Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: LGgxLBwEv6IqDqtNQ17hu3bjPRjbDqDXYmpXwehn5jE=
Subject key identifier: 27:C5:18:63:78:CD:0A:84:A1:2B:CC:27:7F:37:04:29:39:6E:3C:A2
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 019680C6B98B9756AAE87B3AAAB4851A4062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0C3A
Signing time: Tue 29 Apr 2025 09:00:29 +0000
Manifest this update: Tue 29 Apr 2025 09:00:29 +0000
Manifest next update: Wed 30 Apr 2025 09:00:29 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: isvYZk/NSLFZPfIfwTWmvqFAAgbyDnSFToLslgIoMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:b9:8b:97:56:aa:e8:7b:3a:aa:b4:85:1a:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Apr 29 09:00:29 2025 GMT
Not After : Apr 30 09:00:29 2025 GMT
Subject: CN=27c5186378cd0a84a12bcc277f370429396e3ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:87:b1:e1:07:9f:80:66:6c:d6:53:df:cd:
34:d5:2a:02:1d:12:a9:db:d6:0a:e6:cc:1a:ab:cf:
28:eb:2c:53:ee:b1:0a:d3:6b:5c:24:22:d6:fb:ac:
80:1e:24:d6:09:63:10:70:28:1f:68:d9:6f:c9:96:
71:3a:2f:8d:d1:6f:b7:51:04:5f:14:ca:a6:81:9c:
2d:35:48:c9:ef:dd:7a:86:78:74:42:9e:dc:36:5f:
94:35:b5:59:cf:c8:76:cb:45:ad:3a:e4:bb:42:2a:
20:76:ca:6e:1c:3f:cc:ef:f8:5a:d1:af:33:72:29:
60:5a:86:7f:a5:50:6e:c2:9f:ce:91:ea:0f:d0:e3:
31:2f:71:d0:a3:a4:d7:76:c6:4d:8a:79:42:10:d9:
b8:6d:c1:b8:3c:f9:1b:56:74:09:30:65:a4:91:eb:
94:cf:20:cd:f9:4d:73:3b:b9:d5:a5:d1:86:e7:92:
fd:ef:75:67:dd:a5:00:f0:27:bd:85:ad:88:ea:7b:
7b:b6:89:0f:99:4f:fa:6c:cf:10:f3:27:5f:5c:14:
4b:f8:db:8d:6e:0a:81:85:ef:9f:99:44:bf:7f:d1:
10:fb:6a:1e:25:4c:ba:54:1a:6e:6a:36:70:9e:ae:
e3:18:95:67:96:1a:31:6f:f7:21:b4:40:8d:77:d5:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:18:63:78:CD:0A:84:A1:2B:CC:27:7F:37:04:29:39:6E:3C:A2
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:1a:b4:ce:4e:04:05:6d:c4:bc:9b:9e:37:44:c7:78:04:
48:73:84:0c:56:96:84:e6:5c:f1:33:3d:46:1a:31:b8:f7:6d:
3c:6b:f2:b6:e4:98:bf:b1:1a:e2:5c:08:fa:52:59:20:b9:62:
b9:f6:65:cc:9c:d0:8b:ed:55:cb:2d:fd:32:dc:24:29:ca:0f:
cf:d2:0d:e6:c9:99:75:c8:16:2d:3a:82:30:78:59:8b:5e:3c:
7e:c4:52:d7:1f:d1:be:a1:6b:1a:5c:4e:6a:a2:d5:fa:b0:5a:
98:c6:2c:bb:10:f7:d4:06:11:f6:32:ff:86:1c:98:57:d9:81:
7a:80:eb:e6:9e:c6:3e:1d:df:a7:33:20:3f:75:ba:e4:da:a1:
b6:79:c5:51:ed:95:2d:69:03:12:f0:9a:82:7f:8e:1c:df:0a:
07:84:a8:86:05:c8:ba:1f:b0:67:fa:6f:33:e8:a8:58:22:04:
7e:34:4a:f4:05:5f:9a:b3:5e:a5:e2:57:be:ba:52:13:2d:8a:
48:74:3d:75:e0:92:fc:7b:1b:57:80:b6:5c:76:e1:e4:1f:65:
4c:85:e9:68:4e:3d:b0:15:78:cb:df:57:78:4c:60:0c:70:08:
eb:b5:66:35:4b:1d:f7:2e:4a:d2:c0:80:10:b8:7c:04:51:8d:
2b:84:cf:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAxrmLl1aq6Hs6qrSFGkBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDg1ZTI5ZjExOGMwMWJlODZjMTllNjY4ZmFjZmE0ODVk
ZTcxOGMwHhcNMjUwNDI5MDkwMDI5WhcNMjUwNDMwMDkwMDI5WjAzMTEwLwYDVQQD
EygyN2M1MTg2Mzc4Y2QwYTg0YTEyYmNjMjc3ZjM3MDQyOTM5NmUzY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GyHseEHn4BmbNZT38001SoCHRKp
29YK5swaq88o6yxT7rEK02tcJCLW+6yAHiTWCWMQcCgfaNlvyZZxOi+N0W+3UQRf
FMqmgZwtNUjJ7916hnh0Qp7cNl+UNbVZz8h2y0WtOuS7QiogdspuHD/M7/ha0a8z
cilgWoZ/pVBuwp/OkeoP0OMxL3HQo6TXdsZNinlCENm4bcG4PPkbVnQJMGWkkeuU
zyDN+U1zO7nVpdGG55L973Vn3aUA8Ce9ha2I6nt7tokPmU/6bM8Q8ydfXBRL+NuN
bgqBhe+fmUS/f9EQ+2oeJUy6VBpuajZwnq7jGJVnlhoxb/chtECNd9WzmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfFGGN4zQqEoSvMJ383BCk5bjyiMB8GA1UdIwQY
MBaAFMdIXinxGMAb6GwZ5mj6z6SF3nGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQt
NTdmOWJjNmE1YzMwLzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MzkxNzEtNTc0Yi00NDUxLWI2ZDQtNTdmOWJjNmE1YzMw
LzEveDBoZUtmRVl3QnZvYkJubWFQclBwSVhlY1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLUatM5O
BAVtxLybnjdEx3gESHOEDFaWhOZc8TM9RhoxuPdtPGvytuSYv7Ea4lwI+lJZILli
ufZlzJzQi+1Vyy39MtwkKcoPz9IN5smZdcgWLTqCMHhZi148fsRS1x/RvqFrGlxO
aqLV+rBamMYsuxD31AYR9jL/hhyYV9mBeoDr5p7GPh3fpzMgP3W65NqhtnnFUe2V
LWkDEvCagn+OHN8KB4SohgXIuh+wZ/pvM+ioWCIEfjRK9AVfmrNepeJXvrpSEy2K
SHQ9deCS/HsbV4C2XHbh5B9lTIXpaE49sBV4y99XeExgDHAI67VmNUsd9y5K0sCA
ELh8BFGNK4TPLA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:00 2025 by rpki-client