Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: tc4nVrBcC6PbH6/GdDU+WWx8eYToN2OPE6T/+2XEKwI=
Subject key identifier: BE:90:67:E3:37:C2:D9:B9:49:4C:4D:FD:A1:BA:FF:63:05:E9:D0:78
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 01968090532E09F9EC2B6A04B42CCDBD1A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 04DF
Signing time: Tue 29 Apr 2025 08:01:04 +0000
Manifest this update: Tue 29 Apr 2025 08:01:04 +0000
Manifest next update: Wed 30 Apr 2025 08:01:04 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: UDKAnu6cyeqBdFMpieNcyg7sPiOTw9qv4uNYap5Yonc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:53:2e:09:f9:ec:2b:6a:04:b4:2c:cd:bd:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Apr 29 08:01:04 2025 GMT
Not After : Apr 30 08:01:04 2025 GMT
Subject: CN=be9067e337c2d9b9494c4dfda1baff6305e9d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:03:98:b6:05:4f:82:35:2a:2c:a7:92:b9:
84:b9:cf:b6:71:9e:11:48:ab:84:29:23:0b:f5:64:
2a:e5:7f:ae:06:ed:25:e8:04:39:d7:e7:52:45:8a:
06:3c:f4:78:08:de:8a:70:89:44:0f:a3:6a:22:f6:
00:46:a2:2d:8c:c1:e2:55:22:13:e6:e5:44:0e:03:
3c:f8:34:54:0a:ab:19:aa:05:18:fd:a5:b2:49:2d:
ee:54:b4:e4:80:46:b6:45:04:4d:c5:1b:c0:53:0b:
74:d2:4c:60:78:bb:d5:0e:97:84:a9:18:3c:3d:15:
7e:4d:de:31:8e:32:0f:f9:cb:08:c2:b5:2b:ad:5e:
36:5e:db:26:33:fd:2c:88:3c:e4:43:dc:9a:ad:6a:
cb:46:0c:d2:10:7c:67:1b:84:e1:5a:57:3a:70:72:
ad:db:1d:6b:c8:f1:03:52:e6:57:73:f6:74:37:89:
47:8d:ca:3a:b5:4e:86:f8:7d:6e:22:c0:1a:82:1c:
67:b6:68:c4:3e:29:d5:8b:38:45:63:d5:77:0b:f3:
6b:f2:f0:15:4c:e8:b3:09:a5:48:17:b8:1f:9f:31:
22:26:cc:f2:f1:f1:6d:e7:b5:6c:2e:e1:41:ba:55:
65:f3:fe:32:2e:16:23:39:90:b9:8f:82:d0:db:51:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:67:E3:37:C2:D9:B9:49:4C:4D:FD:A1:BA:FF:63:05:E9:D0:78
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3c:c6:08:97:e0:39:3b:22:1c:3f:82:8f:65:4e:06:50:4c:
68:1d:2d:7f:d3:16:c2:58:4e:8a:a5:31:e9:d4:3f:e5:fb:c8:
38:19:53:a2:4b:eb:ca:e5:08:b5:d8:de:9f:6c:ca:cf:97:16:
ee:e0:c0:06:0c:64:be:cf:ee:81:c0:ca:2a:6d:95:a8:39:58:
b5:8d:3f:3f:e3:d2:30:0f:8a:7b:72:5f:f6:2a:40:54:08:a9:
ad:45:fb:c5:43:73:fe:17:ae:dd:2a:6e:d3:fa:47:d1:90:cf:
65:e4:52:3c:34:3d:60:d0:65:82:70:1a:b6:75:17:27:52:9f:
83:f3:df:d3:3e:92:8b:c1:c4:ef:18:f1:4f:56:5c:e3:4e:99:
ad:a5:9b:77:0f:a7:01:d5:27:b9:5d:88:c6:c8:9b:a1:6d:f2:
3b:ff:ea:e5:ae:18:89:87:de:60:a7:5a:50:3c:6b:e0:8c:0f:
e1:24:03:3a:75:5d:e9:73:78:ce:3f:3b:8f:3c:26:64:c3:ab:
04:9d:31:7c:ae:ea:d8:94:cf:d5:6f:0f:fb:44:07:3c:d1:26:
0f:d6:04:87:ba:ce:b4:a6:b7:cb:6c:12:da:ac:3f:e8:f4:e2:
b6:8e:59:63:21:cd:ee:c0:b3:8f:5d:82:4a:01:58:be:e9:14:
15:b1:21:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAkFMuCfnsK2oEtCzNvRpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzY2NTNlODdiYjJlZjlhZGJiMDYxOTYwZTIwNTAwYTU1
NGYwMzUwHhcNMjUwNDI5MDgwMTA0WhcNMjUwNDMwMDgwMTA0WjAzMTEwLwYDVQQD
EyhiZTkwNjdlMzM3YzJkOWI5NDk0YzRkZmRhMWJhZmY2MzA1ZTlkMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7UDmLYFT4I1KiynkrmEuc+2cZ4R
SKuEKSML9WQq5X+uBu0l6AQ51+dSRYoGPPR4CN6KcIlED6NqIvYARqItjMHiVSIT
5uVEDgM8+DRUCqsZqgUY/aWySS3uVLTkgEa2RQRNxRvAUwt00kxgeLvVDpeEqRg8
PRV+Td4xjjIP+csIwrUrrV42XtsmM/0siDzkQ9yarWrLRgzSEHxnG4ThWlc6cHKt
2x1ryPEDUuZXc/Z0N4lHjco6tU6G+H1uIsAaghxntmjEPinVizhFY9V3C/Nr8vAV
TOizCaVIF7gfnzEiJszy8fFt57VsLuFBulVl8/4yLhYjOZC5j4LQ21GcrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6QZ+M3wtm5SUxN/aG6/2MF6dB4MB8GA1UdIwQY
MBaAFMbGZT6Huy75rbsGGWDiBQClVPA1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTkt
M2JiYTM2MjgzMjRiLzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTktM2JiYTM2MjgzMjRi
LzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzzGCJfg
OTsiHD+Cj2VOBlBMaB0tf9MWwlhOiqUx6dQ/5fvIOBlTokvryuUItdjen2zKz5cW
7uDABgxkvs/ugcDKKm2VqDlYtY0/P+PSMA+Ke3Jf9ipAVAiprUX7xUNz/heu3Spu
0/pH0ZDPZeRSPDQ9YNBlgnAatnUXJ1Kfg/Pf0z6Si8HE7xjxT1Zc406ZraWbdw+n
AdUnuV2IxsiboW3yO//q5a4YiYfeYKdaUDxr4IwP4SQDOnVd6XN4zj87jzwmZMOr
BJ0xfK7q2JTP1W8P+0QHPNEmD9YEh7rOtKa3y2wS2qw/6PTito5ZYyHN7sCzj12C
SgFYvukUFbEhDQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:12:58 2025 by rpki-client