Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: QRRNpz6Bq4RLHXMaFooUp3y/QL1o36AAN/BYIzHOKzg=
Subject key identifier: 9C:30:58:0E:9C:52:C1:27:15:F8:4E:EE:27:B8:18:1E:CF:08:3F:F2
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 0196CB04E145F3662BC2C610F432AEF18D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 19:00:16 +0000
Manifest this update: Tue 13 May 2025 19:00:16 +0000
Manifest next update: Wed 14 May 2025 19:00:16 +0000
Files and hashes: 1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: gZrR7eWiCNngQu1Lu1UAKEfFbL4NNlWM7infGq7z2Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:e1:45:f3:66:2b:c2:c6:10:f4:32:ae:f1:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: May 13 19:00:16 2025 GMT
Not After : May 14 19:00:16 2025 GMT
Subject: CN=9c30580e9c52c12715f84eee27b8181ecf083ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:2a:48:a0:ec:70:71:2a:1c:74:40:b4:13:
48:c4:8c:fa:24:de:38:be:89:b1:c7:6d:c6:af:09:
63:28:fa:8c:75:82:0e:98:d4:36:72:02:ab:d4:71:
48:e3:bc:f4:6d:2e:4a:f4:e3:35:58:75:9c:19:71:
b5:e0:5b:2e:ea:05:37:a0:60:1b:15:7e:76:c7:a9:
2d:b1:c3:fc:24:82:1e:9f:29:b6:4e:45:8a:1d:e8:
ef:c8:6c:60:8e:39:82:7c:9c:df:71:58:b7:c4:9e:
67:68:3a:c9:44:cb:8c:99:6c:c1:c3:c5:6e:da:e9:
0e:87:8e:65:8e:07:d2:7e:c1:56:bf:b5:ef:d0:b0:
f7:d5:34:de:43:08:0c:c9:3e:bc:9a:3d:0d:0f:30:
8a:d5:69:c9:25:9b:7d:1f:c9:2c:70:92:1f:5b:e0:
6a:9d:d3:2f:e8:8b:d5:43:7a:c5:3c:15:09:1e:4b:
46:5a:d1:a9:94:ef:91:32:cb:51:17:db:eb:9d:e4:
e3:c4:cd:f0:54:c1:a9:5d:42:a3:36:04:df:0b:c2:
3b:72:fd:a6:f2:40:9d:29:93:66:20:ab:5a:eb:0d:
0a:1e:c6:59:6a:4b:b0:02:02:93:f1:d2:b0:54:b4:
d6:0f:82:3e:57:27:71:84:c0:ac:36:85:af:3f:39:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:58:0E:9C:52:C1:27:15:F8:4E:EE:27:B8:18:1E:CF:08:3F:F2
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:cc:8d:60:e3:c1:f5:8d:18:d5:48:fb:26:d5:28:bf:06:
e8:5d:1e:e5:77:da:d7:7a:ae:b3:19:1a:42:66:93:d0:8e:f0:
0a:5d:0f:25:2a:22:97:bb:9d:4e:02:e2:0b:60:13:af:01:f9:
a5:a2:1a:24:9b:a1:92:b4:5d:52:43:a0:c5:b7:fb:70:4d:cc:
c8:33:ed:f2:b0:e6:95:a0:20:60:eb:f7:cf:a6:68:dd:16:b9:
21:80:a7:a3:71:ce:4b:99:bb:77:46:51:f3:78:a3:4c:f0:85:
6c:53:03:f9:70:87:82:87:76:7e:8c:da:cc:e5:fd:9c:ba:b6:
28:e7:8e:30:bb:31:54:9c:81:24:14:62:af:d3:f0:77:59:43:
0c:88:55:d1:97:7c:61:cc:80:b3:e9:e6:61:4f:85:1d:b5:68:
b4:60:cb:c0:60:5e:7d:ad:d1:bb:71:a6:e9:0e:05:b5:d9:04:
29:f0:da:46:ff:61:ce:0d:9a:01:60:f9:de:4c:03:5d:59:df:
da:21:56:c3:30:b2:a5:78:f7:a6:5f:3c:08:40:c4:cc:d7:5c:
4a:84:d6:c3:8d:70:14:15:db:e0:1d:bd:07:ea:2f:db:b0:54:
c2:74:2d:92:25:e0:e4:35:9e:5c:ef:23:0a:e5:ee:29:23:b7:
78:8f:98:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBOFF82YrwsYQ9DKu8Y1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi
NGI4Y2IwHhcNMjUwNTEzMTkwMDE2WhcNMjUwNTE0MTkwMDE2WjAzMTEwLwYDVQQD
Eyg5YzMwNTgwZTljNTJjMTI3MTVmODRlZWUyN2I4MTgxZWNmMDgzZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7MqSKDscHEqHHRAtBNIxIz6JN44
vomxx23GrwljKPqMdYIOmNQ2cgKr1HFI47z0bS5K9OM1WHWcGXG14Fsu6gU3oGAb
FX52x6ktscP8JIIenym2TkWKHejvyGxgjjmCfJzfcVi3xJ5naDrJRMuMmWzBw8Vu
2ukOh45ljgfSfsFWv7Xv0LD31TTeQwgMyT68mj0NDzCK1WnJJZt9H8kscJIfW+Bq
ndMv6IvVQ3rFPBUJHktGWtGplO+RMstRF9vrneTjxM3wVMGpXUKjNgTfC8I7cv2m
8kCdKZNmIKta6w0KHsZZakuwAgKT8dKwVLTWD4I+VydxhMCsNoWvPzl0pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwwWA6cUsEnFfhO7ie4GB7PCD/yMB8GA1UdIwQY
MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt
NzE4ODdkMGE4M2JlLzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl
LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcjMjWDj
wfWNGNVI+ybVKL8G6F0e5Xfa13qusxkaQmaT0I7wCl0PJSoil7udTgLiC2ATrwH5
paIaJJuhkrRdUkOgxbf7cE3MyDPt8rDmlaAgYOv3z6Zo3Ra5IYCno3HOS5m7d0ZR
83ijTPCFbFMD+XCHgod2fozazOX9nLq2KOeOMLsxVJyBJBRir9Pwd1lDDIhV0Zd8
YcyAs+nmYU+FHbVotGDLwGBefa3Ru3Gm6Q4FtdkEKfDaRv9hzg2aAWD53kwDXVnf
2iFWwzCypXj3pl88CEDEzNdcSoTWw41wFBXb4B29B+ov27BUwnQtkiXg5DWeXO8j
CuXuKSO3eI+Y8A==
-----END CERTIFICATE-----
Generated at Tue May 13 22:14:24 2025 by rpki-client