Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: OGJiTmkXEm1W8yWIkPl7wM+3f+ixTP9spEt9xnzFGdA=
Subject key identifier: 5B:86:A4:B9:31:8F:E3:78:CB:DF:15:18:9A:50:91:42:E0:4F:2D:04
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0196729D0A58646D25358DBFC26504865A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 15:00:16 +0000
Manifest this update: Sat 26 Apr 2025 15:00:16 +0000
Manifest next update: Sun 27 Apr 2025 15:00:16 +0000
Files and hashes: 1: F62WfIiTSrMtpYaKvt60lcQtkXw.roa (hash: YJlkN/VgWCfVi9nZv63jvrsBfGYFWAiYVqihH5uZ7es=)
2: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
3: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: TzgH42XYbtu5zXbX7KcDCqGXl8kKfQIux4VVIvQndpY=)
4: g69Pz3CuRumdk71XePj8dM2ccdQ.roa (hash: nnZldHhJmKFU3ji36X9uDUakGmtJCxtFpshmsg3zpfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:0a:58:64:6d:25:35:8d:bf:c2:65:04:86:5a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Apr 26 15:00:16 2025 GMT
Not After : Apr 27 15:00:16 2025 GMT
Subject: CN=5b86a4b9318fe378cbdf15189a509142e04f2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:c5:e2:c7:3f:66:d6:e7:f9:30:79:10:54:
83:fb:e9:b1:f4:8c:f1:04:0a:cb:13:1f:98:e8:15:
9d:74:0a:8a:78:44:e3:af:d5:94:ac:0d:19:99:0c:
ae:f9:ef:1d:ae:85:e3:ec:af:f2:39:95:be:a4:b2:
38:90:48:fa:03:e4:13:a8:86:8e:ec:0e:b5:4a:84:
3b:e9:32:30:d1:fd:08:3b:1a:d3:84:27:bb:91:23:
7b:00:a6:66:da:d2:42:bf:3a:7b:2e:39:f0:49:6d:
e0:2c:d2:e3:83:b0:1a:0e:2e:d2:c8:4f:a1:44:4b:
7f:02:b4:70:64:61:a9:ee:e8:8f:03:a2:4b:b5:e5:
0f:02:69:bd:41:15:ed:af:1c:55:5a:fd:66:e6:ce:
aa:64:dd:fe:b3:ee:36:2d:a7:48:f2:fe:e0:10:94:
d5:4b:9f:ba:06:12:5b:c8:e3:6e:75:41:7a:15:ec:
f7:ba:d1:f2:9c:d4:59:73:53:12:b8:f2:d3:ea:6d:
2f:dc:85:83:4d:71:34:be:c1:06:d4:b1:19:ae:37:
ef:e9:f6:da:1b:e3:f1:04:ca:a0:55:41:8e:82:08:
d5:cb:c6:c4:20:36:87:47:40:95:9e:ce:e6:fa:b2:
b3:47:0d:8b:70:99:c5:fa:77:c8:f2:ac:55:65:15:
5f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:A4:B9:31:8F:E3:78:CB:DF:15:18:9A:50:91:42:E0:4F:2D:04
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:54:d7:85:d8:1e:67:35:cd:0d:29:d7:1e:d9:b7:17:0a:
8f:7c:49:81:55:f4:cb:9a:a3:5a:c7:cc:7b:ef:6c:61:44:6e:
08:62:3d:16:c5:c6:41:29:10:dd:c8:2e:69:c3:9a:f0:55:49:
98:a8:30:19:dc:4c:96:7e:52:fa:7d:00:64:4f:51:15:da:2b:
87:47:d2:4c:bc:35:69:34:ee:0c:7b:2b:d0:cd:f6:77:02:eb:
68:3d:1d:a7:8c:78:b9:60:2e:01:63:33:bb:08:54:6f:6c:80:
fc:2a:87:7e:17:80:d5:d8:4f:31:9a:44:9f:b5:ed:a7:1e:a2:
dc:63:79:32:e4:10:0b:53:3b:ca:a4:cc:71:fe:e5:3d:3d:8a:
40:17:d5:2d:e3:28:88:ee:cc:ba:37:d7:65:10:df:78:56:5c:
7a:d5:d2:3c:e4:0c:78:e0:b4:16:ac:5e:14:8a:4e:61:15:74:
5b:8b:3e:d6:e3:85:48:a7:d7:77:92:96:14:39:ad:1a:82:30:
f5:eb:78:6e:77:c4:43:df:77:70:47:62:c3:8c:c0:50:8f:3f:
92:0f:bc:b7:c8:a8:22:72:a6:1d:f3:4f:19:0e:b6:51:e7:01:
70:27:0e:b3:5e:31:8d:b0:1d:c2:ed:d6:27:cb:a7:da:fa:e8:
08:12:6d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynQpYZG0lNY2/wmUEhlqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjUwNDI2MTUwMDE2WhcNMjUwNDI3MTUwMDE2WjAzMTEwLwYDVQQD
Eyg1Yjg2YTRiOTMxOGZlMzc4Y2JkZjE1MTg5YTUwOTE0MmUwNGYyZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozzF4sc/Ztbn+TB5EFSD++mx9Izx
BArLEx+Y6BWddAqKeETjr9WUrA0ZmQyu+e8droXj7K/yOZW+pLI4kEj6A+QTqIaO
7A61SoQ76TIw0f0IOxrThCe7kSN7AKZm2tJCvzp7LjnwSW3gLNLjg7AaDi7SyE+h
REt/ArRwZGGp7uiPA6JLteUPAmm9QRXtrxxVWv1m5s6qZN3+s+42LadI8v7gEJTV
S5+6BhJbyONudUF6Fez3utHynNRZc1MSuPLT6m0v3IWDTXE0vsEG1LEZrjfv6fba
G+PxBMqgVUGOggjVy8bEIDaHR0CVns7m+rKzRw2LcJnF+nfI8qxVZRVf/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuGpLkxj+N4y98VGJpQkULgTy0EMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFFU14XY
Hmc1zQ0p1x7ZtxcKj3xJgVX0y5qjWsfMe+9sYURuCGI9FsXGQSkQ3cguacOa8FVJ
mKgwGdxMln5S+n0AZE9RFdorh0fSTLw1aTTuDHsr0M32dwLraD0dp4x4uWAuAWMz
uwhUb2yA/CqHfheA1dhPMZpEn7Xtpx6i3GN5MuQQC1M7yqTMcf7lPT2KQBfVLeMo
iO7MujfXZRDfeFZcetXSPOQMeOC0FqxeFIpOYRV0W4s+1uOFSKfXd5KWFDmtGoIw
9et4bnfEQ993cEdiw4zAUI8/kg+8t8ioInKmHfNPGQ62UecBcCcOs14xjbAdwu3W
J8un2vroCBJtEw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:11 2025 by rpki-client