Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: mWDQ3SFt14um3mJzqKTdiclFcFxRc6Mn02AW99pRyjg=
Subject key identifier: 90:30:69:13:BA:84:1A:26:85:15:90:3E:C5:1B:A4:79:10:3A:A5:2F
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 0196C83AF7A4CD373D5C40E9BCE45DDB9A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1536
Signing time: Tue 13 May 2025 06:00:29 +0000
Manifest this update: Tue 13 May 2025 06:00:29 +0000
Manifest next update: Wed 14 May 2025 06:00:29 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: LNQZafZuzfkrqOTVLJHLgPLi6UD5ncWGqGPk7SasqJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:f7:a4:cd:37:3d:5c:40:e9:bc:e4:5d:db:9a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: May 13 06:00:29 2025 GMT
Not After : May 14 06:00:29 2025 GMT
Subject: CN=90306913ba841a268515903ec51ba479103aa52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:af:78:4a:14:95:a2:fb:78:de:5a:3a:e0:
75:28:5f:eb:55:b6:0a:42:dd:c8:4f:07:fc:e7:d0:
3c:3e:92:6b:0b:01:c0:08:3c:ec:ac:af:23:97:d5:
36:55:7a:26:fb:57:94:65:31:35:16:2a:ea:87:09:
0d:94:dd:cc:a6:85:c1:91:45:d5:d4:5c:27:89:7d:
17:4c:36:d0:79:c1:05:e1:7d:de:dd:8e:4c:45:03:
27:25:5b:b2:f8:cc:87:ee:22:c9:97:37:1d:f3:3f:
66:b8:26:35:6e:73:f3:90:ce:40:9e:cf:82:6a:41:
b9:93:6c:83:e0:b0:c4:f7:48:1d:05:c1:c0:3f:71:
48:0d:59:40:f5:55:0e:29:8a:6b:f2:00:15:d1:ee:
1e:92:3c:be:9a:e4:21:84:b7:be:13:7a:b7:e0:0b:
67:de:3b:b8:f3:61:d6:82:bc:28:ff:2f:eb:86:7e:
fd:8a:cd:7f:eb:09:81:ae:01:46:5a:e3:c9:2a:8d:
dc:55:f7:2d:18:61:7c:80:3c:a6:0a:b3:49:e1:dc:
5f:f5:35:08:04:43:9e:7c:1c:42:0a:58:00:d4:06:
a7:58:53:f0:66:58:e0:23:7d:ac:eb:75:69:dd:02:
b8:51:55:41:2c:86:f7:66:bb:ea:ae:72:05:89:95:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:69:13:BA:84:1A:26:85:15:90:3E:C5:1B:A4:79:10:3A:A5:2F
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5d:e3:87:ff:b1:21:10:ff:f6:ee:de:17:ed:6c:61:b4:6e:
76:61:cc:d2:73:e0:70:29:1c:86:5e:28:c4:d8:ea:5f:28:4f:
d6:f5:ff:b1:04:e8:fc:4a:39:ef:f6:19:b6:5b:14:6e:e0:62:
cd:a8:54:6e:0e:8b:f6:1c:b0:b0:be:5c:ca:22:c2:62:2b:41:
23:e2:1e:25:9b:9c:6b:1b:1c:e1:f9:01:c7:ae:55:16:69:6d:
31:3a:8e:6f:19:0b:38:b4:85:03:91:3c:1d:cd:85:35:eb:01:
7c:10:0e:68:f5:63:4b:95:a0:ac:37:10:64:ec:6b:26:b0:66:
a8:f0:bf:3b:51:44:cd:63:2d:b9:57:a6:f0:56:f4:82:7f:8b:
cb:ae:24:05:de:0e:6d:13:07:01:9d:8b:74:09:61:bb:c7:e9:
ca:ca:55:8b:72:bc:c5:a3:b6:b2:92:ad:2f:0f:4e:c6:6b:a1:
c4:ff:8e:9a:60:cd:0a:02:2f:a3:9e:1a:f5:98:61:e0:bd:05:
aa:47:e3:12:b4:76:eb:4a:67:29:67:ca:ab:69:d0:28:01:d0:
80:23:c1:00:cf:2d:27:f2:90:e7:0d:bd:08:15:80:6c:8a:eb:
3e:c6:7d:b0:dd:c0:f6:84:3c:3f:36:81:2f:ca:07:ee:54:bf:
36:2a:5e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIOvekzTc9XEDpvORd25oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MWIzZDYyOGE2Mjk2OTFlYmE5MmE3Mzg0M2VkNDUzZjcy
ODdhMzcwHhcNMjUwNTEzMDYwMDI5WhcNMjUwNTE0MDYwMDI5WjAzMTEwLwYDVQQD
Eyg5MDMwNjkxM2JhODQxYTI2ODUxNTkwM2VjNTFiYTQ3OTEwM2FhNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWyveEoUlaL7eN5aOuB1KF/rVbYK
Qt3ITwf859A8PpJrCwHACDzsrK8jl9U2VXom+1eUZTE1FirqhwkNlN3MpoXBkUXV
1FwniX0XTDbQecEF4X3e3Y5MRQMnJVuy+MyH7iLJlzcd8z9muCY1bnPzkM5Ans+C
akG5k2yD4LDE90gdBcHAP3FIDVlA9VUOKYpr8gAV0e4ekjy+muQhhLe+E3q34Atn
3ju482HWgrwo/y/rhn79is1/6wmBrgFGWuPJKo3cVfctGGF8gDymCrNJ4dxf9TUI
BEOefBxCClgA1AanWFPwZljgI32s63Vp3QK4UVVBLIb3ZrvqrnIFiZUFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAwaRO6hBomhRWQPsUbpHkQOqUvMB8GA1UdIwQY
MBaAFMYbPWKKYpaR66kqc4Q+1FP3KHo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNTE3ZWItNWQyNi00NDY4LTkxZjIt
N2RjYzRlZDFjZGJjLzEveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNTE3ZWItNWQyNi00NDY4LTkxZjItN2RjYzRlZDFjZGJj
LzEveGhzOVlvcGlscEhycVNwemhEN1VVX2NvZWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATV3jh/+x
IRD/9u7eF+1sYbRudmHM0nPgcCkchl4oxNjqXyhP1vX/sQTo/Eo57/YZtlsUbuBi
zahUbg6L9hywsL5cyiLCYitBI+IeJZucaxsc4fkBx65VFmltMTqObxkLOLSFA5E8
Hc2FNesBfBAOaPVjS5WgrDcQZOxrJrBmqPC/O1FEzWMtuVem8Fb0gn+Ly64kBd4O
bRMHAZ2LdAlhu8fpyspVi3K8xaO2spKtLw9OxmuhxP+OmmDNCgIvo54a9Zhh4L0F
qkfjErR260pnKWfKq2nQKAHQgCPBAM8tJ/KQ5w29CBWAbIrrPsZ9sN3A9oQ8PzaB
L8oH7lS/Nipe/w==
-----END CERTIFICATE-----
Generated at Tue May 13 09:48:47 2025 by rpki-client