Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: +fHUTINMbp0oWVUlipMq0sLyjlFBJGsLM6c9CxbSSkk=
Subject key identifier: 3D:D1:55:0A:7F:A9:2B:E1:F9:C4:F3:5D:65:66:0F:41:58:E0:F6:C7
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 01969C07B97A6F52A6138DC5415BD46CFA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 090B
Signing time: Sun 04 May 2025 16:01:13 +0000
Manifest this update: Sun 04 May 2025 16:01:13 +0000
Manifest next update: Mon 05 May 2025 16:01:13 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: ucFUV/8BixZSrEIOETEdLnn24lMGqTLUdc4BAofBKec=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:07:b9:7a:6f:52:a6:13:8d:c5:41:5b:d4:6c:fa:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: May 4 16:01:13 2025 GMT
Not After : May 5 16:01:13 2025 GMT
Subject: CN=3dd1550a7fa92be1f9c4f35d65660f4158e0f6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:45:de:ff:9f:77:5e:ea:68:26:e3:b2:03:
7f:d9:1b:8a:50:1e:63:b4:ab:1b:54:c0:6b:9d:d9:
ed:72:a1:b6:3b:e9:28:d0:bc:05:eb:cd:39:54:56:
96:a0:26:76:e4:2b:ae:73:73:f6:e1:cc:87:14:91:
2e:d3:f4:0f:de:14:ca:e0:f7:06:1a:3e:7d:72:25:
61:a4:c8:a9:88:26:b6:f3:cd:d4:ed:34:f9:5a:34:
a7:01:82:2a:57:74:9f:8a:80:54:45:fe:61:78:2e:
2b:b2:a8:ed:56:48:d9:20:eb:b7:f4:98:28:c8:5a:
86:ea:3d:8b:80:92:02:3e:0a:86:ce:ea:61:40:d5:
a2:b1:14:a2:6e:65:c8:3f:50:a1:86:cc:af:cb:91:
51:82:50:fe:4a:65:fe:de:18:0b:7b:d1:78:65:a9:
b4:fd:7c:94:a0:4b:86:18:8c:97:80:e9:81:48:c4:
fd:81:20:82:70:70:00:34:2f:a0:9a:34:b6:f0:e1:
7d:db:44:d6:be:0e:22:27:6b:eb:56:0e:9b:06:74:
89:2c:f0:a5:08:e0:2d:e9:4a:f0:7b:35:85:64:d6:
a4:0f:a3:8c:e0:d5:2e:9d:16:2a:fc:e8:ef:1f:14:
1d:23:8a:6a:02:a7:8c:a5:18:cc:e0:80:75:ad:1a:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:55:0A:7F:A9:2B:E1:F9:C4:F3:5D:65:66:0F:41:58:E0:F6:C7
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b3:32:00:53:96:c0:67:88:f2:63:93:16:27:f1:e5:01:8e:
72:0a:69:79:13:e0:50:b6:99:73:cc:c3:b1:c4:09:2d:22:28:
77:ee:14:f0:f0:e9:67:b8:11:25:57:9a:36:a3:f6:99:88:e6:
b7:d1:f7:3d:26:7f:f3:d8:97:cb:06:08:0a:30:71:42:a7:c9:
8c:86:4b:b3:31:e8:6c:8f:04:f7:be:b9:68:1d:30:c3:8b:3d:
6e:0f:ae:43:27:22:50:cb:9e:0b:8a:86:33:9e:19:0d:f1:90:
44:da:86:cc:32:29:96:53:5b:2d:ca:35:bf:63:cc:ec:3f:43:
a0:f5:9e:a6:34:e3:86:f4:ef:fa:a9:53:39:3d:6f:06:7e:ab:
d5:f1:67:0f:34:2b:e7:08:7c:91:1b:75:7d:28:94:4e:74:ec:
da:b4:f9:dd:43:99:a8:95:00:94:15:01:03:97:a4:3b:f0:c9:
71:c2:17:8f:c0:ea:8b:b1:5e:49:d8:e1:4b:53:5c:48:ee:5d:
d9:42:4f:11:a0:c3:2c:4a:4c:6e:97:a5:56:57:f9:d7:26:92:
4d:47:90:40:b4:de:f0:33:9e:b9:2f:cd:fb:68:7c:5a:b9:9f:
b0:a7:3f:98:72:3c:67:02:f9:8b:72:c8:b6:63:63:78:f8:98:
48:84:80:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacB7l6b1KmE43FQVvUbPqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1
MGQ2YTEwHhcNMjUwNTA0MTYwMTEzWhcNMjUwNTA1MTYwMTEzWjAzMTEwLwYDVQQD
EygzZGQxNTUwYTdmYTkyYmUxZjljNGYzNWQ2NTY2MGY0MTU4ZTBmNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pRF3v+fd17qaCbjsgN/2RuKUB5j
tKsbVMBrndntcqG2O+ko0LwF6805VFaWoCZ25Cuuc3P24cyHFJEu0/QP3hTK4PcG
Gj59ciVhpMipiCa2883U7TT5WjSnAYIqV3SfioBURf5heC4rsqjtVkjZIOu39Jgo
yFqG6j2LgJICPgqGzuphQNWisRSibmXIP1Chhsyvy5FRglD+SmX+3hgLe9F4Zam0
/XyUoEuGGIyXgOmBSMT9gSCCcHAANC+gmjS28OF920TWvg4iJ2vrVg6bBnSJLPCl
COAt6UrwezWFZNakD6OM4NUunRYq/OjvHxQdI4pqAqeMpRjM4IB1rRpxuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3RVQp/qSvh+cTzXWVmD0FY4PbHMB8GA1UdIwQY
MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt
OWU1OWMxMTFhYTM4LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4
LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7MyAFOW
wGeI8mOTFifx5QGOcgppeRPgULaZc8zDscQJLSIod+4U8PDpZ7gRJVeaNqP2mYjm
t9H3PSZ/89iXywYICjBxQqfJjIZLszHobI8E9765aB0ww4s9bg+uQyciUMueC4qG
M54ZDfGQRNqGzDIpllNbLco1v2PM7D9DoPWepjTjhvTv+qlTOT1vBn6r1fFnDzQr
5wh8kRt1fSiUTnTs2rT53UOZqJUAlBUBA5ekO/DJccIXj8Dqi7FeSdjhS1NcSO5d
2UJPEaDDLEpMbpelVlf51yaSTUeQQLTe8DOeuS/N+2h8WrmfsKc/mHI8ZwL5i3LI
tmNjePiYSISACA==
-----END CERTIFICATE-----
Generated at Sun May 4 18:41:46 2025 by rpki-client