Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: eeycIfefW7c83O3r5negwUlbPvxz3iKe+Z+TrAVFYv0=
Subject key identifier: 80:AD:E4:F5:8B:E8:B9:2D:70:BE:74:8F:76:CB:3D:F5:24:DA:19:B9
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 0196B559164506CF294E36EA1B28CD2FC4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 14C3
Signing time: Fri 09 May 2025 14:00:36 +0000
Manifest this update: Fri 09 May 2025 14:00:36 +0000
Manifest next update: Sat 10 May 2025 14:00:36 +0000
Files and hashes: 1: Bbxo5GOkMtBPV4eyDiJBtgGCAvs.roa (hash: gPTOZ/QwaGNzYqcGskaYm0Q9CUgsB/kmTCxE6lNVoV8=)
2: GkWtiMh4Kekgq83feCXLfv_pub8.roa (hash: UboiG7GPy5Vm4OyfuuuEVh7hhcZoHsmQQgbXPLJ/4ug=)
3: ScP8kW7fVZKKIlJqtoPhrGG1uQo.roa (hash: kBK8cN2i6ByxK8RJnTQxES9FzgvOd8FoOcnJVY/e4Bc=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: mfaUQB3rkg8kjJUZHxkos+sq6xjq5STO1/b8gAiZUTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:59:16:45:06:cf:29:4e:36:ea:1b:28:cd:2f:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: May 9 14:00:36 2025 GMT
Not After : May 10 14:00:36 2025 GMT
Subject: CN=80ade4f58be8b92d70be748f76cb3df524da19b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:4c:e1:1d:00:87:1e:c4:80:6d:98:79:a9:
07:be:68:68:a7:8c:04:26:bd:94:24:22:2a:92:98:
3d:33:4d:90:de:d1:69:0b:17:49:3d:5a:f3:94:9a:
83:b5:86:98:0c:28:0f:39:cd:4a:45:7f:e8:81:6d:
38:4e:d6:08:f2:f7:8e:42:e2:e4:7c:f0:d7:cb:0b:
3c:31:00:67:f3:6d:ce:66:3a:47:d0:13:87:2f:9c:
52:10:a5:db:2b:bc:91:e0:36:d9:a1:1b:06:49:31:
b7:a3:ae:83:6a:9c:e9:85:63:7f:08:59:d8:11:cd:
ac:4b:8e:a2:f9:ee:b6:79:39:f2:b2:5a:f9:e9:b9:
e0:5e:25:9d:60:3b:df:e3:c8:87:f9:d8:1e:f7:f0:
a0:a9:36:d6:8a:e0:82:ce:85:81:2b:00:c2:34:0c:
a8:de:00:66:fd:1a:32:fc:7b:6f:1c:88:01:48:9d:
03:a7:50:63:ae:3e:86:db:af:7a:d0:1a:8a:a8:e4:
7c:5c:df:e6:3e:ca:c0:a9:9a:49:4b:48:64:8a:d3:
65:0c:5c:c6:e8:31:4d:9c:2e:1f:26:b6:9d:2e:3f:
17:f7:f6:2a:6f:e8:1f:a3:c0:74:20:3d:4d:ee:8f:
b8:c8:89:d6:3e:24:dc:b6:b1:4b:3a:6f:22:8c:42:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:E4:F5:8B:E8:B9:2D:70:BE:74:8F:76:CB:3D:F5:24:DA:19:B9
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a2:e3:3d:91:0a:ae:ae:82:f6:96:0b:ba:f3:1a:98:9c:38:
57:62:92:8e:69:12:5f:71:fb:56:07:ac:17:74:5a:29:cf:8a:
1d:34:bd:80:ea:29:2d:a6:3b:23:2c:22:e7:82:e0:01:02:64:
db:07:e9:39:17:ed:0c:3d:f2:e3:c2:0c:08:8c:5f:d0:eb:d7:
7d:14:f8:a6:71:61:e3:fb:4e:3b:3a:c8:41:19:8d:0d:2e:cc:
bf:aa:ed:57:22:8d:b5:41:5c:6f:2a:20:39:27:20:d3:2a:08:
52:aa:48:90:ec:3d:84:40:5c:23:0a:c2:80:56:fb:09:f4:de:
1f:a3:6c:4e:e3:2f:ec:a8:9d:4f:21:08:47:03:94:f5:c7:e9:
78:5a:bd:b2:70:46:65:7c:13:af:71:97:ae:c3:70:97:f5:42:
17:21:e5:8f:15:4e:40:33:92:84:a1:33:54:1e:4c:54:53:e4:
bd:5c:91:dc:eb:9b:78:6b:27:19:f5:2d:05:92:f7:07:3f:16:
4a:e0:90:0a:09:b8:2e:15:c3:bb:16:ec:32:a0:d6:84:58:0d:
c8:e3:e0:a0:0a:d5:ad:64:6b:74:95:a8:93:69:63:cc:a5:45:
66:25:1b:d2:79:c1:a5:a5:56:5e:a2:a5:66:d7:63:19:fd:30:
d0:da:37:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1WRZFBs8pTjbqGyjNL8SqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTdjM2Y0YjE0NjkzNTEyMjAyNTk1YThhNGY5NWIwZDZi
N2ExMDEwHhcNMjUwNTA5MTQwMDM2WhcNMjUwNTEwMTQwMDM2WjAzMTEwLwYDVQQD
Eyg4MGFkZTRmNThiZThiOTJkNzBiZTc0OGY3NmNiM2RmNTI0ZGExOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIRM4R0Ahx7EgG2YeakHvmhop4wE
Jr2UJCIqkpg9M02Q3tFpCxdJPVrzlJqDtYaYDCgPOc1KRX/ogW04TtYI8veOQuLk
fPDXyws8MQBn823OZjpH0BOHL5xSEKXbK7yR4DbZoRsGSTG3o66DapzphWN/CFnY
Ec2sS46i+e62eTnyslr56bngXiWdYDvf48iH+dge9/CgqTbWiuCCzoWBKwDCNAyo
3gBm/Roy/HtvHIgBSJ0Dp1Bjrj6G26960BqKqOR8XN/mPsrAqZpJS0hkitNlDFzG
6DFNnC4fJradLj8X9/Yqb+gfo8B0ID1N7o+4yInWPiTctrFLOm8ijELdjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICt5PWL6LktcL50j3bLPfUk2hm5MB8GA1UdIwQY
MBaAFMWnw/SxRpNRIgJZWopPlbDWt6EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgt
ZDEyZjFlMjQ1NmJhLzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgtZDEyZjFlMjQ1NmJh
LzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx6LjPZEK
rq6C9pYLuvMamJw4V2KSjmkSX3H7VgesF3RaKc+KHTS9gOopLaY7Iywi54LgAQJk
2wfpORftDD3y48IMCIxf0OvXfRT4pnFh4/tOOzrIQRmNDS7Mv6rtVyKNtUFcbyog
OScg0yoIUqpIkOw9hEBcIwrCgFb7CfTeH6NsTuMv7KidTyEIRwOU9cfpeFq9snBG
ZXwTr3GXrsNwl/VCFyHljxVOQDOShKEzVB5MVFPkvVyR3OubeGsnGfUtBZL3Bz8W
SuCQCgm4LhXDuxbsMqDWhFgNyOPgoArVrWRrdJWok2ljzKVFZiUb0nnBpaVWXqKl
ZtdjGf0w0No33w==
-----END CERTIFICATE-----
Generated at Fri May 9 22:04:05 2025 by rpki-client