Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: 6bB2pG8pNp/NAGV8mI8557DNBeQVCqgK7UHMkvnJVis=
Subject key identifier: 17:31:A0:ED:25:FD:DE:ED:77:8B:4E:B8:BF:3A:9A:73:15:95:88:46
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 0196C4275BA302018C57A5FE6804FF93FF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0475
Signing time: Mon 12 May 2025 11:00:35 +0000
Manifest this update: Mon 12 May 2025 11:00:35 +0000
Manifest next update: Tue 13 May 2025 11:00:35 +0000
Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=)
2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: O7+zsWuLVGvctnnXiMBJbmtdoU6wn9fulJjCGfMgSEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:5b:a3:02:01:8c:57:a5:fe:68:04:ff:93:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: May 12 11:00:35 2025 GMT
Not After : May 13 11:00:35 2025 GMT
Subject: CN=1731a0ed25fddeed778b4eb8bf3a9a7315958846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:0f:d2:74:20:dc:52:52:8c:fe:50:94:58:
22:20:ef:56:16:1e:48:37:f5:34:b4:88:32:89:3f:
87:6c:00:bf:10:9f:eb:96:e2:67:77:11:07:c5:a5:
e7:84:8f:70:4a:22:15:04:de:42:a2:5b:2c:53:49:
6c:8b:97:e1:ce:83:03:9f:c8:17:8e:90:4c:80:dc:
b9:4e:e3:68:37:cf:f2:c4:4c:7e:cf:21:8c:b4:e4:
0a:79:d2:22:3c:95:f5:fa:d3:fa:0d:93:75:32:66:
44:a3:4a:fa:73:33:fe:ba:00:9f:8e:86:78:1b:5a:
e5:f9:b6:82:ea:71:23:72:49:7b:33:c7:ce:cd:d8:
19:7c:c8:1f:9d:21:3d:7b:22:44:e8:ea:58:2d:98:
ac:51:dd:b6:a3:4c:ca:77:72:4c:cd:55:91:38:27:
87:f9:f5:00:ce:66:a3:a8:d6:8f:75:d3:ff:11:49:
e9:92:f9:e2:fc:23:63:5e:68:b4:6f:17:ed:7f:69:
fe:95:c7:b5:10:ba:c2:d0:a5:ed:09:79:f9:b0:a2:
8d:09:04:6e:0e:44:fe:1d:25:24:a7:7f:a5:9d:5e:
4d:66:05:79:7f:fd:ab:f4:1c:b7:51:1b:69:9e:2f:
54:c4:18:05:e7:d5:6e:f9:f7:36:dd:c5:5c:f5:90:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:A0:ED:25:FD:DE:ED:77:8B:4E:B8:BF:3A:9A:73:15:95:88:46
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:d4:da:f2:0b:ee:36:c2:7e:ed:8d:bd:5f:66:e2:94:42:
3d:09:db:a1:e6:db:6d:06:ba:ed:40:f4:7f:a5:1c:67:93:86:
22:4f:88:e9:5c:ab:26:f1:d1:c1:dc:e3:c3:64:61:96:67:d0:
41:69:12:79:ac:3c:c2:51:17:9f:83:ae:52:77:ba:b5:75:8e:
cc:77:7b:25:f0:c4:b2:a4:ca:63:30:51:41:90:d5:f2:b6:7c:
8e:ac:c9:a8:ea:b2:9a:84:91:07:02:c2:36:02:bf:7c:00:a8:
e8:36:30:1b:ba:16:58:f1:1a:69:20:ef:64:18:84:6b:87:58:
d6:fe:7f:99:08:f7:98:ee:0d:d1:44:03:ca:06:04:90:52:b6:
2e:20:4d:e3:d7:a2:28:6d:a2:f3:23:cc:d2:1b:0a:55:91:c1:
09:54:2d:fd:29:6a:d6:49:d8:2d:ee:72:87:6d:49:c2:66:eb:
d6:8c:9e:e1:dd:d9:fb:68:dd:57:50:a7:03:64:90:a7:a7:50:
b0:d5:55:94:19:fe:11:69:91:ec:83:2b:6b:a9:07:e5:05:6d:
c1:40:75:4d:63:e2:34:10:b7:43:de:a6:6a:31:4a:0e:31:37:
ed:b5:08:55:47:fe:3b:c0:cf:50:fd:b5:55:09:79:04:56:50:
9c:68:1c:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ1ujAgGMV6X+aAT/k/9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2
MDM3N2QwHhcNMjUwNTEyMTEwMDM1WhcNMjUwNTEzMTEwMDM1WjAzMTEwLwYDVQQD
EygxNzMxYTBlZDI1ZmRkZWVkNzc4YjRlYjhiZjNhOWE3MzE1OTU4ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllcP0nQg3FJSjP5QlFgiIO9WFh5I
N/U0tIgyiT+HbAC/EJ/rluJndxEHxaXnhI9wSiIVBN5ColssU0lsi5fhzoMDn8gX
jpBMgNy5TuNoN8/yxEx+zyGMtOQKedIiPJX1+tP6DZN1MmZEo0r6czP+ugCfjoZ4
G1rl+baC6nEjckl7M8fOzdgZfMgfnSE9eyJE6OpYLZisUd22o0zKd3JMzVWROCeH
+fUAzmajqNaPddP/EUnpkvni/CNjXmi0bxftf2n+lce1ELrC0KXtCXn5sKKNCQRu
DkT+HSUkp3+lnV5NZgV5f/2r9By3URtpni9UxBgF59Vu+fc23cVc9ZAZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcxoO0l/d7td4tOuL86mnMVlYhGMB8GA1UdIwQY
MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt
MGU1NDk0YWY1ODQwLzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw
LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcfU2vIL
7jbCfu2NvV9m4pRCPQnboebbbQa67UD0f6UcZ5OGIk+I6VyrJvHRwdzjw2RhlmfQ
QWkSeaw8wlEXn4OuUne6tXWOzHd7JfDEsqTKYzBRQZDV8rZ8jqzJqOqymoSRBwLC
NgK/fACo6DYwG7oWWPEaaSDvZBiEa4dY1v5/mQj3mO4N0UQDygYEkFK2LiBN49ei
KG2i8yPM0hsKVZHBCVQt/Slq1knYLe5yh21Jwmbr1oye4d3Z+2jdV1CnA2SQp6dQ
sNVVlBn+EWmR7IMra6kH5QVtwUB1TWPiNBC3Q96majFKDjE37bUIVUf+O8DPUP21
VQl5BFZQnGgcpQ==
-----END CERTIFICATE-----
Generated at Mon May 12 16:04:54 2025 by rpki-client