 2025 by rpki-client