Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: OtfvuCrKFFSbrmupJtK24NhPjgsArJyjggBtmWtIS/4=
Subject key identifier: 04:03:56:D6:7F:59:06:DA:68:30:84:78:0F:08:13:FF:56:DB:68:D0
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019682EC5EE6FECC2DA0FE0E5BB0D38CDC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 14A6
Signing time: Tue 29 Apr 2025 19:00:50 +0000
Manifest this update: Tue 29 Apr 2025 19:00:50 +0000
Manifest next update: Wed 30 Apr 2025 19:00:50 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: 2cTfjCvmdMc5Ke/9zMv/FKIllEC2unacG4dwdwnupoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:5e:e6:fe:cc:2d:a0:fe:0e:5b:b0:d3:8c:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Apr 29 19:00:50 2025 GMT
Not After : Apr 30 19:00:50 2025 GMT
Subject: CN=040356d67f5906da683084780f0813ff56db68d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:cb:6b:0e:4f:1d:c3:92:d0:d2:37:8d:6c:
a7:84:a0:57:2e:48:9d:b5:f3:5d:70:30:ca:1c:13:
41:44:ca:79:cf:dc:99:e2:45:0b:6a:91:a6:2f:57:
62:a8:82:71:8b:07:de:cb:08:11:d8:82:72:c8:39:
14:4e:87:ee:a2:3a:ac:9e:c1:f2:d1:dd:fc:e9:2d:
85:e7:86:4c:cf:b9:3e:e3:93:09:6d:ef:9d:26:1a:
a9:2b:41:0d:3e:ed:2c:b8:21:1a:a8:3c:fa:37:8e:
7d:e1:b6:bd:28:51:ce:92:fb:cd:6c:31:83:02:59:
c2:30:c1:35:a0:c8:71:28:67:6c:de:33:12:32:10:
8d:05:47:e6:73:71:14:a7:61:f1:5b:9f:b2:cd:64:
79:0f:41:79:ec:43:57:ec:b1:09:ec:1a:af:40:0e:
16:f2:03:29:59:f8:c5:9a:f6:f4:14:89:46:5f:31:
1f:a8:a7:11:68:7a:dc:d3:e6:72:2e:ff:f9:49:d9:
03:09:ee:0f:c8:51:1b:d3:dd:55:04:64:e7:eb:99:
59:0d:e7:cb:58:74:86:ff:f1:c9:57:c0:15:54:59:
9c:af:29:d1:76:46:fc:dd:ca:af:7c:8b:34:6b:bb:
1d:3b:22:c7:e1:f9:18:41:b0:af:76:ab:d2:b0:53:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:56:D6:7F:59:06:DA:68:30:84:78:0F:08:13:FF:56:DB:68:D0
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:98:ba:5a:bb:be:36:d9:3c:5c:e8:9a:a3:17:c6:8e:4a:b7:
34:93:3e:33:49:9a:14:ed:f8:fc:61:69:2b:aa:c1:07:99:40:
1f:25:89:fa:09:5b:88:b3:67:a7:bc:6c:ce:6d:11:13:46:c7:
8a:09:4a:68:a1:30:00:4d:12:45:1a:b9:f5:84:0d:30:23:c4:
39:74:08:4c:00:6f:83:87:63:a8:08:f6:6f:64:e7:90:87:f3:
ae:20:01:f0:ee:8f:e1:7b:17:e3:18:5e:f9:ee:9c:66:82:3c:
4c:7e:74:84:a6:84:0d:c6:4e:2c:f4:9e:f8:07:35:8e:2d:30:
d2:d1:39:cf:e7:71:13:ff:cd:c8:3f:88:c7:b5:56:89:f8:9e:
5a:f9:22:8a:d7:f1:fe:2b:c4:2b:41:d0:fb:54:ad:e6:9c:8b:
b8:fc:33:cf:b6:cf:89:82:15:8c:88:f1:b6:86:e5:1b:a5:0d:
38:83:01:12:22:81:47:01:b2:a6:39:0e:d2:1f:ce:94:2d:b4:
7a:fc:7f:07:d1:b6:0f:4d:e5:43:8b:06:40:29:68:66:27:01:
f8:55:f8:a2:ec:37:20:d8:7c:99:a2:2e:a0:a0:f5:77:84:1f:
6b:02:cd:08:ac:dd:01:0f:e5:21:eb:14:f8:98:74:e2:93:3a:
e2:00:61:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaC7F7m/swtoP4OW7DTjNxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDhhNzM4ZDRjMTNjNGE2NzdhZjUxMjc1YmE4NGM4YjM2
ZGM5Y2UwHhcNMjUwNDI5MTkwMDUwWhcNMjUwNDMwMTkwMDUwWjAzMTEwLwYDVQQD
EygwNDAzNTZkNjdmNTkwNmRhNjgzMDg0NzgwZjA4MTNmZjU2ZGI2OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV/Law5PHcOS0NI3jWynhKBXLkid
tfNdcDDKHBNBRMp5z9yZ4kULapGmL1diqIJxiwfeywgR2IJyyDkUTofuojqsnsHy
0d386S2F54ZMz7k+45MJbe+dJhqpK0ENPu0suCEaqDz6N4594ba9KFHOkvvNbDGD
AlnCMME1oMhxKGds3jMSMhCNBUfmc3EUp2HxW5+yzWR5D0F57ENX7LEJ7BqvQA4W
8gMpWfjFmvb0FIlGXzEfqKcRaHrc0+ZyLv/5SdkDCe4PyFEb091VBGTn65lZDefL
WHSG//HJV8AVVFmcrynRdkb83cqvfIs0a7sdOyLH4fkYQbCvdqvSsFPYewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQDVtZ/WQbaaDCEeA8IE/9W22jQMB8GA1UdIwQY
MBaAFMTYpzjUwTxKZ3r1EnW6hMizbcnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYt
YWY2MmM4NDY1ZGFiLzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYtYWY2MmM4NDY1ZGFi
LzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZi6Wru+
Ntk8XOiaoxfGjkq3NJM+M0maFO34/GFpK6rBB5lAHyWJ+glbiLNnp7xszm0RE0bH
iglKaKEwAE0SRRq59YQNMCPEOXQITABvg4djqAj2b2TnkIfzriAB8O6P4XsX4xhe
+e6cZoI8TH50hKaEDcZOLPSe+Ac1ji0w0tE5z+dxE//NyD+Ix7VWifieWvkiitfx
/ivEK0HQ+1St5pyLuPwzz7bPiYIVjIjxtoblG6UNOIMBEiKBRwGypjkO0h/OlC20
evx/B9G2D03lQ4sGQCloZicB+FX4ouw3INh8maIuoKD1d4QfawLNCKzdAQ/lIesU
+Jh04pM64gBhPA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:52 2025 by rpki-client