Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json)
Hash identifier: zUQRjQ/cui8A4f8DYPt6cK/ffcQ56qJlFSlzNVkoSqM=
Subject key identifier: AD:0C:4E:A3:5D:40:8E:3A:5F:A0:42:84:FB:AA:20:5D:06:51:86:D4
Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Certificate serial: 0196CEE1C0F744F6D96C103774D9F813FABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
Manifest number: 1543
Signing time: Wed 14 May 2025 13:00:23 +0000
Manifest this update: Wed 14 May 2025 13:00:23 +0000
Manifest next update: Thu 15 May 2025 13:00:23 +0000
Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: ITJ2pT8fpPDFlF0wf/Zm6tBQQvZT0elfaC9CSnw458o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e1:c0:f7:44:f6:d9:6c:10:37:74:d9:f8:13:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc
Validity
Not Before: May 14 13:00:23 2025 GMT
Not After : May 15 13:00:23 2025 GMT
Subject: CN=ad0c4ea35d408e3a5fa04284fbaa205d065186d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:51:86:ea:fc:15:bc:0d:6f:47:be:17:f2:
c6:09:51:1c:b4:34:35:e6:17:84:06:54:24:1e:95:
06:bd:f8:4c:d0:6f:16:47:03:d9:73:cb:9d:8e:ec:
41:a2:f4:95:70:c0:dd:e6:c5:94:38:b4:d7:65:1f:
19:97:a8:51:54:e5:9d:44:51:86:16:ad:cf:7b:29:
de:3e:c6:e6:70:05:e9:ba:55:f8:99:a4:38:8e:da:
36:78:a0:14:dd:09:3f:54:89:54:18:fe:4a:49:29:
7f:0f:93:76:1d:85:8c:28:c3:f8:a5:29:77:64:b8:
64:56:62:20:3d:31:9c:16:24:7a:d2:85:06:5b:59:
aa:54:03:c7:81:7e:1d:12:ba:7c:2e:13:fb:49:bb:
50:70:0c:2d:49:11:2e:bf:ce:39:29:84:ef:04:75:
af:02:a0:cc:c5:98:b0:8a:a4:46:1f:9e:db:0b:92:
11:51:53:6e:51:f7:95:7a:f0:ec:34:b4:92:7d:46:
4e:5a:b7:01:d2:0b:c6:39:69:00:48:b8:ff:e7:71:
8a:80:8d:f7:bd:7f:c0:6a:cd:7e:02:86:24:bc:d1:
f8:e5:60:f0:68:7e:04:e0:68:76:58:c0:6b:d0:1b:
ed:2f:0b:02:b3:2e:b8:99:ab:7f:63:ba:a0:a8:1e:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:4E:A3:5D:40:8E:3A:5F:A0:42:84:FB:AA:20:5D:06:51:86:D4
X509v3 Authority Key Identifier:
keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:be:2e:d4:5c:59:d2:bf:fb:e4:93:7e:de:df:58:0d:c4:
88:1d:a6:7d:9e:17:f5:50:91:47:5e:5f:66:a8:45:e2:19:57:
4a:cd:b9:f0:2d:ff:5a:96:f0:55:63:34:bd:bd:58:0e:8f:10:
ba:e1:1a:f9:d6:db:3d:1d:81:62:54:e0:4a:90:b4:00:fa:73:
e2:ff:b0:4e:98:a9:cc:ba:5b:1b:fe:53:ed:3f:3b:87:9c:79:
fd:ce:eb:11:a3:dd:47:79:21:b3:1b:93:70:bb:32:bf:3c:43:
0e:cf:b9:0c:61:42:a5:52:6e:57:e1:56:82:bc:59:79:83:26:
7b:83:b1:19:1f:b6:88:a0:e8:e9:84:91:05:d9:0e:c6:b4:33:
a0:9e:cc:b1:74:c2:c3:7b:76:2c:2d:9c:51:10:b0:36:77:57:
61:ce:e8:11:00:cb:fc:30:3c:33:a5:c4:57:16:c5:6c:6d:3e:
33:09:3f:ad:21:42:86:60:17:2f:3a:4c:85:89:a1:30:26:1a:
6e:bc:81:a4:79:a2:aa:fc:0f:f2:13:23:ea:cb:dc:32:6d:41:
6d:14:04:91:e4:df:d4:6b:f5:16:22:86:31:a2:f4:2c:f5:9e:
29:4a:26:89:c9:49:a5:93:67:fc:24:13:0b:7c:1e:1f:aa:44:
c5:af:56:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbO4cD3RPbZbBA3dNn4E/q/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTFiY2Q4OWViN2Y1YjNhYjA4ODA2ZWY1MWE3YzJmNmVi
OThlZmMwHhcNMjUwNTE0MTMwMDIzWhcNMjUwNTE1MTMwMDIzWjAzMTEwLwYDVQQD
EyhhZDBjNGVhMzVkNDA4ZTNhNWZhMDQyODRmYmFhMjA1ZDA2NTE4NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OVRhur8FbwNb0e+F/LGCVEctDQ1
5heEBlQkHpUGvfhM0G8WRwPZc8udjuxBovSVcMDd5sWUOLTXZR8Zl6hRVOWdRFGG
Fq3PeynePsbmcAXpulX4maQ4jto2eKAU3Qk/VIlUGP5KSSl/D5N2HYWMKMP4pSl3
ZLhkVmIgPTGcFiR60oUGW1mqVAPHgX4dErp8LhP7SbtQcAwtSREuv845KYTvBHWv
AqDMxZiwiqRGH57bC5IRUVNuUfeVevDsNLSSfUZOWrcB0gvGOWkASLj/53GKgI33
vX/Aas1+AoYkvNH45WDwaH4E4Gh2WMBr0BvtLwsCsy64mat/Y7qgqB7BuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0MTqNdQI46X6BChPuqIF0GUYbUMB8GA1UdIwQY
MBaAFF9RvNiet/WzqwiAbvUafC9uuY78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MWY2ZjUtY2VmMC00YTU3LThlNDct
MGE4NTk4NjIwOGE5LzEvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi80MWY2ZjUtY2VmMC00YTU3LThlNDctMGE4NTk4NjIwOGE5
LzEvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapq+LtRc
WdK/++STft7fWA3EiB2mfZ4X9VCRR15fZqhF4hlXSs258C3/WpbwVWM0vb1YDo8Q
uuEa+dbbPR2BYlTgSpC0APpz4v+wTpipzLpbG/5T7T87h5x5/c7rEaPdR3khsxuT
cLsyvzxDDs+5DGFCpVJuV+FWgrxZeYMme4OxGR+2iKDo6YSRBdkOxrQzoJ7MsXTC
w3t2LC2cURCwNndXYc7oEQDL/DA8M6XEVxbFbG0+Mwk/rSFChmAXLzpMhYmhMCYa
bryBpHmiqvwP8hMj6svcMm1BbRQEkeTf1Gv1FiKGMaL0LPWeKUomiclJpZNn/CQT
C3weH6pExa9WEw==
-----END CERTIFICATE-----
Generated at Wed May 14 19:13:22 2025 by rpki-client