Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: z+gyqI5BKTcaWLaEEWtWtDtk4PjcSvDxEhEBc6RqPoY=
Subject key identifier: 78:0B:D1:D2:B3:D7:75:FE:47:2A:4F:E7:99:66:2C:4B:A3:0A:40:4D
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 01969717AE01B523E4DEC76BE9B519C6F7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 10C5
Signing time: Sat 03 May 2025 17:00:33 +0000
Manifest this update: Sat 03 May 2025 17:00:33 +0000
Manifest next update: Sun 04 May 2025 17:00:33 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: XWKZ3q5/iPMjEB3QsEdPa8EOBvqRcd8ETjE7arpIEDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:17:ae:01:b5:23:e4:de:c7:6b:e9:b5:19:c6:f7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: May 3 17:00:33 2025 GMT
Not After : May 4 17:00:33 2025 GMT
Subject: CN=780bd1d2b3d775fe472a4fe799662c4ba30a404d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:e4:64:de:c1:ae:8d:71:ec:d3:51:6b:06:
97:fc:7a:3e:e6:3c:de:4a:99:46:94:ba:68:d8:49:
f6:5c:1f:9e:f3:fa:51:aa:01:6f:1c:8f:2b:09:3c:
46:e9:13:57:32:9f:74:c3:c5:e1:e7:67:60:b3:32:
3c:35:f2:de:ed:2b:59:10:74:a5:2a:43:34:31:5b:
62:b3:ce:e9:01:10:1c:d9:27:ed:73:64:28:b4:7d:
36:ba:4f:ef:66:77:2e:11:98:17:7d:3f:57:ea:b6:
ae:b6:1f:b2:18:2a:70:f4:12:8a:4d:fe:20:b6:65:
97:79:ac:42:77:47:ec:30:ce:70:40:27:c7:84:db:
2e:95:f9:07:29:2f:4c:81:c2:f1:27:eb:b2:ba:db:
49:1c:7a:c2:77:fa:c3:a9:84:45:e9:f6:b1:d5:5a:
1f:c7:c5:1c:b3:2f:9a:c0:11:65:c2:78:3a:4e:53:
90:41:a1:a5:c0:f6:0f:fc:96:79:b4:f0:c1:85:56:
34:09:73:2e:f1:65:6f:96:e8:37:b1:68:21:01:cb:
bd:1c:e7:f8:6a:75:4d:79:71:6a:8c:ca:da:dd:ad:
c6:70:45:d9:ac:83:82:df:fb:60:4e:f1:9f:4a:49:
af:08:a4:22:78:e1:62:d9:5c:7d:96:c9:ec:06:7d:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:D1:D2:B3:D7:75:FE:47:2A:4F:E7:99:66:2C:4B:A3:0A:40:4D
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1e:6d:de:45:56:09:f5:e4:81:ad:61:3a:99:da:7c:db:a6:
8f:21:4d:4f:03:9e:cb:1e:19:3d:bf:1b:08:57:5e:46:18:e6:
a9:0c:25:ce:97:ad:f8:98:e2:30:13:30:d8:bb:f8:b4:7a:5a:
c9:13:1a:63:38:d3:ee:e1:b0:94:03:7b:d7:fe:8d:38:90:7e:
f4:d8:63:2f:a1:94:a7:52:5c:18:86:b5:07:a9:71:01:4a:39:
68:7d:52:0e:5f:14:cc:4f:03:c4:bb:b8:4d:d2:99:5f:6f:2c:
89:72:58:1d:4d:fc:3d:7d:c5:48:3a:62:9b:5c:83:33:0f:9a:
09:18:a9:37:c3:b2:36:61:d6:9b:22:59:c2:ed:10:77:32:0e:
3c:c7:cd:7d:60:cf:ac:d6:e5:1c:5c:05:f2:e8:33:e6:19:57:
47:49:24:66:19:4a:b6:ee:1a:03:ff:b6:67:8a:ae:cb:2c:57:
28:70:2b:18:e6:30:d6:a3:2a:b4:e0:bf:cd:11:e1:08:09:1f:
33:bd:1c:58:6c:3f:d9:4f:b3:f0:a2:93:21:3e:ed:b2:fd:75:
6f:93:d3:7a:6f:18:10:2c:49:1f:58:dd:cb:4d:eb:a8:3e:9a:
bf:43:24:fe:60:d7:86:d9:d9:f1:85:75:2a:d6:df:01:60:b8:
c9:69:ba:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaXF64BtSPk3sdr6bUZxvf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjUwNTAzMTcwMDMzWhcNMjUwNTA0MTcwMDMzWjAzMTEwLwYDVQQD
Eyg3ODBiZDFkMmIzZDc3NWZlNDcyYTRmZTc5OTY2MmM0YmEzMGE0MDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvjkZN7Bro1x7NNRawaX/Ho+5jze
SplGlLpo2En2XB+e8/pRqgFvHI8rCTxG6RNXMp90w8Xh52dgszI8NfLe7StZEHSl
KkM0MVtis87pARAc2Sftc2QotH02uk/vZncuEZgXfT9X6rauth+yGCpw9BKKTf4g
tmWXeaxCd0fsMM5wQCfHhNsulfkHKS9MgcLxJ+uyuttJHHrCd/rDqYRF6fax1Vof
x8Ucsy+awBFlwng6TlOQQaGlwPYP/JZ5tPDBhVY0CXMu8WVvlug3sWghAcu9HOf4
anVNeXFqjMra3a3GcEXZrIOC3/tgTvGfSkmvCKQieOFi2Vx9lsnsBn1i+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgL0dKz13X+RypP55lmLEujCkBNMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx5t3kVW
CfXkga1hOpnafNumjyFNTwOeyx4ZPb8bCFdeRhjmqQwlzpet+JjiMBMw2Lv4tHpa
yRMaYzjT7uGwlAN71/6NOJB+9NhjL6GUp1JcGIa1B6lxAUo5aH1SDl8UzE8DxLu4
TdKZX28siXJYHU38PX3FSDpim1yDMw+aCRipN8OyNmHWmyJZwu0QdzIOPMfNfWDP
rNblHFwF8ugz5hlXR0kkZhlKtu4aA/+2Z4quyyxXKHArGOYw1qMqtOC/zRHhCAkf
M70cWGw/2U+z8KKTIT7tsv11b5PTem8YECxJH1jdy03rqD6av0Mk/mDXhtnZ8YV1
KtbfAWC4yWm6sA==
-----END CERTIFICATE-----
Generated at Sun May 4 02:22:02 2025 by rpki-client