Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: QyVfHBPcYtpHq5g6HDWunq5d31ARGv7pnj95fNA+8NQ=
Subject key identifier: 55:8C:25:7E:AD:73:FE:2B:5C:50:AB:63:D9:23:F7:55:5C:65:4E:28
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 019679B1F1A7D5E1C760DDD21E25FD530CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 124B
Signing time: Mon 28 Apr 2025 00:00:26 +0000
Manifest this update: Mon 28 Apr 2025 00:00:26 +0000
Manifest next update: Tue 29 Apr 2025 00:00:26 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: A0sbnXakY9g5gUM8PF+qojHPQwukWt5BV6wSsOFeyBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:f1:a7:d5:e1:c7:60:dd:d2:1e:25:fd:53:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Apr 28 00:00:26 2025 GMT
Not After : Apr 29 00:00:26 2025 GMT
Subject: CN=558c257ead73fe2b5c50ab63d923f7555c654e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:7f:35:0e:af:d1:bf:5f:72:6c:54:66:a6:
b6:93:3e:60:b7:06:48:d3:0d:aa:3f:af:12:00:69:
68:b4:39:fc:c8:43:40:74:5c:cb:fb:7f:ff:9a:07:
43:c2:df:55:27:b0:dd:63:75:47:f9:1b:82:da:72:
9e:e8:3a:6c:9c:b5:74:d5:5f:cb:33:9b:1b:73:be:
3c:ac:28:0b:e1:b1:95:ea:73:b9:94:b1:7a:92:a1:
5c:77:53:0f:56:85:46:4e:c3:57:03:be:5d:f5:8a:
ed:91:19:53:ee:23:16:35:b9:81:5a:a0:27:e8:01:
36:4e:6d:b3:25:90:35:ad:13:1d:e7:42:3e:b9:55:
3c:40:6a:81:d3:e3:11:3b:0e:42:b3:31:91:0a:29:
b6:a9:82:65:57:87:b3:bf:f1:43:6b:55:98:02:9a:
8a:31:b5:87:01:88:de:03:3d:9b:5f:62:89:1f:85:
82:51:b1:17:61:1c:30:53:91:2a:01:2a:cb:41:04:
91:2c:a2:5b:0c:d5:4f:b7:0a:e4:36:c3:29:a7:97:
5d:fe:b7:e7:e3:f9:de:66:45:9e:c8:bd:e2:13:bf:
56:cb:3c:05:18:7b:59:76:4d:da:30:3e:7d:33:ba:
fe:0c:d4:10:d1:b0:3a:87:f7:93:92:4e:fd:6c:50:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8C:25:7E:AD:73:FE:2B:5C:50:AB:63:D9:23:F7:55:5C:65:4E:28
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:80:f1:f6:83:bb:29:17:a3:ce:a1:6b:87:a9:b4:1c:b0:
3d:1e:89:aa:48:a7:70:a8:12:1e:0f:f5:6f:84:f3:07:19:77:
f3:1a:79:c2:31:2a:32:5b:6d:df:38:e7:80:d1:bf:2b:65:0c:
09:51:f0:70:d8:e5:d6:29:6f:a5:4d:c1:33:8c:b5:fa:2c:58:
8b:fb:61:aa:a1:0c:bf:3b:ec:1f:01:09:86:e9:00:9a:e2:d0:
92:3d:e1:d4:00:7e:13:23:35:ee:ac:fa:72:0d:f7:1d:8b:b8:
a2:9b:e8:58:48:ab:b4:84:63:69:13:8e:da:1f:be:e2:83:99:
6e:62:ef:88:1c:48:af:a9:1a:19:24:f4:06:18:41:08:8d:79:
46:c7:1f:34:79:7d:d5:4c:33:ff:45:5c:75:70:69:7f:7b:49:
e5:1f:a6:5c:e0:36:32:91:50:dd:7c:9a:87:34:f9:06:5b:14:
77:0e:a9:55:0b:6c:61:c0:eb:cb:3e:a3:4f:23:0b:25:20:1f:
14:81:a8:ea:d3:1d:38:d0:4e:e5:91:f7:a3:57:20:04:a4:cc:
2d:1b:da:81:79:2e:94:99:f6:26:35:08:98:94:16:d7:b4:5f:
0c:10:2b:75:62:dc:31:f3:eb:33:8b:ba:88:72:02:a4:79:c3:
78:79:54:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5sfGn1eHHYN3SHiX9UwzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm
ZGU4MzEwHhcNMjUwNDI4MDAwMDI2WhcNMjUwNDI5MDAwMDI2WjAzMTEwLwYDVQQD
Eyg1NThjMjU3ZWFkNzNmZTJiNWM1MGFiNjNkOTIzZjc1NTVjNjU0ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zl/NQ6v0b9fcmxUZqa2kz5gtwZI
0w2qP68SAGlotDn8yENAdFzL+3//mgdDwt9VJ7DdY3VH+RuC2nKe6DpsnLV01V/L
M5sbc748rCgL4bGV6nO5lLF6kqFcd1MPVoVGTsNXA75d9YrtkRlT7iMWNbmBWqAn
6AE2Tm2zJZA1rRMd50I+uVU8QGqB0+MROw5CszGRCim2qYJlV4ezv/FDa1WYApqK
MbWHAYjeAz2bX2KJH4WCUbEXYRwwU5EqASrLQQSRLKJbDNVPtwrkNsMpp5dd/rfn
4/neZkWeyL3iE79WyzwFGHtZdk3aMD59M7r+DNQQ0bA6h/eTkk79bFAopwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWMJX6tc/4rXFCrY9kj91VcZU4oMB8GA1UdIwQY
MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt
MDY2ODY2ZjJkZWQwLzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw
LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoveA8faD
uykXo86ha4eptBywPR6JqkincKgSHg/1b4TzBxl38xp5wjEqMltt3zjngNG/K2UM
CVHwcNjl1ilvpU3BM4y1+ixYi/thqqEMvzvsHwEJhukAmuLQkj3h1AB+EyM17qz6
cg33HYu4opvoWEirtIRjaROO2h++4oOZbmLviBxIr6kaGST0BhhBCI15RscfNHl9
1Uwz/0VcdXBpf3tJ5R+mXOA2MpFQ3XyahzT5BlsUdw6pVQtsYcDryz6jTyMLJSAf
FIGo6tMdONBO5ZH3o1cgBKTMLRvagXkulJn2JjUImJQW17RfDBArdWLcMfPrM4u6
iHICpHnDeHlUmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:08:14 2025 by rpki-client