Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File: sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier: iBLUWQtKZUb0pjQSThktlI1Y3gz1gpYWSOOnNV7fLWI=
Subject key identifier: CF:9E:2F:69:82:C4:1A:E5:90:0D:E6:8A:A7:9A:BE:46:B1:48:37:0E
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer: /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial: 0196A1D2DB0AA0C2993C300DAE04D5D41071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number: 06DA
Signing time: Mon 05 May 2025 19:01:12 +0000
Manifest this update: Mon 05 May 2025 19:01:12 +0000
Manifest next update: Tue 06 May 2025 19:01:12 +0000
Files and hashes: 1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: gTNr1D7l2HR7wkkEYiX1i8+Op1ZNG0Nni7idYacpfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:db:0a:a0:c2:99:3c:30:0d:ae:04:d5:d4:10:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Validity
Not Before: May 5 19:01:12 2025 GMT
Not After : May 6 19:01:12 2025 GMT
Subject: CN=cf9e2f6982c41ae5900de68aa79abe46b148370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:57:6e:fc:9b:8e:e1:d8:f8:ca:98:07:bd:
93:47:37:3d:6f:75:17:f9:5f:df:e8:da:3f:4b:9e:
39:a4:de:9a:b1:89:b1:f3:a0:98:cd:1c:e0:73:f3:
f6:4f:c5:89:5f:62:6f:b1:ea:4f:81:56:69:8a:6b:
e4:29:d7:92:b8:fe:9e:c5:f4:4e:16:36:5e:e8:c7:
31:a1:9a:f6:f8:8d:c0:46:b4:39:d1:34:d3:19:46:
c8:9c:4d:f7:f9:eb:ea:c7:3f:78:15:cc:b7:78:30:
73:56:e9:85:c8:7d:e9:d2:9d:5f:91:14:b1:e0:95:
79:ac:58:4f:e9:ec:a4:ef:37:a6:f8:43:e6:86:40:
85:0e:cb:d5:b2:94:5f:66:73:aa:cb:3f:b6:0d:0e:
50:1e:ad:28:cd:24:b3:11:3e:26:a8:b4:74:8a:06:
5e:ba:f1:ec:db:81:54:e1:fc:d2:87:14:62:f9:c4:
4f:3f:54:ec:36:97:d0:ab:b2:6d:fd:47:3e:50:61:
ad:80:6b:ac:32:3a:26:86:c6:38:0c:32:4a:15:b2:
94:2b:36:26:50:33:c9:f2:d7:90:28:40:c9:50:23:
8a:26:67:4f:df:92:fa:26:f8:13:3c:ad:1c:34:33:
17:d6:39:ef:30:4e:c6:e6:55:19:13:cb:5d:e8:e3:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9E:2F:69:82:C4:1A:E5:90:0D:E6:8A:A7:9A:BE:46:B1:48:37:0E
X509v3 Authority Key Identifier:
keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:e6:3b:04:5f:d2:91:07:4f:32:68:09:3b:47:0a:01:55:
b0:53:22:c8:76:62:30:aa:79:45:6f:3d:31:bd:3a:b9:d7:27:
67:04:62:ef:1b:ff:98:fb:b4:6f:3e:e2:92:88:6f:0c:ce:a1:
65:74:3d:ff:8d:04:64:e3:e1:b1:ca:7a:e9:02:83:50:00:2b:
33:9d:c2:9a:02:63:19:c3:96:82:7f:96:1c:43:8c:16:5d:19:
15:fd:de:94:9b:5f:4a:35:3b:e7:f0:f3:b6:d6:db:b8:13:c6:
e4:ac:52:9f:2b:20:2e:51:c1:f1:39:90:a3:93:45:82:2c:cd:
95:b6:63:ad:65:2c:36:d8:cf:63:72:ac:3e:bd:83:d9:ce:ca:
e0:93:72:6d:04:2b:b5:e5:a2:a0:37:3e:74:ea:77:f1:48:2e:
a2:cf:a1:aa:51:e6:58:0c:60:1c:52:8e:57:15:28:25:87:d1:
82:0b:de:68:e9:3b:7c:10:51:2d:75:29:0c:0e:b8:89:71:76:
5c:c0:f2:c0:5e:c8:64:31:43:b7:1b:7f:2d:80:fa:7c:77:29:
77:e6:49:ea:d6:21:83:82:7b:f9:fb:03:ba:e0:56:4a:e0:7b:
86:08:97:16:e4:bb:ec:1e:ca:55:96:1e:df:ea:68:90:f4:a9:
39:e7:25:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0tsKoMKZPDANrgTV1BBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWMwZDQ4NjQ2MGI3MTYzNzAzZTVmZjRkOGFkZWQ5Nzg4
OGM3NGQwHhcNMjUwNTA1MTkwMTEyWhcNMjUwNTA2MTkwMTEyWjAzMTEwLwYDVQQD
EyhjZjllMmY2OTgyYzQxYWU1OTAwZGU2OGFhNzlhYmU0NmIxNDgzNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv25XbvybjuHY+MqYB72TRzc9b3UX
+V/f6No/S545pN6asYmx86CYzRzgc/P2T8WJX2JvsepPgVZpimvkKdeSuP6exfRO
FjZe6McxoZr2+I3ARrQ50TTTGUbInE33+evqxz94Fcy3eDBzVumFyH3p0p1fkRSx
4JV5rFhP6eyk7zem+EPmhkCFDsvVspRfZnOqyz+2DQ5QHq0ozSSzET4mqLR0igZe
uvHs24FU4fzShxRi+cRPP1TsNpfQq7Jt/Uc+UGGtgGusMjomhsY4DDJKFbKUKzYm
UDPJ8teQKEDJUCOKJmdP35L6JvgTPK0cNDMX1jnvME7G5lUZE8td6OM+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+eL2mCxBrlkA3miqeavkaxSDcOMB8GA1UdIwQY
MBaAFLMcDUhkYLcWNwPl/02K3tl4iMdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOTQ0MWMtMjgxYy00ZTAyLTlhOTEt
ODI0M2I3ZGIxMDVlLzEvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOTQ0MWMtMjgxYy00ZTAyLTlhOTEtODI0M2I3ZGIxMDVl
LzEvc3h3TlNHUmd0eFkzQS1YX1RZcmUyWGlJeDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRzmOwRf
0pEHTzJoCTtHCgFVsFMiyHZiMKp5RW89Mb06udcnZwRi7xv/mPu0bz7ikohvDM6h
ZXQ9/40EZOPhscp66QKDUAArM53CmgJjGcOWgn+WHEOMFl0ZFf3elJtfSjU75/Dz
ttbbuBPG5KxSnysgLlHB8TmQo5NFgizNlbZjrWUsNtjPY3KsPr2D2c7K4JNybQQr
teWioDc+dOp38Uguos+hqlHmWAxgHFKOVxUoJYfRggveaOk7fBBRLXUpDA64iXF2
XMDywF7IZDFDtxt/LYD6fHcpd+ZJ6tYhg4J7+fsDuuBWSuB7hgiXFuS77B7KVZYe
3+pokPSpOeclYA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:39:32 2025 by rpki-client