Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: a5H0jvrNnFvn/mQZUWJuqpkmap296vkWo6BEWizaKz0=
Subject key identifier: 8E:53:8F:71:18:44:9B:A0:F0:7D:A8:B5:63:8E:5D:2F:85:CF:C9:A4
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 0196BB922AAA63E450C6A0BDF4BE3D32CA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 117B
Signing time: Sat 10 May 2025 19:00:40 +0000
Manifest this update: Sat 10 May 2025 19:00:40 +0000
Manifest next update: Sun 11 May 2025 19:00:40 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: Y0/otAecr4vLdO+XHkmmtl8vqx/JdArxTmqjRgNLhnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:2a:aa:63:e4:50:c6:a0:bd:f4:be:3d:32:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: May 10 19:00:40 2025 GMT
Not After : May 11 19:00:40 2025 GMT
Subject: CN=8e538f7118449ba0f07da8b5638e5d2f85cfc9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:e9:4d:85:64:d1:32:d7:cd:b8:13:56:ae:
4d:cb:86:81:09:e0:55:cd:55:ae:a4:a6:e7:c8:46:
3b:43:4a:cc:e7:d0:5a:6c:ad:1a:95:32:21:d7:d7:
f5:cf:80:a3:9c:91:39:c6:10:c0:ae:49:c2:46:70:
2e:a2:a5:fd:cc:3e:d8:9f:47:04:de:2f:07:a0:e9:
32:17:83:3b:61:47:99:25:2c:98:73:e2:55:dc:27:
a3:00:bc:ef:75:e9:f3:18:d4:b5:e9:44:78:93:f0:
32:42:b1:e7:c1:af:30:1b:5e:21:59:f1:a5:eb:0d:
20:f9:d5:cd:1c:19:dc:d5:69:04:54:44:31:3f:68:
bf:d3:e3:2f:33:d9:60:12:62:59:f2:7a:ba:53:0d:
9d:38:05:f1:62:0c:bf:81:05:77:39:a5:48:1c:f9:
43:45:31:1d:23:fc:8b:88:a8:dc:f9:50:08:64:a9:
f3:df:5b:b6:cc:00:31:ca:b2:0e:1f:b4:47:35:a4:
fd:84:a2:b7:01:54:5e:31:dc:53:28:3e:87:f6:43:
2e:b2:89:48:ca:60:83:30:7f:f9:a0:29:e0:ed:41:
90:03:f8:1d:6d:59:0a:57:b1:d3:df:be:7d:44:d0:
38:77:ec:c1:60:6c:0e:9c:04:29:b5:77:75:8d:b8:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:8F:71:18:44:9B:A0:F0:7D:A8:B5:63:8E:5D:2F:85:CF:C9:A4
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:7b:4d:d3:5b:4c:69:30:11:af:5e:ba:a2:b4:62:57:3e:
85:8f:40:c1:77:17:2d:bf:30:6d:c6:b2:67:eb:e4:8c:94:d1:
6a:f4:a5:a7:ae:85:1d:2f:e9:29:45:f5:cd:f5:ae:1a:9e:f2:
93:2e:9e:32:d5:28:bd:ab:e9:6c:fd:0e:d1:c6:6e:86:53:f7:
4a:6e:86:18:35:2b:d5:bf:a0:98:33:52:62:c5:69:60:6e:5d:
df:2d:51:d7:63:46:3c:6b:22:ec:9e:6f:a9:35:05:1d:9b:18:
64:36:e2:9b:8c:58:47:ec:f8:04:61:18:60:e1:5c:49:8f:bb:
40:aa:73:b8:6b:8a:d3:58:76:1c:d9:af:bf:c3:a3:35:2a:31:
c3:76:49:39:d6:69:53:9e:0c:8b:06:75:88:de:7d:2a:61:cd:
a2:e2:7c:b0:f0:8b:a3:10:80:58:23:f3:ce:c9:6c:18:5b:42:
74:10:14:fc:4e:2e:2e:05:36:15:94:a7:6b:a5:08:bf:d7:22:
09:fc:d2:be:f8:f8:12:4a:68:02:e8:1a:a3:18:25:d4:c5:26:
5f:82:74:c3:b6:70:27:11:69:86:44:cc:25:8d:d4:20:57:4c:
a5:40:4f:45:a8:13:d9:0d:d3:30:91:c0:c0:de:8e:09:fe:ac:
09:ef:27:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kiqqY+RQxqC99L49MsoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjUwNTEwMTkwMDQwWhcNMjUwNTExMTkwMDQwWjAzMTEwLwYDVQQD
Eyg4ZTUzOGY3MTE4NDQ5YmEwZjA3ZGE4YjU2MzhlNWQyZjg1Y2ZjOWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWvpTYVk0TLXzbgTVq5Ny4aBCeBV
zVWupKbnyEY7Q0rM59BabK0alTIh19f1z4CjnJE5xhDArknCRnAuoqX9zD7Yn0cE
3i8HoOkyF4M7YUeZJSyYc+JV3CejALzvdenzGNS16UR4k/AyQrHnwa8wG14hWfGl
6w0g+dXNHBnc1WkEVEQxP2i/0+MvM9lgEmJZ8nq6Uw2dOAXxYgy/gQV3OaVIHPlD
RTEdI/yLiKjc+VAIZKnz31u2zAAxyrIOH7RHNaT9hKK3AVReMdxTKD6H9kMusolI
ymCDMH/5oCng7UGQA/gdbVkKV7HT3759RNA4d+zBYGwOnAQptXd1jbhLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5Tj3EYRJug8H2otWOOXS+Fz8mkMB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgR7TdNb
TGkwEa9euqK0Ylc+hY9AwXcXLb8wbcayZ+vkjJTRavSlp66FHS/pKUX1zfWuGp7y
ky6eMtUovavpbP0O0cZuhlP3Sm6GGDUr1b+gmDNSYsVpYG5d3y1R12NGPGsi7J5v
qTUFHZsYZDbim4xYR+z4BGEYYOFcSY+7QKpzuGuK01h2HNmvv8OjNSoxw3ZJOdZp
U54MiwZ1iN59KmHNouJ8sPCLoxCAWCPzzslsGFtCdBAU/E4uLgU2FZSna6UIv9ci
CfzSvvj4EkpoAugaoxgl1MUmX4J0w7ZwJxFphkTMJY3UIFdMpUBPRagT2Q3TMJHA
wN6OCf6sCe8nRw==
-----END CERTIFICATE-----
Generated at Sun May 11 05:12:19 2025 by rpki-client