Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: YN6fLSHxkR6uX6FVSrNW34zoWvSduGLZKL7q8FxlpAU=
Subject key identifier: B4:9D:50:7A:C8:0A:24:4E:F8:16:EC:76:8A:DC:E8:BE:38:BE:AF:57
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0196C2DDF533FEF04DEBF07F76C8E8C84952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 1455
Signing time: Mon 12 May 2025 05:00:48 +0000
Manifest this update: Mon 12 May 2025 05:00:48 +0000
Manifest next update: Tue 13 May 2025 05:00:48 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: VzB5+nl6CczcaflgnnPVXSK/NUDaqcQbACQWsuYRz1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:f5:33:fe:f0:4d:eb:f0:7f:76:c8:e8:c8:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: May 12 05:00:48 2025 GMT
Not After : May 13 05:00:48 2025 GMT
Subject: CN=b49d507ac80a244ef816ec768adce8be38beaf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:85:53:d3:1c:bd:de:5d:8b:1a:df:1f:d1:
11:81:4a:1d:06:6c:3d:5b:fa:90:08:fd:69:f7:32:
94:55:7c:e3:61:38:4e:4f:90:ba:35:39:41:85:18:
07:98:64:45:81:0c:1f:b0:a6:3c:b4:dd:71:db:82:
6e:aa:bc:d0:7e:b1:50:e3:3d:81:bd:fe:ea:46:b6:
a6:f7:26:97:44:c2:4e:01:bc:5a:bb:64:cb:d4:4e:
9e:c6:c7:af:a6:09:5c:4e:99:c4:fc:82:ae:e2:2a:
e2:3d:8c:b2:0a:23:8e:6c:29:ff:e5:e4:00:d6:67:
79:4d:1f:c3:2e:1a:0d:96:ae:81:fa:0d:91:1d:1e:
f4:4c:08:4f:ba:e5:bd:2f:50:b4:d8:39:a1:82:88:
3e:a0:56:ea:9e:54:b4:7a:1f:1a:48:53:8c:65:fe:
44:f3:18:78:3a:89:a7:4b:a2:fa:39:c2:a8:ac:c9:
32:00:a3:2c:7f:bd:7f:8f:5a:e9:b4:d2:98:39:15:
b2:8a:ba:c2:89:c3:d4:c6:01:16:3d:d3:a3:5b:a4:
94:b9:03:12:d4:9b:bc:d2:e9:44:5a:6c:59:98:11:
63:af:ea:67:81:6e:17:c5:57:95:ad:6c:c0:c4:f7:
24:26:06:85:e4:97:83:ca:d4:f9:a5:9a:e1:19:e1:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:50:7A:C8:0A:24:4E:F8:16:EC:76:8A:DC:E8:BE:38:BE:AF:57
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:29:0d:57:5b:2c:6a:ed:0d:c0:8c:83:1a:48:61:9e:10:09:
ea:32:c6:62:f1:2e:00:2b:b7:95:d2:b1:00:58:e1:78:1e:59:
bb:13:26:17:35:1a:91:27:86:82:19:90:a0:80:6e:68:a6:9e:
69:82:9f:08:28:08:3e:d9:fc:48:3b:ec:19:fa:54:cd:07:29:
d4:37:ec:01:52:d4:f0:25:c4:dd:1b:cb:7b:aa:f5:ab:63:dc:
9c:7d:c7:b5:61:a4:9a:73:58:8e:bc:be:88:27:a1:5e:9b:37:
dd:11:a7:4c:bd:13:38:7a:51:34:49:28:11:b2:5e:fa:95:ce:
0d:d8:82:4a:13:95:99:4c:74:fe:67:d4:ff:86:ba:4c:f5:91:
84:e5:8f:14:6b:56:05:d2:4e:12:b0:22:ac:ce:f6:c4:af:88:
59:3f:f0:b7:17:a2:72:dd:a8:bb:8e:1d:75:b2:12:b0:75:85:
d9:83:69:f0:91:cd:f5:26:5b:14:56:00:a5:77:29:6c:d7:06:
98:94:e9:9d:c3:cb:63:49:b8:a6:f4:4a:0f:f4:e5:e2:83:a9:
ec:c8:69:f7:ee:17:c7:4d:d8:52:ae:3d:33:9d:34:ff:21:20:
a9:73:a5:f2:ea:5d:d7:4b:30:bd:9f:0c:e3:88:98:56:24:7a:
6d:de:bb:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3fUz/vBN6/B/dsjoyElSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2I0Y2YwYTc0NzFmMDAwZjhhNTZhMDQ5YjE2Mzk2N2Nj
M2JkOTkwHhcNMjUwNTEyMDUwMDQ4WhcNMjUwNTEzMDUwMDQ4WjAzMTEwLwYDVQQD
EyhiNDlkNTA3YWM4MGEyNDRlZjgxNmVjNzY4YWRjZThiZTM4YmVhZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+uFU9Mcvd5dixrfH9ERgUodBmw9
W/qQCP1p9zKUVXzjYThOT5C6NTlBhRgHmGRFgQwfsKY8tN1x24JuqrzQfrFQ4z2B
vf7qRram9yaXRMJOAbxau2TL1E6exsevpglcTpnE/IKu4iriPYyyCiOObCn/5eQA
1md5TR/DLhoNlq6B+g2RHR70TAhPuuW9L1C02Dmhgog+oFbqnlS0eh8aSFOMZf5E
8xh4OomnS6L6OcKorMkyAKMsf71/j1rptNKYORWyirrCicPUxgEWPdOjW6SUuQMS
1Ju80ulEWmxZmBFjr+pngW4XxVeVrWzAxPckJgaF5JeDytT5pZrhGeGMUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSdUHrICiRO+Bbsdorc6L44vq9XMB8GA1UdIwQY
MBaAFMU7TPCnRx8AD4pWoEmxY5Z8w72ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYjJiNzUtYmMwMi00YTZiLTk4ZDYt
ZDg0ZTZkM2FmOTc1LzEveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iYjJiNzUtYmMwMi00YTZiLTk4ZDYtZDg0ZTZkM2FmOTc1
LzEveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSkNV1ss
au0NwIyDGkhhnhAJ6jLGYvEuACu3ldKxAFjheB5ZuxMmFzUakSeGghmQoIBuaKae
aYKfCCgIPtn8SDvsGfpUzQcp1DfsAVLU8CXE3RvLe6r1q2PcnH3HtWGkmnNYjry+
iCehXps33RGnTL0TOHpRNEkoEbJe+pXODdiCShOVmUx0/mfU/4a6TPWRhOWPFGtW
BdJOErAirM72xK+IWT/wtxeict2ou44ddbISsHWF2YNp8JHN9SZbFFYApXcpbNcG
mJTpncPLY0m4pvRKD/Tl4oOp7Mhp9+4Xx03YUq49M500/yEgqXOl8upd10swvZ8M
44iYViR6bd67QA==
-----END CERTIFICATE-----
Generated at Mon May 12 11:08:55 2025 by rpki-client