Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: F7ofwSPZODPOyy0E99yEq4BViOqs7F0HEUXDYGBn6Kc=
Subject key identifier: C3:8C:0A:68:9A:FE:4C:1C:1C:14:15:CE:DB:8B:3A:92:4B:2F:1E:62
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 0196BD128D64AF62788D5CBA3205B0814BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 0E59
Signing time: Sun 11 May 2025 02:00:31 +0000
Manifest this update: Sun 11 May 2025 02:00:31 +0000
Manifest next update: Mon 12 May 2025 02:00:31 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: svOFx1m7TQIkj1H8KapigiUBJNWftq3+626++v+mIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:8d:64:af:62:78:8d:5c:ba:32:05:b0:81:4b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: May 11 02:00:31 2025 GMT
Not After : May 12 02:00:31 2025 GMT
Subject: CN=c38c0a689afe4c1c1c1415cedb8b3a924b2f1e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:a5:b8:e0:66:93:b2:f5:2b:97:aa:f8:9d:
95:00:58:db:8c:e1:a6:5a:e5:34:68:0d:0e:3a:b4:
d1:9d:fe:e6:21:06:2a:d2:21:4c:14:f9:40:6c:9a:
6e:11:5e:48:a6:b0:c8:91:b4:4d:b1:70:66:4b:8a:
68:e7:a4:c3:f7:11:ce:9d:37:c2:d6:9f:ce:aa:0b:
63:64:b4:0b:64:09:9c:bb:a8:6b:00:e8:99:e4:bc:
58:e9:e2:d8:3e:50:6c:da:7e:ea:44:e7:40:a8:30:
32:39:b4:08:eb:7f:5b:07:da:22:cb:aa:ce:79:db:
21:1c:de:0b:eb:ca:44:ea:c6:3d:a9:aa:ae:86:4f:
32:0c:1c:bd:59:41:a7:ae:e2:59:04:38:e5:da:46:
64:03:3b:da:0e:f8:2c:b9:5b:4e:a2:c1:99:a8:68:
9c:a9:5b:7b:d0:aa:6d:48:8b:a5:1b:7c:7d:34:44:
f3:f6:c8:1f:5c:3f:15:bc:3a:01:16:f6:b5:94:18:
fb:49:d9:68:51:b4:dd:5b:5a:b7:26:64:b9:84:25:
12:c9:9f:23:38:aa:90:02:9c:28:fb:f4:ba:82:48:
2e:6d:11:65:04:00:74:0e:5e:b0:12:eb:db:ca:cf:
9e:e3:36:72:b9:c8:98:54:fe:96:8c:31:ee:91:bd:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8C:0A:68:9A:FE:4C:1C:1C:14:15:CE:DB:8B:3A:92:4B:2F:1E:62
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0b:8c:2e:b4:3b:1b:44:3d:ba:43:c8:35:e7:fc:2c:a3:ee:
64:21:cb:89:ac:10:ad:18:b4:fb:96:14:b5:21:52:07:9b:d0:
94:2b:7c:fc:fa:18:d2:73:82:c4:64:fc:9f:8d:e0:c3:6a:53:
5b:47:2e:c9:aa:3f:cc:8b:2e:71:e2:ab:66:8d:8f:3b:89:58:
cf:66:b4:09:47:a8:c9:d6:0b:fa:d5:21:9c:f7:c4:aa:f1:85:
c8:52:f4:65:6c:ce:98:a7:da:06:b0:62:07:da:0f:0f:f9:1a:
67:4f:29:13:37:5f:9c:71:47:07:e6:09:b4:fe:fd:30:97:87:
f7:d1:00:59:ff:65:37:36:3d:3c:bc:8a:c2:fc:5a:7c:8e:2b:
a5:ce:6a:40:35:a1:ba:87:9d:78:63:49:c9:f9:40:06:eb:f8:
3f:b6:47:16:db:da:c6:df:f8:9b:0d:c8:a4:32:4e:c8:e0:ad:
13:c9:7c:30:f2:86:01:16:7e:6d:04:0a:b6:d7:1f:98:22:f4:
20:20:26:be:a9:b4:46:03:e6:7f:8f:13:4f:cb:40:06:20:7e:
f8:84:11:cf:0f:a9:83:eb:2f:8d:46:33:39:30:d2:c4:85:25:
e2:8d:b9:3c:f1:35:ab:e6:5f:e7:16:32:56:ed:83:3f:7c:8f:
7b:ae:25:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9Eo1kr2J4jVy6MgWwgUvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWVlZTI0ZGVhYjU1MjAxMTliNmEzZGEwNDU3ZDM5YzQw
NjQxZGIwHhcNMjUwNTExMDIwMDMxWhcNMjUwNTEyMDIwMDMxWjAzMTEwLwYDVQQD
EyhjMzhjMGE2ODlhZmU0YzFjMWMxNDE1Y2VkYjhiM2E5MjRiMmYxZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY+luOBmk7L1K5eq+J2VAFjbjOGm
WuU0aA0OOrTRnf7mIQYq0iFMFPlAbJpuEV5IprDIkbRNsXBmS4po56TD9xHOnTfC
1p/OqgtjZLQLZAmcu6hrAOiZ5LxY6eLYPlBs2n7qROdAqDAyObQI639bB9oiy6rO
edshHN4L68pE6sY9qaquhk8yDBy9WUGnruJZBDjl2kZkAzvaDvgsuVtOosGZqGic
qVt70KptSIulG3x9NETz9sgfXD8VvDoBFva1lBj7SdloUbTdW1q3JmS5hCUSyZ8j
OKqQApwo+/S6gkgubRFlBAB0Dl6wEuvbys+e4zZyuciYVP6WjDHukb0C2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOMCmia/kwcHBQVztuLOpJLLx5iMB8GA1UdIwQY
MBaAFMSe7iTeq1UgEZtqPaBFfTnEBkHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQt
NTljNGMxMGFlYmQ5LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQtNTljNGMxMGFlYmQ5
LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQuMLrQ7
G0Q9ukPINef8LKPuZCHLiawQrRi0+5YUtSFSB5vQlCt8/PoY0nOCxGT8n43gw2pT
W0cuyao/zIsuceKrZo2PO4lYz2a0CUeoydYL+tUhnPfEqvGFyFL0ZWzOmKfaBrBi
B9oPD/kaZ08pEzdfnHFHB+YJtP79MJeH99EAWf9lNzY9PLyKwvxafI4rpc5qQDWh
uoedeGNJyflABuv4P7ZHFtvaxt/4mw3IpDJOyOCtE8l8MPKGARZ+bQQKttcfmCL0
ICAmvqm0RgPmf48TT8tABiB++IQRzw+pg+svjUYzOTDSxIUl4o25PPE1q+Zf5xYy
Vu2DP3yPe64lbQ==
-----END CERTIFICATE-----
Generated at Sun May 11 09:36:07 2025 by rpki-client