Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: NSo5sMoqVQKiHGrvWB/Q2PQX/QA6SsUms5iBIswhBFg=
Subject key identifier: E9:FD:1D:B5:5C:AE:59:93:DF:AA:01:39:B1:BF:20:F2:2F:38:10:C5
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 0196BDB71C8CA1EF325556D3FEDE5BAD23A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1425
Signing time: Sun 11 May 2025 05:00:16 +0000
Manifest this update: Sun 11 May 2025 05:00:16 +0000
Manifest next update: Mon 12 May 2025 05:00:16 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: XWd6n6MbV90OwL+HXXEL8cRo1zj5CDWaKXZbdieps7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:1c:8c:a1:ef:32:55:56:d3:fe:de:5b:ad:23:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: May 11 05:00:16 2025 GMT
Not After : May 12 05:00:16 2025 GMT
Subject: CN=e9fd1db55cae5993dfaa0139b1bf20f22f3810c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:85:15:85:41:93:f4:0e:e9:8e:b9:e8:09:
cd:9f:8e:9d:38:db:27:2e:f2:1f:ff:28:ed:57:08:
43:b7:27:a8:cb:17:e3:1c:b0:62:9b:06:2d:f1:89:
d0:b1:68:6c:b5:e8:e2:22:fa:dd:e0:12:91:bc:73:
92:fc:72:3a:2d:bd:a0:c1:4a:22:b2:ee:a9:99:1f:
05:2e:f6:e7:e0:62:71:ed:cd:ef:14:6f:a5:67:99:
8f:55:c2:47:8a:41:93:67:1f:bf:e7:07:24:76:3e:
a7:72:24:b6:af:ae:2d:4c:fc:78:c4:a6:0a:f0:83:
28:87:f8:c0:ab:c8:e1:54:f8:25:3d:a6:a4:ca:bd:
ea:54:14:c7:f2:83:e2:53:0b:9c:cf:e6:ec:56:b6:
cd:13:3f:85:34:fa:94:d7:8a:d2:2e:15:7e:7c:0e:
e1:4a:0b:9c:b8:50:77:cd:91:3f:a2:c9:d7:f0:8c:
44:42:50:d2:56:1a:8f:bf:12:cd:21:a8:08:b4:50:
1a:fb:bf:5f:c8:0f:89:7e:b9:e1:0f:10:ab:93:b1:
90:de:9b:72:52:a5:a8:5c:21:42:39:02:fb:4b:b6:
d5:99:bb:85:56:58:18:6d:5b:84:f7:06:ce:65:66:
5d:9b:c9:1f:d5:6f:85:c4:24:87:15:3f:fe:63:aa:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:1D:B5:5C:AE:59:93:DF:AA:01:39:B1:BF:20:F2:2F:38:10:C5
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1a:cc:1a:22:be:e5:13:c0:67:e8:a6:71:f8:a9:10:0f:2d:
55:4c:4d:50:09:c2:4e:7a:20:90:83:78:f9:38:74:9f:f9:7a:
a5:ac:db:f4:b7:90:0d:c9:af:80:03:74:22:f9:12:08:0b:40:
c6:f9:59:0e:7c:cf:bc:de:1c:95:ac:ea:ac:b5:66:2f:d5:85:
0a:7b:04:31:14:b8:8f:f2:9e:85:9f:c1:db:6c:ac:a3:e3:15:
a9:db:01:0f:c1:a9:b9:46:14:f9:00:9f:81:13:30:5c:22:e3:
0e:a0:b5:7d:22:bd:31:84:5a:88:41:98:ff:81:2a:8f:04:73:
ea:5b:4f:1b:18:bd:49:6a:47:c0:30:23:7e:39:91:dd:d5:b3:
d4:df:ee:cd:06:a1:2b:25:d3:91:73:ea:d6:b4:fa:c1:85:53:
47:e8:89:0b:05:e1:1a:7b:ab:05:7d:7e:6e:51:8b:45:03:cc:
d2:c9:60:c0:84:b6:a3:87:28:a0:8d:fa:8a:e2:85:1a:e5:00:
8d:77:9e:24:a1:4f:8b:91:19:91:ff:b3:e7:77:6d:7f:fb:f0:
bd:86:12:f5:f8:ed:5e:1c:95:12:51:51:01:2e:de:33:6a:8b:
0d:19:56:49:2c:65:ce:d3:e2:88:81:64:7f:c3:e6:72:9e:7b:
a0:5c:a1:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9txyMoe8yVVbT/t5brSOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjUwNTExMDUwMDE2WhcNMjUwNTEyMDUwMDE2WjAzMTEwLwYDVQQD
EyhlOWZkMWRiNTVjYWU1OTkzZGZhYTAxMzliMWJmMjBmMjJmMzgxMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovSFFYVBk/QO6Y656AnNn46dONsn
LvIf/yjtVwhDtyeoyxfjHLBimwYt8YnQsWhstejiIvrd4BKRvHOS/HI6Lb2gwUoi
su6pmR8FLvbn4GJx7c3vFG+lZ5mPVcJHikGTZx+/5wckdj6nciS2r64tTPx4xKYK
8IMoh/jAq8jhVPglPaakyr3qVBTH8oPiUwucz+bsVrbNEz+FNPqU14rSLhV+fA7h
SgucuFB3zZE/osnX8IxEQlDSVhqPvxLNIagItFAa+79fyA+JfrnhDxCrk7GQ3pty
UqWoXCFCOQL7S7bVmbuFVlgYbVuE9wbOZWZdm8kf1W+FxCSHFT/+Y6osbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOn9HbVcrlmT36oBObG/IPIvOBDFMB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhrMGiK+
5RPAZ+imcfipEA8tVUxNUAnCTnogkIN4+Th0n/l6pazb9LeQDcmvgAN0IvkSCAtA
xvlZDnzPvN4clazqrLVmL9WFCnsEMRS4j/KehZ/B22yso+MVqdsBD8GpuUYU+QCf
gRMwXCLjDqC1fSK9MYRaiEGY/4EqjwRz6ltPGxi9SWpHwDAjfjmR3dWz1N/uzQah
KyXTkXPq1rT6wYVTR+iJCwXhGnurBX1+blGLRQPM0slgwIS2o4cooI36iuKFGuUA
jXeeJKFPi5EZkf+z53dtf/vwvYYS9fjtXhyVElFRAS7eM2qLDRlWSSxlztPiiIFk
f8Pmcp57oFyh8w==
-----END CERTIFICATE-----
Generated at Sun May 11 12:44:26 2025 by rpki-client