Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: pBtBrN2JxpvPqFE/TY0MAxWd57jJUcnCGWNPXTD3br0=
Subject key identifier: 1D:80:83:13:D9:4E:31:E8:31:51:6E:3D:0C:17:7A:CD:C4:D8:0E:66
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 0196767A7046C9E53EF57C81CDC4C1D8F74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 09:00:57 +0000
Manifest this update: Sun 27 Apr 2025 09:00:57 +0000
Manifest next update: Mon 28 Apr 2025 09:00:57 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: /Wp9NCxXxKAEaMtRv5pz4WLGuBc40cZJ8qZED0U3/E0=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:70:46:c9:e5:3e:f5:7c:81:cd:c4:c1:d8:f7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Apr 27 09:00:57 2025 GMT
Not After : Apr 28 09:00:57 2025 GMT
Subject: CN=1d808313d94e31e831516e3d0c177acdc4d80e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:84:cf:21:92:65:e5:e2:5b:5e:67:18:ae:
3a:08:2f:6b:2e:07:32:e6:51:aa:e0:48:4c:a9:ba:
29:f6:c4:81:c3:1e:17:17:24:74:8c:d0:0f:92:77:
b1:07:3e:02:60:d4:a4:d4:0d:5b:84:b9:a8:c9:e6:
53:99:c9:6f:f6:0c:02:0a:38:de:54:d3:66:51:9c:
24:41:11:0a:ff:0c:49:a7:2d:96:dd:99:0c:93:25:
67:bc:e5:05:21:74:b8:9d:a4:52:e5:aa:50:07:2f:
ee:4f:4b:b0:29:dc:4d:05:37:3c:ed:88:82:fd:8e:
66:e5:fe:42:a8:c8:f0:c6:4f:b0:f2:28:76:ae:19:
e8:f2:88:16:7b:f3:28:82:89:a9:a6:a8:06:1d:e9:
b1:46:3d:d1:94:b7:f6:41:c1:11:db:d0:2f:bd:2d:
b9:96:28:9f:78:25:d7:14:f1:ef:21:46:96:c7:a5:
8c:6f:5e:93:7b:08:b5:80:c4:5b:68:79:9a:26:d5:
80:31:57:de:76:1c:88:8a:08:7e:57:a1:f7:ed:90:
26:30:30:ea:73:dc:63:4c:c8:bc:ef:36:a6:8f:b9:
0c:d6:87:a7:c0:2f:93:9d:7f:cb:e2:de:84:71:d5:
9b:0a:d7:04:ec:1a:b5:8d:92:3d:3a:7b:59:82:ca:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:83:13:D9:4E:31:E8:31:51:6E:3D:0C:17:7A:CD:C4:D8:0E:66
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:2b:ae:2b:8a:96:4e:3e:a8:48:52:20:a5:12:f6:ee:19:
67:7c:d2:ff:25:78:93:a9:02:d8:07:5a:42:d9:01:c5:6b:24:
56:6a:69:6a:e4:30:ab:66:a7:db:5b:61:b1:73:7f:97:d1:0c:
8e:77:7b:07:24:47:44:53:86:65:9c:ce:78:b2:0e:62:75:54:
57:28:06:3f:85:0f:1d:8b:0d:5b:2e:6f:12:c6:6d:ab:4f:72:
16:bf:58:70:7a:27:2b:ce:04:4e:8c:08:5b:64:10:e8:a7:55:
db:2b:d4:e6:8e:0f:9d:b3:08:64:4a:89:1f:f3:46:e4:59:9c:
b5:26:ec:44:7b:2e:59:d4:e5:25:01:e4:a6:57:f5:03:7e:5e:
71:b1:d5:24:de:18:d1:e5:24:86:b5:a9:15:5d:05:fe:fc:f2:
be:28:96:ff:0d:45:be:1d:67:1d:08:b3:74:16:15:a2:01:51:
f5:f8:7f:85:f4:98:ca:ee:a4:9b:02:04:06:83:2c:aa:27:62:
54:2a:2c:9f:08:0e:79:60:0b:7a:eb:d2:46:cb:05:8d:e8:2d:
39:f0:72:d8:c9:03:34:e7:d2:f4:e6:a0:8a:f9:81:f9:96:36:
12:5d:0b:14:2c:86:46:e6:ef:2c:e2:b9:56:4d:1b:fd:05:86:
0a:2e:20:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2enBGyeU+9XyBzcTB2PdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjUwNDI3MDkwMDU3WhcNMjUwNDI4MDkwMDU3WjAzMTEwLwYDVQQD
EygxZDgwODMxM2Q5NGUzMWU4MzE1MTZlM2QwYzE3N2FjZGM0ZDgwZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06aEzyGSZeXiW15nGK46CC9rLgcy
5lGq4EhMqbop9sSBwx4XFyR0jNAPknexBz4CYNSk1A1bhLmoyeZTmclv9gwCCjje
VNNmUZwkQREK/wxJpy2W3ZkMkyVnvOUFIXS4naRS5apQBy/uT0uwKdxNBTc87YiC
/Y5m5f5CqMjwxk+w8ih2rhno8ogWe/MogomppqgGHemxRj3RlLf2QcER29AvvS25
liifeCXXFPHvIUaWx6WMb16Tewi1gMRbaHmaJtWAMVfedhyIigh+V6H37ZAmMDDq
c9xjTMi87zamj7kM1oenwC+TnX/L4t6EcdWbCtcE7Bq1jZI9OntZgsoq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2AgxPZTjHoMVFuPQwXes3E2A5mMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMcrriuK
lk4+qEhSIKUS9u4ZZ3zS/yV4k6kC2AdaQtkBxWskVmppauQwq2an21thsXN/l9EM
jnd7ByRHRFOGZZzOeLIOYnVUVygGP4UPHYsNWy5vEsZtq09yFr9YcHonK84ETowI
W2QQ6KdV2yvU5o4PnbMIZEqJH/NG5FmctSbsRHsuWdTlJQHkplf1A35ecbHVJN4Y
0eUkhrWpFV0F/vzyviiW/w1Fvh1nHQizdBYVogFR9fh/hfSYyu6kmwIEBoMsqidi
VCosnwgOeWALeuvSRssFjegtOfBy2MkDNOfS9OagivmB+ZY2El0LFCyGRubvLOK5
Vk0b/QWGCi4gJQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:40 2025 by rpki-client