Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json)
Hash identifier: pkL/FPoA233XqfwNQP7ceR6KQl0ihZHnJtrejM5f3Og=
Subject key identifier: 32:B0:4C:70:74:A1:D4:4E:63:E4:75:A3:42:BA:FD:57:7B:5E:99:AB
Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8
Certificate serial: 0196C728DEE6E02EFDE8E660523908730CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
Manifest number: 150A
Signing time: Tue 13 May 2025 01:01:06 +0000
Manifest this update: Tue 13 May 2025 01:01:06 +0000
Manifest next update: Wed 14 May 2025 01:01:06 +0000
Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: vm7v9mJx6Ch3aq7fLrjgQlwYYY76HFYhxPsdfyaFJ9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:de:e6:e0:2e:fd:e8:e6:60:52:39:08:73:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8
Validity
Not Before: May 13 01:01:06 2025 GMT
Not After : May 14 01:01:06 2025 GMT
Subject: CN=32b04c7074a1d44e63e475a342bafd577b5e99ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:13:94:00:9d:bc:87:ac:73:d6:64:04:b7:
9b:e0:13:cf:a8:97:5f:4e:2b:8c:c7:cc:5f:97:44:
ef:bc:54:24:e3:e9:53:2b:77:4f:c2:66:0f:7c:b4:
21:48:22:82:ee:fb:66:84:a8:0a:b7:24:4b:ae:a2:
c6:c5:0e:5a:4a:79:d4:2e:12:a5:32:0d:46:63:1f:
c0:ff:85:5b:d8:50:f2:03:a6:0b:65:71:f6:3f:86:
00:cc:1f:36:2c:4b:6a:5c:45:86:f6:53:c5:9f:f9:
58:17:28:c4:04:5f:3d:66:b5:e2:10:24:b6:78:43:
cc:9f:54:a3:78:83:e0:81:ab:3e:dc:69:24:ad:8e:
ae:62:5a:80:cc:85:39:4c:fe:bc:c8:5c:51:6c:9a:
32:9e:f0:78:7e:3a:01:dc:e2:84:ca:d4:f1:e8:c3:
36:91:a7:bb:0b:0d:27:bf:d9:3f:86:65:fc:6c:f0:
a1:27:6c:30:7c:a0:12:f9:b9:3b:2d:cc:d2:fd:e7:
2a:1e:03:60:88:be:6c:39:b3:a6:f1:ff:26:cf:0a:
36:57:06:26:1c:fe:a3:6e:3c:16:ad:d6:19:89:08:
9b:81:6e:22:51:38:c4:e0:de:ff:50:bb:9b:20:c9:
cf:d4:3d:b4:2f:9d:6f:98:fc:bf:06:c2:c5:3e:a4:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:4C:70:74:A1:D4:4E:63:E4:75:A3:42:BA:FD:57:7B:5E:99:AB
X509v3 Authority Key Identifier:
keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:11:21:87:2c:04:19:66:68:73:3d:df:58:3d:0a:2a:76:2c:
de:2c:61:2e:af:a3:d4:87:15:ee:fb:8a:5a:ee:29:1d:b0:ee:
c7:58:67:4d:94:95:6a:b9:c4:f4:b9:4e:73:37:3a:5d:9d:ce:
e6:7a:88:9a:f7:11:28:dc:bb:77:31:8c:72:f1:eb:cb:37:a4:
56:be:1f:6d:44:5a:49:36:b2:aa:86:d2:58:b2:18:32:2e:00:
3b:84:00:af:7a:2b:ea:57:c0:3f:bd:ce:70:85:df:a8:d6:68:
d5:91:bd:f1:38:5b:45:c3:c8:63:fe:b5:e3:3d:2b:c7:ab:5a:
52:6c:96:bb:98:ab:6f:45:82:88:bd:bf:e0:bf:63:9b:c7:6f:
97:d6:04:b2:3c:b2:12:af:96:31:c0:84:4b:cb:87:67:1c:64:
be:a2:6b:0a:18:13:49:31:e6:44:df:a1:04:c5:4f:33:6c:ed:
ca:d7:b2:c1:45:c1:ac:f4:28:9c:d9:1c:8f:f9:51:ae:53:fd:
30:ff:0c:ba:6e:44:d3:65:3b:45:19:1a:81:66:68:75:ec:bd:
73:56:94:c0:49:e0:a7:36:d9:6c:9c:7f:97:0a:cb:87:9f:b5:
13:ca:a5:5a:4d:25:3f:95:92:bf:7e:da:96:8c:67:fa:4d:aa:
81:03:8b:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKN7m4C796OZgUjkIcwzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTk5NjIzZWQwZjBjNDlmZWFiOTU3ZmNkMDI2MTQ4Njk0
MDg3YTgwHhcNMjUwNTEzMDEwMTA2WhcNMjUwNTE0MDEwMTA2WjAzMTEwLwYDVQQD
EygzMmIwNGM3MDc0YTFkNDRlNjNlNDc1YTM0MmJhZmQ1NzdiNWU5OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY0TlACdvIesc9ZkBLeb4BPPqJdf
TiuMx8xfl0TvvFQk4+lTK3dPwmYPfLQhSCKC7vtmhKgKtyRLrqLGxQ5aSnnULhKl
Mg1GYx/A/4Vb2FDyA6YLZXH2P4YAzB82LEtqXEWG9lPFn/lYFyjEBF89ZrXiECS2
eEPMn1SjeIPggas+3GkkrY6uYlqAzIU5TP68yFxRbJoynvB4fjoB3OKEytTx6MM2
kae7Cw0nv9k/hmX8bPChJ2wwfKAS+bk7LczS/ecqHgNgiL5sObOm8f8mzwo2VwYm
HP6jbjwWrdYZiQibgW4iUTjE4N7/ULubIMnP1D20L51vmPy/BsLFPqRZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKwTHB0odROY+R1o0K6/Vd7XpmrMB8GA1UdIwQY
MBaAFMaZliPtDwxJ/quVf80CYUhpQIeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2Ut
MDViNTdkMmQ1NzZjLzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2UtMDViNTdkMmQ1NzZj
LzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphEhhywE
GWZocz3fWD0KKnYs3ixhLq+j1IcV7vuKWu4pHbDux1hnTZSVarnE9LlOczc6XZ3O
5nqImvcRKNy7dzGMcvHryzekVr4fbURaSTayqobSWLIYMi4AO4QAr3or6lfAP73O
cIXfqNZo1ZG98ThbRcPIY/614z0rx6taUmyWu5irb0WCiL2/4L9jm8dvl9YEsjyy
Eq+WMcCES8uHZxxkvqJrChgTSTHmRN+hBMVPM2ztyteywUXBrPQonNkcj/lRrlP9
MP8Mum5E02U7RRkagWZodey9c1aUwEngpzbZbJx/lwrLh5+1E8qlWk0lP5WSv37a
loxn+k2qgQOLKw==
-----END CERTIFICATE-----
Generated at Tue May 13 06:22:54 2025 by rpki-client