Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: 6yQh0vwQAh5H0Fy1q6KuOzpPHZ0OGsgrvX8jcZBLbQg=
Subject key identifier: A9:2C:6C:4A:DB:32:E4:C6:9B:BB:0B:6B:C4:22:FC:C5:76:D0:F0:0E
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 0196B89155F214F2100846EBC7C1E0616B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 1071
Signing time: Sat 10 May 2025 05:00:54 +0000
Manifest this update: Sat 10 May 2025 05:00:54 +0000
Manifest next update: Sun 11 May 2025 05:00:54 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: beRizO32Tty89UHwryPD4bgkZEehPyj/VsfHzzhujec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:55:f2:14:f2:10:08:46:eb:c7:c1:e0:61:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: May 10 05:00:54 2025 GMT
Not After : May 11 05:00:54 2025 GMT
Subject: CN=a92c6c4adb32e4c69bbb0b6bc422fcc576d0f00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:35:6b:d6:d9:ec:f2:59:cd:e8:20:5d:92:
12:91:96:3a:be:80:8a:ff:77:fb:74:02:f2:df:be:
76:cb:85:cb:08:3d:af:7c:45:ac:1a:c3:95:37:a8:
34:ba:d5:95:08:ca:6a:75:8d:d4:7e:3d:b1:6a:9e:
f7:b9:c6:1c:e3:41:6e:be:06:7f:c5:d6:cf:35:16:
fa:74:f5:58:90:bc:a7:59:24:59:f4:5a:0d:33:c2:
64:9b:8b:6c:99:5b:b6:b6:60:7b:47:46:61:2f:1d:
72:aa:ea:72:0a:9a:7b:61:84:b3:1b:e8:de:87:f8:
50:5b:9f:11:07:b9:d0:a6:23:1b:90:23:d5:3c:b1:
7f:7d:94:38:76:85:c0:27:7f:9d:62:f1:e4:b3:aa:
52:70:a4:de:7a:0c:31:06:7c:76:98:06:b6:9c:ef:
19:cd:85:25:39:d3:8a:ed:bd:46:7e:83:71:99:9f:
9f:2e:48:0b:4f:1f:c9:79:88:b4:60:37:4c:55:bc:
dd:77:f8:ec:8d:dd:ef:e0:24:11:76:55:02:0b:2c:
f7:70:48:72:75:45:05:01:d9:e8:84:77:5c:ea:31:
66:3e:64:ce:6a:5b:86:5f:22:59:ff:76:e8:f7:da:
f0:09:ea:e3:38:bd:e9:f9:af:3f:2e:27:8c:11:02:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:6C:4A:DB:32:E4:C6:9B:BB:0B:6B:C4:22:FC:C5:76:D0:F0:0E
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9f:07:26:6d:98:55:b4:af:27:cc:f1:13:a7:7e:03:f6:d6:
77:00:f3:52:4f:d7:f4:7c:f3:30:c2:84:7a:49:70:61:6f:18:
8a:1b:d9:e8:94:5a:4f:b3:68:8d:95:21:73:90:39:a9:5d:07:
f6:e1:87:ee:e6:61:c1:50:9e:62:5c:ac:ef:d3:dc:de:3a:34:
ec:9d:a5:20:8c:54:ea:fe:bf:3b:97:2f:a5:5b:d2:bf:f7:5c:
74:46:47:0b:1c:4d:26:27:61:27:af:1f:34:88:ce:fc:5e:bf:
11:84:ce:1b:e8:71:f8:bb:13:72:6a:e7:67:1d:cd:7d:f5:0b:
c4:55:0d:e0:e3:ed:c4:47:04:86:6d:c9:a0:16:3b:f8:e8:cb:
be:ce:77:70:91:44:3b:19:c4:c0:b3:20:57:8d:e3:e0:2e:5c:
9b:95:0d:4f:be:2f:30:6c:e1:cc:31:3b:94:a9:a6:5e:86:bf:
57:0c:75:d3:6f:4a:44:49:af:c0:a0:40:94:0d:0e:31:d8:d5:
84:97:fe:fa:80:d5:fe:65:c9:74:7f:6d:9c:18:eb:1d:f1:1b:
65:33:f8:e7:ad:04:09:f4:22:25:af:41:c6:08:bd:c7:2b:ac:
d8:70:aa:c2:55:a3:15:80:05:7e:82:95:f5:51:8a:11:c9:9f:
86:80:f4:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kVXyFPIQCEbrx8HgYWsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjUwNTEwMDUwMDU0WhcNMjUwNTExMDUwMDU0WjAzMTEwLwYDVQQD
EyhhOTJjNmM0YWRiMzJlNGM2OWJiYjBiNmJjNDIyZmNjNTc2ZDBmMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNE1a9bZ7PJZzeggXZISkZY6voCK
/3f7dALy3752y4XLCD2vfEWsGsOVN6g0utWVCMpqdY3Ufj2xap73ucYc40FuvgZ/
xdbPNRb6dPVYkLynWSRZ9FoNM8Jkm4tsmVu2tmB7R0ZhLx1yqupyCpp7YYSzG+je
h/hQW58RB7nQpiMbkCPVPLF/fZQ4doXAJ3+dYvHks6pScKTeegwxBnx2mAa2nO8Z
zYUlOdOK7b1GfoNxmZ+fLkgLTx/JeYi0YDdMVbzdd/jsjd3v4CQRdlUCCyz3cEhy
dUUFAdnohHdc6jFmPmTOaluGXyJZ/3bo99rwCerjOL3p+a8/LieMEQKvOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKksbErbMuTGm7sLa8Qi/MV20PAOMB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp8HJm2Y
VbSvJ8zxE6d+A/bWdwDzUk/X9HzzMMKEeklwYW8YihvZ6JRaT7NojZUhc5A5qV0H
9uGH7uZhwVCeYlys79Pc3jo07J2lIIxU6v6/O5cvpVvSv/dcdEZHCxxNJidhJ68f
NIjO/F6/EYTOG+hx+LsTcmrnZx3NffULxFUN4OPtxEcEhm3JoBY7+OjLvs53cJFE
OxnEwLMgV43j4C5cm5UNT74vMGzhzDE7lKmmXoa/Vwx1029KREmvwKBAlA0OMdjV
hJf++oDV/mXJdH9tnBjrHfEbZTP4560ECfQiJa9Bxgi9xyus2HCqwlWjFYAFfoKV
9VGKEcmfhoD0PQ==
-----END CERTIFICATE-----
Generated at Sat May 10 07:58:00 2025 by rpki-client