Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: qkeGirbFSWUFsDqThOueLjgdYh0YqnwuksAjlxdI+B8=
Subject key identifier: 9F:75:82:6D:61:2B:9B:94:28:C3:FC:31:B9:74:1B:A1:46:47:5B:AA
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 0196BF00EF3DBFFB776E0A7132FCF48C77AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 03E9
Signing time: Sun 11 May 2025 11:00:31 +0000
Manifest this update: Sun 11 May 2025 11:00:31 +0000
Manifest next update: Mon 12 May 2025 11:00:31 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: SprNyqA7C/1VqkAuzJIqp2Qxu0rFPJ9fQJmOXS2Yh7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:ef:3d:bf:fb:77:6e:0a:71:32:fc:f4:8c:77:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: May 11 11:00:31 2025 GMT
Not After : May 12 11:00:31 2025 GMT
Subject: CN=9f75826d612b9b9428c3fc31b9741ba146475baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:a4:44:58:9d:d1:06:4c:f1:e7:f1:f6:a6:
51:63:35:51:7e:e5:c5:63:7c:70:0c:c7:52:58:8f:
10:36:93:40:05:64:98:ec:5e:af:f7:5d:3e:cb:2a:
3f:c8:97:21:84:3d:73:e6:43:06:57:71:e1:7d:d1:
ef:4c:bd:60:a4:2e:7b:54:ef:1a:d7:d2:f0:fe:aa:
4b:7b:f4:8a:14:74:09:40:7e:a2:eb:c7:ca:80:a0:
05:44:79:e6:18:fa:ac:ea:f9:61:ac:43:52:49:7b:
04:cc:08:51:73:92:de:39:59:b4:42:3e:ce:4f:a4:
97:69:51:14:eb:2d:76:11:1b:ed:f2:79:4d:16:52:
ed:98:38:74:60:f7:10:73:e7:57:6b:f2:64:57:3d:
23:04:ae:56:7c:0d:ca:a8:b6:e6:07:27:f2:21:62:
db:4d:de:f9:93:e5:12:09:d6:37:17:9f:45:53:2b:
4e:2c:96:10:61:40:e1:6b:18:ed:9c:a1:a6:39:16:
87:d5:31:03:10:25:fe:af:f5:68:c3:c0:ce:f2:97:
82:85:80:0f:14:5d:f8:0f:e5:8c:33:ae:9f:1f:ca:
a4:57:ea:2c:c3:36:59:b0:21:1a:49:19:b3:8d:cd:
7d:56:dc:4f:ae:cc:3b:80:86:52:e7:48:26:33:d5:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:82:6D:61:2B:9B:94:28:C3:FC:31:B9:74:1B:A1:46:47:5B:AA
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7d:1f:66:9a:a7:ec:1e:ab:bf:0d:9e:c1:e9:89:ac:7d:f3:
af:c5:ec:dd:e1:46:7b:36:b5:8d:f8:63:42:5e:9e:5e:cc:ca:
8f:d1:16:51:1a:d7:86:d6:0e:45:23:fd:dd:c6:16:7a:77:cf:
72:de:db:57:53:c3:55:9e:f4:ae:66:8f:83:af:94:4a:b3:44:
ec:05:dc:92:ef:2f:6a:c9:a8:6e:f3:e7:e9:9c:57:a4:b1:0f:
d0:ca:39:fa:a6:fa:d1:09:67:dc:ff:89:a4:fd:62:10:06:1d:
58:05:41:da:c3:40:a6:4f:9a:ec:f3:51:a7:08:5d:95:dc:90:
2f:c1:90:54:9f:3d:6c:18:74:7d:aa:a4:36:de:18:8f:80:22:
67:7b:d8:18:aa:3f:d1:c8:f1:5b:f9:75:b8:5a:c7:d2:b3:8e:
08:5c:ef:2f:4c:df:c5:45:5b:6a:2e:a0:a2:10:d4:20:68:5e:
81:a7:fb:ec:dc:41:02:13:cf:f1:59:80:b6:05:4f:6b:b8:32:
71:3a:5c:27:58:3d:c1:49:f9:6b:11:bb:49:2f:79:36:de:8b:
a8:ff:32:bf:4d:c7:84:c6:ec:3e:32:e0:10:e4:a8:e8:cd:b4:
cb:40:5c:50:6d:61:7f:ea:c6:b8:0d:cd:53:b6:d4:24:59:43:
c8:fd:83:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/AO89v/t3bgpxMvz0jHetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzFkOTU4MGE4ZjAxZTQ5YzYxYzVmY2ZkZmYyZTU4OTk1
MzRiOGYwHhcNMjUwNTExMTEwMDMxWhcNMjUwNTEyMTEwMDMxWjAzMTEwLwYDVQQD
Eyg5Zjc1ODI2ZDYxMmI5Yjk0MjhjM2ZjMzFiOTc0MWJhMTQ2NDc1YmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE6kRFid0QZM8efx9qZRYzVRfuXF
Y3xwDMdSWI8QNpNABWSY7F6v910+yyo/yJchhD1z5kMGV3HhfdHvTL1gpC57VO8a
19Lw/qpLe/SKFHQJQH6i68fKgKAFRHnmGPqs6vlhrENSSXsEzAhRc5LeOVm0Qj7O
T6SXaVEU6y12ERvt8nlNFlLtmDh0YPcQc+dXa/JkVz0jBK5WfA3KqLbmByfyIWLb
Td75k+USCdY3F59FUytOLJYQYUDhaxjtnKGmORaH1TEDECX+r/Vow8DO8peChYAP
FF34D+WMM66fH8qkV+oswzZZsCEaSRmzjc19VtxPrsw7gIZS50gmM9VqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ91gm1hK5uUKMP8Mbl0G6FGR1uqMB8GA1UdIwQY
MBaAFMVx2VgKjwHknGHF/P3/LliZU0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgt
NzU0NmRkMTcxNmM4LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MTFmMjEtMTI1Yi00ZDA3LWJhYzgtNzU0NmRkMTcxNmM4
LzEveFhIWldBcVBBZVNjWWNYOF9mOHVXSmxUUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg30fZpqn
7B6rvw2ewemJrH3zr8Xs3eFGeza1jfhjQl6eXszKj9EWURrXhtYORSP93cYWenfP
ct7bV1PDVZ70rmaPg6+USrNE7AXcku8vasmobvPn6ZxXpLEP0Mo5+qb60Qln3P+J
pP1iEAYdWAVB2sNApk+a7PNRpwhdldyQL8GQVJ89bBh0faqkNt4Yj4AiZ3vYGKo/
0cjxW/l1uFrH0rOOCFzvL0zfxUVbai6gohDUIGhegaf77NxBAhPP8VmAtgVPa7gy
cTpcJ1g9wUn5axG7SS95Nt6LqP8yv03HhMbsPjLgEOSo6M20y0BcUG1hf+rGuA3N
U7bUJFlDyP2DSw==
-----END CERTIFICATE-----
Generated at Sun May 11 13:19:44 2025 by rpki-client