Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: /r6K09vGJYzDyI1VP+GZ8M442emWrzD3CQSdZ7v0E3M=
Subject key identifier: 8C:01:6B:B3:3F:28:E1:55:B6:10:FC:E8:C4:B3:B4:FB:94:FC:EB:14
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 0196AC8D4810E1B0B46D4FC16317008935AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0444
Signing time: Wed 07 May 2025 21:01:02 +0000
Manifest this update: Wed 07 May 2025 21:01:02 +0000
Manifest next update: Thu 08 May 2025 21:01:02 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: QR54UM/uCg351CSjIGMgk87Sri0k2xRtk5YJ8zvNWfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:48:10:e1:b0:b4:6d:4f:c1:63:17:00:89:35:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: May 7 21:01:02 2025 GMT
Not After : May 8 21:01:02 2025 GMT
Subject: CN=8c016bb33f28e155b610fce8c4b3b4fb94fceb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:8f:3a:74:f4:05:09:8f:e3:7d:a3:8e:73:
c7:4e:60:af:e1:8a:73:05:e9:0a:58:f7:a1:a6:11:
8a:66:f3:15:9e:96:c4:4b:73:ad:93:21:eb:36:5d:
57:69:37:95:c3:78:2c:bf:22:08:4d:d9:e5:78:08:
93:3b:0a:ea:bc:37:29:3e:ce:ad:7a:19:93:fc:2a:
a7:4d:a9:7d:67:de:b3:68:8b:8d:5e:b0:f4:58:cc:
9c:96:c0:44:0a:b6:07:9d:5e:1c:63:48:f2:af:09:
58:3d:b8:7d:21:88:e7:28:f2:a0:4a:d9:63:68:03:
b4:0e:68:79:f7:18:d0:4d:ea:31:12:20:3f:3b:d6:
0b:87:1c:f2:bc:b5:ad:6e:bf:57:3e:83:e7:ca:68:
a0:3b:9c:00:ba:3d:d6:53:db:5a:c4:99:c8:33:2a:
6f:44:5d:3a:41:d0:2b:eb:c3:62:55:d8:6f:14:f7:
99:b8:10:1f:f3:3e:a7:e6:0a:34:bd:d2:b6:4c:e3:
c6:d7:99:dd:7d:0e:d8:54:39:e1:c5:c7:21:d3:08:
8d:ff:10:f8:ff:24:20:f5:52:de:85:36:ec:0c:3d:
e1:06:3e:6b:dc:f6:4a:7f:7d:25:5b:10:f7:76:0e:
b2:55:2a:be:85:ab:51:5b:e9:68:5f:81:a1:63:0d:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:6B:B3:3F:28:E1:55:B6:10:FC:E8:C4:B3:B4:FB:94:FC:EB:14
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:db:a4:68:6e:f8:08:79:db:a5:27:1b:57:93:22:18:e1:b5:
13:29:94:34:12:22:46:22:d5:de:cf:d4:2a:56:07:fe:89:7a:
17:dc:1f:84:8a:76:18:8e:a0:78:e1:a5:60:39:97:b6:25:c9:
3e:5b:9f:1c:f5:fc:a3:0d:ba:e2:90:03:95:33:2a:c0:64:5d:
c6:18:c6:28:2d:03:4e:3f:bc:64:d0:86:e8:02:37:8b:e2:be:
6c:a3:4c:73:58:e9:61:dd:4b:a9:0c:7a:22:0c:ea:10:0f:82:
e1:17:8d:1b:b6:01:06:51:7f:28:18:0c:c6:b1:22:00:f5:04:
66:31:97:a3:76:5b:cc:ed:da:2d:2f:42:84:d3:0e:6a:25:47:
82:e8:db:97:1b:2c:d8:9c:47:ca:88:b3:5b:4e:50:d9:ae:5f:
cc:8f:13:ff:6a:28:76:26:c5:b7:b7:77:96:b8:eb:e5:4d:f6:
43:6e:a7:76:69:ed:66:c3:f2:75:ff:73:57:a1:a6:61:ea:1e:
c2:63:e5:b7:b6:9f:a3:86:52:2f:67:b2:58:1c:e9:99:60:6a:
5a:2e:a5:b7:7e:7b:2b:f0:eb:bf:e3:1b:2a:76:72:30:83:c8:
c6:d1:bf:b7:f4:13:61:63:d9:98:1d:89:a8:61:74:17:4c:93:
40:ad:e7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasjUgQ4bC0bU/BYxcAiTWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzRiM2FlNTlkOTgxZjI1MGNjODdkYWI1OTc4NTRhYmVk
N2EzMDAwHhcNMjUwNTA3MjEwMTAyWhcNMjUwNTA4MjEwMTAyWjAzMTEwLwYDVQQD
Eyg4YzAxNmJiMzNmMjhlMTU1YjYxMGZjZThjNGIzYjRmYjk0ZmNlYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzOPOnT0BQmP432jjnPHTmCv4Ypz
BekKWPehphGKZvMVnpbES3OtkyHrNl1XaTeVw3gsvyIITdnleAiTOwrqvDcpPs6t
ehmT/CqnTal9Z96zaIuNXrD0WMyclsBECrYHnV4cY0jyrwlYPbh9IYjnKPKgStlj
aAO0Dmh59xjQTeoxEiA/O9YLhxzyvLWtbr9XPoPnymigO5wAuj3WU9taxJnIMypv
RF06QdAr68NiVdhvFPeZuBAf8z6n5go0vdK2TOPG15ndfQ7YVDnhxcch0wiN/xD4
/yQg9VLehTbsDD3hBj5r3PZKf30lWxD3dg6yVSq+hatRW+loX4GhYw0mHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwBa7M/KOFVthD86MSztPuU/OsUMB8GA1UdIwQY
MBaAFMXEs65Z2YHyUMyH2rWXhUq+16MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYt
ZWRkZjUyN2U4ZjJkLzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYtZWRkZjUyN2U4ZjJk
LzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvtukaG74
CHnbpScbV5MiGOG1EymUNBIiRiLV3s/UKlYH/ol6F9wfhIp2GI6geOGlYDmXtiXJ
PlufHPX8ow264pADlTMqwGRdxhjGKC0DTj+8ZNCG6AI3i+K+bKNMc1jpYd1LqQx6
IgzqEA+C4ReNG7YBBlF/KBgMxrEiAPUEZjGXo3ZbzO3aLS9ChNMOaiVHgujblxss
2JxHyoizW05Q2a5fzI8T/2oodibFt7d3lrjr5U32Q26ndmntZsPydf9zV6GmYeoe
wmPlt7afo4ZSL2eyWBzpmWBqWi6lt357K/Drv+MbKnZyMIPIxtG/t/QTYWPZmB2J
qGF0F0yTQK3n8Q==
-----END CERTIFICATE-----
Generated at Thu May 8 00:39:28 2025 by rpki-client