Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: Hch2GcakfSrfjWxNs9HHLPWoPdtBuSq6bKDan3weMZ4=
Subject key identifier: B1:DF:3A:E5:3C:47:8D:44:CA:8A:28:8F:AD:D9:C8:F8:5E:ED:27:01
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 0196865B6279B438738CE5EB71D2DD4CAD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 11:00:57 +0000
Manifest this update: Wed 30 Apr 2025 11:00:57 +0000
Manifest next update: Thu 01 May 2025 11:00:57 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: Oqf53jUHbDCyX+eg+trDsm7nvD/7fa5WxJn+hSB4SLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:62:79:b4:38:73:8c:e5:eb:71:d2:dd:4c:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Apr 30 11:00:57 2025 GMT
Not After : May 1 11:00:57 2025 GMT
Subject: CN=b1df3ae53c478d44ca8a288fadd9c8f85eed2701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:2a:e7:c6:6a:49:34:58:a3:e5:f7:ea:3b:
e2:6a:4c:03:e4:7e:11:72:5e:2b:48:6c:c2:a9:ef:
a5:09:c7:32:4e:ba:e8:8f:81:28:4b:83:65:ab:4a:
a5:78:d6:16:bd:ad:ab:d6:39:58:d9:5b:1d:05:9b:
e6:a2:ac:4a:cc:3e:0c:63:52:52:50:ab:b4:a9:0d:
03:41:fc:c5:63:be:cc:fe:d8:66:fb:2b:c6:30:58:
ed:3f:8d:01:c2:64:67:00:5f:5c:5a:73:0c:cb:67:
6e:f6:db:e3:5c:b3:6b:08:5a:17:84:3a:32:3f:b1:
b3:f1:61:05:d6:a6:16:88:5d:ae:06:a0:88:f1:a9:
8a:4f:e5:e7:bf:0e:e9:35:57:07:f1:9e:4b:d8:f8:
76:99:0a:77:13:6a:fe:88:03:bb:36:25:f6:cb:c2:
db:35:1f:df:c3:6e:88:78:33:9c:29:42:f6:26:e1:
53:64:f6:36:1e:9d:a8:1f:3d:fb:54:49:58:ad:a6:
30:cf:5f:4e:62:26:b6:ef:a7:57:a6:c7:91:69:d9:
20:30:87:ab:e1:89:a1:0a:1d:fe:e7:9f:9d:de:03:
38:8d:da:d5:89:e5:88:03:cf:74:e0:8e:2c:f3:0e:
bf:65:77:03:06:81:29:4d:97:da:f4:ec:7d:f0:97:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DF:3A:E5:3C:47:8D:44:CA:8A:28:8F:AD:D9:C8:F8:5E:ED:27:01
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:98:b3:38:1a:d1:29:cc:76:07:a7:e6:80:cb:a9:f1:ad:45:
bd:89:92:f1:87:af:d4:25:4a:2a:88:f3:b3:97:56:b6:12:8b:
49:23:73:0f:4a:3f:b7:2a:a3:3c:47:74:4a:a2:28:ec:e4:23:
ab:79:56:18:f2:3e:8f:d2:54:7b:aa:e5:b4:19:4f:71:0c:68:
96:94:b3:30:cb:a1:de:8c:91:88:13:e2:e2:6f:a9:5c:3c:2d:
c0:cd:6b:ad:e7:4d:9e:ed:eb:18:1b:20:d8:03:67:53:e7:69:
2a:80:14:5f:bb:8c:c4:b1:eb:f2:33:c9:c7:ed:2a:e2:52:e4:
5d:fc:86:d5:87:b5:ae:b1:d4:d5:b7:13:55:c4:e5:22:79:f2:
93:f5:ea:dc:73:66:8c:d8:d4:33:34:4c:e3:81:c4:a9:f5:f5:
81:ac:5e:bb:01:c4:68:98:46:99:75:dd:a9:68:bd:fa:9c:07:
b1:5c:30:2e:f6:c4:94:9c:42:60:dd:15:91:a3:f7:c8:5c:b2:
ba:e8:38:28:e9:8e:e7:f6:b1:bf:6b:53:c5:e8:f2:e1:e1:57:
8a:f9:e6:2f:77:ab:6e:a6:10:6b:d9:93:bb:90:15:4a:ac:d7:
d7:94:4f:22:80:bf:27:0d:f2:b8:40:99:24:14:04:12:b6:d1:
92:55:79:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGW2J5tDhzjOXrcdLdTK02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDZhZGQ4ZGFmZTk5ZjZhN2Q3ODdkNDQ3OTU0NWE2NDZm
NmRlZDgwHhcNMjUwNDMwMTEwMDU3WhcNMjUwNTAxMTEwMDU3WjAzMTEwLwYDVQQD
EyhiMWRmM2FlNTNjNDc4ZDQ0Y2E4YTI4OGZhZGQ5YzhmODVlZWQyNzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0gq58ZqSTRYo+X36jviakwD5H4R
cl4rSGzCqe+lCccyTrroj4EoS4Nlq0qleNYWva2r1jlY2VsdBZvmoqxKzD4MY1JS
UKu0qQ0DQfzFY77M/thm+yvGMFjtP40BwmRnAF9cWnMMy2du9tvjXLNrCFoXhDoy
P7Gz8WEF1qYWiF2uBqCI8amKT+Xnvw7pNVcH8Z5L2Ph2mQp3E2r+iAO7NiX2y8Lb
NR/fw26IeDOcKUL2JuFTZPY2Hp2oHz37VElYraYwz19OYia276dXpseRadkgMIer
4YmhCh3+55+d3gM4jdrVieWIA8904I4s8w6/ZXcDBoEpTZfa9Ox98JfS3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHfOuU8R41Eyoooj63ZyPhe7ScBMB8GA1UdIwQY
MBaAFMdGrdja/pn2p9eH1EeVRaZG9t7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2It
N2NiZmU3MzdhODI3LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2ItN2NiZmU3MzdhODI3
LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJizOBrR
Kcx2B6fmgMup8a1FvYmS8Yev1CVKKojzs5dWthKLSSNzD0o/tyqjPEd0SqIo7OQj
q3lWGPI+j9JUe6rltBlPcQxolpSzMMuh3oyRiBPi4m+pXDwtwM1rredNnu3rGBsg
2ANnU+dpKoAUX7uMxLHr8jPJx+0q4lLkXfyG1Ye1rrHU1bcTVcTlInnyk/Xq3HNm
jNjUMzRM44HEqfX1gaxeuwHEaJhGmXXdqWi9+pwHsVwwLvbElJxCYN0VkaP3yFyy
uug4KOmO5/axv2tTxejy4eFXivnmL3erbqYQa9mTu5AVSqzX15RPIoC/Jw3yuECZ
JBQEErbRklV5zQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:15 2025 by rpki-client