
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: XYvhDXbjVx3IQXwEOqiAwFBtmeu9IB2xVKHRQnSynb8=
Subject key identifier: 0F:52:91:06:6B:60:30:CE:A1:9E:0D:80:48:B8:FB:01:12:44:AC:2F
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 0196993DA31BE13E05131A28B8F92424B07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 0470
Signing time: Sun 04 May 2025 03:01:15 +0000
Manifest this update: Sun 04 May 2025 03:01:15 +0000
Manifest next update: Mon 05 May 2025 03:01:15 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: zjlhX2994K2o0HJKhUxGQNL6X0/pUVba/bn5wp0U8lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:3d:a3:1b:e1:3e:05:13:1a:28:b8:f9:24:24:b0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: May 4 03:01:15 2025 GMT
Not After : May 5 03:01:15 2025 GMT
Subject: CN=0f5291066b6030cea19e0d8048b8fb011244ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:15:ac:75:65:a3:1e:8f:d6:4b:c2:fc:35:
af:3e:3b:2f:9f:a3:ec:fb:12:66:76:66:0b:06:90:
85:16:90:72:8f:80:ca:c7:d4:cc:7b:45:9c:c9:35:
71:14:44:aa:19:b3:4a:8a:2b:8a:57:eb:32:13:6c:
33:22:f8:59:ff:70:db:ef:e9:0c:6a:be:1c:3d:1d:
ad:e3:a6:c7:5e:c2:71:f9:68:42:c2:db:ad:73:f7:
9f:32:98:2a:1a:b3:8e:a3:d7:de:0e:e2:42:96:40:
b2:14:fc:64:22:e4:f8:41:83:c2:39:58:90:13:0a:
86:b7:74:b2:0d:01:1b:d3:f8:8f:be:df:d9:e8:3b:
2d:4c:22:f0:eb:13:a1:90:2f:de:c9:f5:1a:6d:a3:
cc:e7:40:94:d5:d9:e5:b5:ad:35:9e:03:46:93:70:
ad:f6:e5:4d:d9:a8:07:c7:f1:b7:9f:eb:83:a4:79:
ba:08:82:6e:8b:55:e6:01:ad:5f:f1:93:4c:a1:85:
ff:f5:ea:31:38:7a:14:bd:a6:54:15:d4:3a:c3:32:
ef:b1:4f:7f:c2:55:b0:3a:7d:c6:5f:bf:89:56:c6:
ae:5e:b0:c9:9d:75:4e:8c:dc:f5:ac:66:45:a4:29:
9c:09:9b:02:5b:38:ec:5f:aa:e7:47:17:d7:3a:94:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:91:06:6B:60:30:CE:A1:9E:0D:80:48:B8:FB:01:12:44:AC:2F
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2b:d4:a1:fd:e8:f3:6c:96:e6:80:dd:b5:25:a7:3f:74:70:
a8:15:ef:d5:27:3a:8c:63:ed:c1:7b:84:58:79:64:d9:ad:6d:
a1:e6:47:e9:68:43:47:47:e6:e1:4d:dc:a7:e7:1c:04:0d:42:
76:68:35:e9:5c:88:a7:d2:4d:2e:00:38:d3:35:d2:d1:0d:28:
5c:84:03:64:4f:d2:9f:18:52:e3:5e:5d:21:04:35:33:43:52:
23:41:1a:64:79:09:3f:39:3b:73:ba:57:9e:4b:57:f3:c0:6c:
dc:b7:bb:b4:fb:50:18:2c:c0:65:7d:7b:4c:b4:62:39:6c:4b:
42:d9:83:86:79:e8:08:e6:6e:fe:45:34:36:ab:61:a5:cf:5f:
d3:6f:4e:57:4d:ee:dc:c1:c5:fa:d5:9a:04:b6:61:4f:d1:1b:
6c:3d:ad:9b:93:6a:f7:dc:2d:c8:2b:fe:97:02:c1:c6:f3:7a:
e8:08:16:f5:b2:fa:27:a1:f2:a6:61:5f:4b:37:7f:8a:97:7f:
14:ba:b2:81:d6:86:6d:a3:5b:0a:8d:f5:1e:96:e1:23:bd:f1:
4f:0f:e8:76:04:e1:6f:3f:0d:e8:98:d9:2b:a0:2c:f4:59:47:
12:ec:e9:40:08:c3:51:8a:d4:e0:d8:bb:dc:d7:cf:51:2d:4f:
05:04:b0:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZPaMb4T4FExoouPkkJLB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTViZGE4Y2U5ODdkN2U0YWFiMWMzNTUxNzhkY2EzM2Uz
YjhlYTQwHhcNMjUwNTA0MDMwMTE1WhcNMjUwNTA1MDMwMTE1WjAzMTEwLwYDVQQD
EygwZjUyOTEwNjZiNjAzMGNlYTE5ZTBkODA0OGI4ZmIwMTEyNDRhYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2AVrHVlox6P1kvC/DWvPjsvn6Ps
+xJmdmYLBpCFFpByj4DKx9TMe0WcyTVxFESqGbNKiiuKV+syE2wzIvhZ/3Db7+kM
ar4cPR2t46bHXsJx+WhCwtutc/efMpgqGrOOo9feDuJClkCyFPxkIuT4QYPCOViQ
EwqGt3SyDQEb0/iPvt/Z6DstTCLw6xOhkC/eyfUabaPM50CU1dnlta01ngNGk3Ct
9uVN2agHx/G3n+uDpHm6CIJui1XmAa1f8ZNMoYX/9eoxOHoUvaZUFdQ6wzLvsU9/
wlWwOn3GX7+JVsauXrDJnXVOjNz1rGZFpCmcCZsCWzjsX6rnRxfXOpSAvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9SkQZrYDDOoZ4NgEi4+wESRKwvMB8GA1UdIwQY
MBaAFF0VvajOmH1+SqscNVF43KM+O46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2Yt
YmJhM2M4Y2IwZjdhLzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xMjM5MjYtMTA0Zi00NmQxLWIzM2YtYmJhM2M4Y2IwZjdh
LzEvWFJXOXFNNllmWDVLcXh3MVVYamNvejQ3anFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMivUof3o
82yW5oDdtSWnP3RwqBXv1Sc6jGPtwXuEWHlk2a1toeZH6WhDR0fm4U3cp+ccBA1C
dmg16VyIp9JNLgA40zXS0Q0oXIQDZE/SnxhS415dIQQ1M0NSI0EaZHkJPzk7c7pX
nktX88Bs3Le7tPtQGCzAZX17TLRiOWxLQtmDhnnoCOZu/kU0Nqthpc9f029OV03u
3MHF+tWaBLZhT9EbbD2tm5Nq99wtyCv+lwLBxvN66AgW9bL6J6HypmFfSzd/ipd/
FLqygdaGbaNbCo31HpbhI73xTw/odgThbz8N6JjZK6As9FlHEuzpQAjDUYrU4Ni7
3NfPUS1PBQSwEg==
-----END CERTIFICATE-----
Generated at Sun May 4 11:03:04 2025 by rpki-client