Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
File: xnp-TG1V61E8VFdgqP9lba3wuNc.mft (raw, json)
Hash identifier: l0n58klt2NcHcm90ZToU1pAtE6F9TNMKU+TLdRTwnj4=
Subject key identifier: E2:E4:2A:F4:9C:07:43:33:F0:F1:DF:ED:0D:67:40:CC:78:7B:55:BD
Authority key identifier: C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
Certificate issuer: /CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Certificate serial: 0196C5A853C451E21AA026DC03B60C7CDFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
Manifest number: 0102
Signing time: Mon 12 May 2025 18:01:05 +0000
Manifest this update: Mon 12 May 2025 18:01:05 +0000
Manifest next update: Tue 13 May 2025 18:01:05 +0000
Files and hashes: 1: xnp-TG1V61E8VFdgqP9lba3wuNc.crl (hash: 1EyS0x/HpNXpyTL8qRXYdwBNL6PAbfl3KFHw1WNbeQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:53:c4:51:e2:1a:a0:26:dc:03:b6:0c:7c:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Validity
Not Before: May 12 18:01:05 2025 GMT
Not After : May 13 18:01:05 2025 GMT
Subject: CN=e2e42af49c074333f0f1dfed0d6740cc787b55bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:4d:aa:d2:86:5f:e2:fb:87:1f:51:3c:49:
58:34:75:56:3b:77:8b:97:37:28:23:69:2c:f1:e5:
6f:ba:ad:cc:71:98:11:d7:bb:a4:49:61:50:40:d4:
64:dd:4b:fa:20:a8:0d:3d:a3:29:43:62:b7:77:82:
db:f2:5c:d8:d2:9f:19:84:e5:e1:85:d8:23:d2:a6:
c2:3e:0b:46:a9:6f:c3:fd:31:e7:5c:c0:96:9d:d5:
4a:9e:7b:8c:2d:04:d8:fe:14:b3:67:16:a1:bb:3a:
af:de:25:1e:a4:fc:05:54:f8:da:8e:be:f8:1e:66:
2c:88:f6:03:ba:52:4e:1e:68:3f:73:d1:fb:13:16:
b6:e1:f6:3c:fe:bf:70:43:53:d9:8f:e4:8c:d2:8f:
0f:80:47:d4:5f:d3:0a:d1:04:02:5b:c9:94:5d:41:
54:cf:68:a2:39:01:49:be:4e:01:66:74:37:7b:58:
59:f0:76:9c:77:1b:0c:f6:a8:f5:4e:a8:ae:4e:61:
25:10:49:30:48:02:92:c0:cd:d3:a9:e7:37:77:ad:
f8:59:64:99:59:1c:4d:d4:ca:01:20:63:98:72:f4:
eb:ee:90:a3:76:f5:1f:94:46:24:52:73:35:cf:10:
ef:8a:08:46:64:51:a0:ee:5e:4f:6b:41:e8:94:36:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E4:2A:F4:9C:07:43:33:F0:F1:DF:ED:0D:67:40:CC:78:7B:55:BD
X509v3 Authority Key Identifier:
keyid:C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:89:5c:f3:40:f7:91:92:0c:17:51:39:65:c6:f0:d4:6f:ff:
5a:89:93:22:72:fe:e2:ac:a8:af:44:da:dc:fb:ed:0d:e4:7a:
cb:3d:b3:5c:d1:3b:27:b9:06:d9:40:ec:5b:b3:89:39:3b:46:
4c:f9:3d:f1:7f:88:dc:bd:d7:0e:12:02:a4:e1:05:cc:6d:c4:
3a:88:39:01:f9:5b:b5:96:4a:12:c6:4d:f4:bc:f9:85:f4:6e:
86:16:f7:51:43:b7:9a:4a:47:ef:25:1c:47:83:cd:91:e4:56:
f3:ef:4f:6b:37:bc:77:3a:c4:58:5b:a6:fc:ec:20:a4:c9:48:
58:6c:e2:a0:c5:3d:61:ac:43:32:93:f6:60:81:8b:80:ab:1d:
9b:b6:55:49:f9:cc:c1:e4:99:d8:9d:ed:44:ec:0d:b4:3c:9a:
85:e2:b7:c2:2b:94:7b:67:28:3b:9e:39:21:a2:c7:0f:01:1e:
a2:78:b2:bc:52:0c:06:d4:25:2f:ca:87:67:e1:64:69:ea:b0:
f1:84:00:36:94:46:89:89:13:bc:61:2f:d2:42:e1:90:53:f3:
93:1b:0c:9d:49:73:f2:95:5f:1b:fc:f6:81:6d:ae:17:61:5e:
a6:8c:f0:e5:f5:4d:03:7f:f1:f6:d6:42:18:f5:b8:76:58:24:
15:c6:7c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqFPEUeIaoCbcA7YMfN+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2E3ZTRjNmQ1NWViNTEzYzU0NTc2MGE4ZmY2NTZkYWRm
MGI4ZDcwHhcNMjUwNTEyMTgwMTA1WhcNMjUwNTEzMTgwMTA1WjAzMTEwLwYDVQQD
EyhlMmU0MmFmNDljMDc0MzMzZjBmMWRmZWQwZDY3NDBjYzc4N2I1NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoRNqtKGX+L7hx9RPElYNHVWO3eL
lzcoI2ks8eVvuq3McZgR17ukSWFQQNRk3Uv6IKgNPaMpQ2K3d4Lb8lzY0p8ZhOXh
hdgj0qbCPgtGqW/D/THnXMCWndVKnnuMLQTY/hSzZxahuzqv3iUepPwFVPjajr74
HmYsiPYDulJOHmg/c9H7Exa24fY8/r9wQ1PZj+SM0o8PgEfUX9MK0QQCW8mUXUFU
z2iiOQFJvk4BZnQ3e1hZ8HacdxsM9qj1TqiuTmElEEkwSAKSwM3Tqec3d634WWSZ
WRxN1MoBIGOYcvTr7pCjdvUflEYkUnM1zxDvighGZFGg7l5Pa0HolDYm8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLkKvScB0Mz8PHf7Q1nQMx4e1W9MB8GA1UdIwQY
MBaAFMZ6fkxtVetRPFRXYKj/ZW2t8LjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG5wLVRHMVY2MUU4VkZkZ3FQOWxiYTN3dU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wOGNkYjctNDE2ZS00M2E2LWEyNzYt
YTAzODk2MDI0NzJmLzEveG5wLVRHMVY2MUU4VkZkZ3FQOWxiYTN3dU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wOGNkYjctNDE2ZS00M2E2LWEyNzYtYTAzODk2MDI0NzJm
LzEveG5wLVRHMVY2MUU4VkZkZ3FQOWxiYTN3dU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYlc80D3
kZIMF1E5Zcbw1G//WomTInL+4qyor0Ta3PvtDeR6yz2zXNE7J7kG2UDsW7OJOTtG
TPk98X+I3L3XDhICpOEFzG3EOog5AflbtZZKEsZN9Lz5hfRuhhb3UUO3mkpH7yUc
R4PNkeRW8+9Paze8dzrEWFum/OwgpMlIWGzioMU9YaxDMpP2YIGLgKsdm7ZVSfnM
weSZ2J3tROwNtDyaheK3wiuUe2coO545IaLHDwEeoniyvFIMBtQlL8qHZ+Fkaeqw
8YQANpRGiYkTvGEv0kLhkFPzkxsMnUlz8pVfG/z2gW2uF2Fepozw5fVNA3/x9tZC
GPW4dlgkFcZ83w==
-----END CERTIFICATE-----
Generated at Mon May 12 20:54:15 2025 by rpki-client