Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: Y4cHpKRvhk1n6Wp6uVWu4yiacx07dwyPYlDJnzF3j1c=
Subject key identifier: 69:E4:46:FE:FA:46:37:DE:99:68:D6:20:B2:8D:A3:A6:F6:EF:3D:A0
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 0196AC55CF0CA05495D4F8CB5039D07BCB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 152D
Signing time: Wed 07 May 2025 20:00:26 +0000
Manifest this update: Wed 07 May 2025 20:00:26 +0000
Manifest next update: Thu 08 May 2025 20:00:26 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: uRGExbrym+06A5lFWC+/+WWsxk4xn3mcXXaLPQlNniI=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:cf:0c:a0:54:95:d4:f8:cb:50:39:d0:7b:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: May 7 20:00:26 2025 GMT
Not After : May 8 20:00:26 2025 GMT
Subject: CN=69e446fefa4637de9968d620b28da3a6f6ef3da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:34:01:9a:e3:22:e3:f2:2e:89:d8:62:1c:
5e:2c:e5:74:13:fa:ed:3a:25:0f:45:16:3d:b9:67:
e2:ad:18:6f:d2:bf:2c:d0:40:73:dc:5c:08:87:ca:
88:dc:aa:8e:4a:92:43:85:52:ba:d1:bd:a6:c7:b1:
a3:e2:f6:36:fb:c1:7f:7f:f4:28:0b:43:94:81:f3:
c1:b9:de:9e:40:eb:92:4e:f6:31:23:6d:cb:d0:da:
7f:dc:2c:20:8b:9d:87:05:04:27:e5:a3:0a:55:97:
0a:57:c2:ff:dd:cb:83:4f:6d:43:ca:53:ab:a5:a7:
8b:f7:b9:ff:ff:c1:66:a3:f4:ef:41:cd:b1:64:2d:
81:9b:41:ab:d8:52:00:b0:8c:12:7a:1f:54:f0:d0:
77:a9:2b:4b:ea:ba:47:5c:06:96:86:ab:b8:b9:9e:
92:17:64:c2:0e:65:1b:61:81:dd:6b:c3:65:3a:bb:
26:64:89:8d:ee:9e:42:ef:d2:b1:d8:ae:d1:12:63:
66:2c:b3:3b:61:4e:99:b3:21:00:ce:a0:48:ba:62:
3f:cb:b2:f6:cb:bf:93:7c:2a:9c:22:55:7a:36:9e:
eb:3f:8c:5f:9a:12:a5:45:2a:da:fa:41:1e:da:9e:
3f:1b:10:3a:6d:38:aa:c7:63:63:cb:5e:f6:7b:47:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E4:46:FE:FA:46:37:DE:99:68:D6:20:B2:8D:A3:A6:F6:EF:3D:A0
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4b:fa:fa:90:34:3f:fe:38:5d:c1:1e:88:67:fd:10:82:44:
cc:af:45:f7:a2:5f:35:c8:8b:af:8f:50:28:b4:83:2d:1c:cb:
5d:ec:2c:46:50:f4:e6:39:16:8e:ae:4b:1f:52:30:3b:77:5e:
f5:42:b8:5c:1e:e9:b2:29:79:3b:bf:fc:d4:e7:df:e2:b4:28:
4d:e0:b8:99:e5:ba:d4:cb:00:01:ec:92:75:f8:ed:71:78:cf:
de:05:52:dc:a1:c6:11:4d:41:ff:a0:be:59:4f:b6:9a:14:80:
1a:db:91:f1:cc:65:8c:be:9e:d5:04:d2:7c:54:f1:4a:8d:ed:
0d:cb:ff:f9:6e:29:a2:45:e5:cc:45:47:b6:f0:03:9d:8c:81:
a7:f8:ba:4c:be:e5:c4:14:08:ed:ed:00:a6:bc:8d:51:24:cf:
0a:a5:b3:24:a4:a6:1b:33:7c:0c:21:d6:60:86:f2:6b:ae:f6:
48:6a:82:54:bf:5f:52:33:2c:8b:1c:34:a1:e7:93:bc:b6:3e:
c9:17:b8:b9:20:c7:87:e8:c4:1b:4d:b4:91:50:d3:0d:cd:7a:
3a:7e:16:10:c0:20:a4:d5:29:fa:c7:59:b6:e6:32:20:5b:2b:
bf:77:6a:97:cb:6d:54:62:d8:ef:ce:41:d7:98:14:8b:84:7f:
ad:95:bc:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasVc8MoFSV1PjLUDnQe8uHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0
Y2M4ZWQwHhcNMjUwNTA3MjAwMDI2WhcNMjUwNTA4MjAwMDI2WjAzMTEwLwYDVQQD
Eyg2OWU0NDZmZWZhNDYzN2RlOTk2OGQ2MjBiMjhkYTNhNmY2ZWYzZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthk0AZrjIuPyLonYYhxeLOV0E/rt
OiUPRRY9uWfirRhv0r8s0EBz3FwIh8qI3KqOSpJDhVK60b2mx7Gj4vY2+8F/f/Qo
C0OUgfPBud6eQOuSTvYxI23L0Np/3Cwgi52HBQQn5aMKVZcKV8L/3cuDT21DylOr
paeL97n//8Fmo/TvQc2xZC2Bm0Gr2FIAsIwSeh9U8NB3qStL6rpHXAaWhqu4uZ6S
F2TCDmUbYYHda8NlOrsmZImN7p5C79Kx2K7REmNmLLM7YU6ZsyEAzqBIumI/y7L2
y7+TfCqcIlV6Np7rP4xfmhKlRSra+kEe2p4/GxA6bTiqx2Njy172e0fvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnkRv76RjfemWjWILKNo6b27z2gMB8GA1UdIwQY
MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt
YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5
LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0v6+pA0
P/44XcEeiGf9EIJEzK9F96JfNciLr49QKLSDLRzLXewsRlD05jkWjq5LH1IwO3de
9UK4XB7psil5O7/81Off4rQoTeC4meW61MsAAeySdfjtcXjP3gVS3KHGEU1B/6C+
WU+2mhSAGtuR8cxljL6e1QTSfFTxSo3tDcv/+W4pokXlzEVHtvADnYyBp/i6TL7l
xBQI7e0ApryNUSTPCqWzJKSmGzN8DCHWYIbya672SGqCVL9fUjMsixw0oeeTvLY+
yRe4uSDHh+jEG020kVDTDc16On4WEMAgpNUp+sdZtuYyIFsrv3dql8ttVGLY785B
15gUi4R/rZW8rA==
-----END CERTIFICATE-----
Generated at Thu May 8 04:21:28 2025 by rpki-client