Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: /1psuWBo2drk85obAVUrIZrRu9erS1jkJpS0OdWIlPA=
Subject key identifier: E8:12:0A:74:82:51:32:D5:E4:F4:B5:77:79:1E:73:EA:C9:57:A4:0B
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 01967D20CB057AB8224648208A03269E8263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 16:00:23 +0000
Manifest this update: Mon 28 Apr 2025 16:00:23 +0000
Manifest next update: Tue 29 Apr 2025 16:00:23 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: t+1SaSJanIm0ZImEDfC5Ka0R6/IwN21Iq3MLVftoo9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:cb:05:7a:b8:22:46:48:20:8a:03:26:9e:82:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Apr 28 16:00:23 2025 GMT
Not After : Apr 29 16:00:23 2025 GMT
Subject: CN=e8120a74825132d5e4f4b577791e73eac957a40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:f8:41:ab:02:0e:16:45:a0:b3:46:7d:cc:
7d:c3:9e:08:8c:1a:c4:61:ef:d3:61:56:b5:e5:b9:
96:59:3e:8d:7e:9d:93:dc:76:82:f3:45:d3:9b:28:
cc:b4:d4:ac:09:c3:f0:61:3d:ec:7f:02:59:b3:c8:
a0:81:27:1d:9f:e5:18:ac:92:3a:62:2c:02:b7:92:
93:36:0e:04:73:39:b8:14:8a:5b:09:4f:79:cf:17:
bf:c3:14:f8:f0:45:35:ae:3b:21:e3:59:aa:15:46:
25:70:ad:74:8c:6a:6f:d2:5a:1a:96:d3:4e:da:fb:
2d:29:51:f0:ab:ea:d3:c7:c7:30:73:f0:17:92:a2:
05:1c:74:4c:88:a9:b2:25:05:fd:2c:fd:c6:5f:ae:
2f:a3:03:dc:d2:13:ad:67:14:28:f6:ca:ff:ef:26:
da:2a:24:41:ff:dc:d8:c2:a6:10:93:03:08:33:52:
41:45:56:31:aa:40:64:18:b7:1a:02:d7:c4:c4:60:
da:f7:be:60:a0:0b:11:af:f0:69:b6:2e:f9:67:f0:
a4:29:bc:fd:0b:7b:4c:ab:ba:a0:dd:00:88:a4:a2:
c4:2c:65:e1:80:1a:e0:ff:cf:b2:43:48:6b:67:86:
ef:bc:b4:ef:82:96:e4:79:8d:eb:3f:fd:ea:83:89:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:0A:74:82:51:32:D5:E4:F4:B5:77:79:1E:73:EA:C9:57:A4:0B
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2c:be:21:b3:64:c8:05:80:31:16:fa:cf:fd:30:3b:5a:75:
83:ee:f7:f3:64:a9:ed:ec:ac:d0:43:bb:58:dd:18:0a:ef:51:
e8:72:17:3a:e0:1d:7a:ae:f7:13:ae:0c:2b:83:d2:5b:95:c5:
6e:30:05:0b:a5:da:18:ab:32:9d:7b:e6:e4:c8:54:44:17:21:
dc:66:3e:62:8d:6d:85:d0:cc:93:ba:95:bd:dc:13:43:be:3b:
76:ec:27:e3:4a:6d:67:2f:4d:fb:a1:c5:61:ab:1b:95:fd:0e:
90:4c:b6:4b:35:5e:21:32:49:8a:ce:e4:d8:5e:77:60:53:e3:
45:d7:4f:c4:e1:af:1c:df:6a:33:cc:03:2e:dd:ad:41:03:d5:
21:0f:70:66:e9:d9:e7:c5:57:1a:4f:b3:e9:5b:32:55:0c:d5:
0f:a9:48:59:f5:81:33:8c:93:64:e9:45:27:c6:48:9d:4b:d0:
b6:d4:cb:66:52:a0:2a:f5:41:6b:36:e9:f5:16:c2:3e:f0:21:
32:d8:9c:83:7e:79:9c:30:41:17:82:5c:99:1f:1d:f8:09:16:
68:97:a2:c2:3d:cd:69:73:55:63:36:c5:ea:d8:c2:c9:fd:92:
2d:bd:d5:20:1a:e6:96:ff:2d:6b:89:46:a5:73:38:3a:a6:7d:
75:01:52:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IMsFergiRkggigMmnoJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2NlYjljOTMxY2IxNzk1ZTIyN2FlMmM4NjQ3NTUxM2Fl
NDkxNWMwHhcNMjUwNDI4MTYwMDIzWhcNMjUwNDI5MTYwMDIzWjAzMTEwLwYDVQQD
EyhlODEyMGE3NDgyNTEzMmQ1ZTRmNGI1Nzc3OTFlNzNlYWM5NTdhNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21f4QasCDhZFoLNGfcx9w54IjBrE
Ye/TYVa15bmWWT6Nfp2T3HaC80XTmyjMtNSsCcPwYT3sfwJZs8iggScdn+UYrJI6
YiwCt5KTNg4Eczm4FIpbCU95zxe/wxT48EU1rjsh41mqFUYlcK10jGpv0loaltNO
2vstKVHwq+rTx8cwc/AXkqIFHHRMiKmyJQX9LP3GX64vowPc0hOtZxQo9sr/7yba
KiRB/9zYwqYQkwMIM1JBRVYxqkBkGLcaAtfExGDa975goAsRr/Bpti75Z/CkKbz9
C3tMq7qg3QCIpKLELGXhgBrg/8+yQ0hrZ4bvvLTvgpbkeY3rP/3qg4kC1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgSCnSCUTLV5PS1d3kec+rJV6QLMB8GA1UdIwQY
MBaAFF5865yTHLF5XiJ64shkdVE65JFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYt
MjQyMmFiZjM0MmFjLzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYtMjQyMmFiZjM0MmFj
LzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSy+IbNk
yAWAMRb6z/0wO1p1g+7382Sp7eys0EO7WN0YCu9R6HIXOuAdeq73E64MK4PSW5XF
bjAFC6XaGKsynXvm5MhURBch3GY+Yo1thdDMk7qVvdwTQ747duwn40ptZy9N+6HF
Yasblf0OkEy2SzVeITJJis7k2F53YFPjRddPxOGvHN9qM8wDLt2tQQPVIQ9wZunZ
58VXGk+z6VsyVQzVD6lIWfWBM4yTZOlFJ8ZInUvQttTLZlKgKvVBazbp9RbCPvAh
Mticg355nDBBF4JcmR8d+AkWaJeiwj3NaXNVYzbF6tjCyf2SLb3VIBrmlv8ta4lG
pXM4OqZ9dQFSkA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:34:03 2025 by rpki-client