Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: QENlHLqzHtDLJzLvAPamjNqAHERvjHs/wS0KUBDekaU=
Subject key identifier: 08:F4:3D:8E:94:45:C6:DA:39:55:3F:97:83:BC:95:04:71:C3:E2:40
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 0196BCA46DCEA715C1E788FCC452A9A82E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 05D6
Signing time: Sun 11 May 2025 00:00:14 +0000
Manifest this update: Sun 11 May 2025 00:00:14 +0000
Manifest next update: Mon 12 May 2025 00:00:14 +0000
Files and hashes: 1: Cj_iWDZ0D1TK46uScrNJsyJfZ60.roa (hash: 2EItGET7KN5xYUnaftxX5tZU9l5ZOP9oj5BYiCLbSjk=)
2: TX8cnXXbIgaO3aE68x88MMtMTTI.roa (hash: FeZgp0BLqJdm0jiS+/GIZyqTIXPtIBPoCgnCgn78SEQ=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: aP9V50vHq2W1MToNsFawjWpLSw0TmTe4scMSQs2xtpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:6d:ce:a7:15:c1:e7:88:fc:c4:52:a9:a8:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: May 11 00:00:14 2025 GMT
Not After : May 12 00:00:14 2025 GMT
Subject: CN=08f43d8e9445c6da39553f9783bc950471c3e240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:29:48:2b:97:18:1a:7d:73:c1:43:41:29:
a4:c4:51:48:71:e5:6b:f4:9f:5f:31:a8:32:c4:92:
92:48:02:ae:d9:74:af:3a:e4:ff:40:e1:68:9f:25:
6e:9d:9b:b1:e4:16:6f:da:95:7c:46:7e:6d:21:ed:
38:43:19:e2:e3:fd:01:6f:6d:30:ba:a9:1f:26:41:
b6:23:33:a6:39:43:47:87:23:8c:7f:45:f3:12:5c:
49:47:65:44:26:88:57:a2:a6:f2:cb:04:67:0f:38:
02:76:90:fe:6c:39:5d:ad:5d:bd:28:5e:65:a8:2a:
db:da:55:16:e7:4d:b3:f3:5e:51:e6:91:8b:fd:76:
49:dc:a6:d7:1c:a7:50:97:3b:05:d5:4e:6c:fe:0e:
51:e3:34:30:68:f6:15:3c:56:dc:45:37:1c:46:f2:
00:55:25:b9:da:db:0d:29:c3:45:95:22:06:5c:1c:
8b:7d:03:cf:90:6b:d9:18:1a:9d:ff:33:89:7e:f0:
63:5c:72:e6:2c:80:31:ec:8e:bb:53:44:13:68:ad:
f3:77:54:63:e2:1f:a5:de:d9:4e:8e:40:76:db:4d:
89:b4:a0:b9:54:4e:8e:1a:2e:4b:80:c8:ee:9d:9d:
08:ca:2f:63:15:24:fc:d3:52:75:6e:34:ec:00:ca:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:3D:8E:94:45:C6:DA:39:55:3F:97:83:BC:95:04:71:C3:E2:40
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ce:13:73:e4:bf:be:28:ef:2a:dc:15:2c:42:51:7f:6a:6e:
4a:a7:b0:18:0e:a8:77:ed:fe:da:16:04:f7:6c:6f:58:4f:f3:
e6:f3:7d:80:2c:03:79:33:9d:8d:05:2d:32:1f:6e:2f:d1:53:
46:ce:0e:86:b7:b1:aa:62:b6:e9:03:09:21:a3:10:22:fe:6a:
f6:fe:49:88:1c:c9:ab:9f:9b:4a:26:65:b7:06:54:98:ff:16:
5d:58:72:a6:3e:3c:6c:4a:57:61:18:5a:31:66:7c:29:b2:32:
6f:d9:82:b0:15:75:a0:8b:20:a6:fd:51:31:1d:42:35:e4:f8:
02:44:72:cb:a5:38:cc:0b:31:7c:ac:68:74:fe:38:c6:fb:a2:
e1:af:86:fb:b5:ab:35:f5:20:49:1f:00:23:31:8c:05:a1:0e:
fc:ae:fd:74:23:14:85:80:e2:2a:89:72:14:87:d9:e9:c4:56:
58:34:65:7a:9b:f8:0c:02:46:4d:b0:26:d8:fa:31:8b:2e:cb:
9e:9d:92:01:ae:f7:f1:41:63:ba:bd:42:5f:84:b4:b2:7e:ea:
3e:40:18:ee:6d:12:5f:5f:26:1d:28:74:a3:c4:93:98:11:00:
39:0a:b8:94:de:2a:86:40:7f:0d:23:3c:7e:80:4d:80:e0:0b:
41:d2:82:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pG3OpxXB54j8xFKpqC5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmE1MWMwNzE0ODg0M2Q0MDA4MDViNDAzMzVlNzJkMzI0
MjY1ZjEwHhcNMjUwNTExMDAwMDE0WhcNMjUwNTEyMDAwMDE0WjAzMTEwLwYDVQQD
EygwOGY0M2Q4ZTk0NDVjNmRhMzk1NTNmOTc4M2JjOTUwNDcxYzNlMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaEpSCuXGBp9c8FDQSmkxFFIceVr
9J9fMagyxJKSSAKu2XSvOuT/QOFonyVunZux5BZv2pV8Rn5tIe04Qxni4/0Bb20w
uqkfJkG2IzOmOUNHhyOMf0XzElxJR2VEJohXoqbyywRnDzgCdpD+bDldrV29KF5l
qCrb2lUW502z815R5pGL/XZJ3KbXHKdQlzsF1U5s/g5R4zQwaPYVPFbcRTccRvIA
VSW52tsNKcNFlSIGXByLfQPPkGvZGBqd/zOJfvBjXHLmLIAx7I67U0QTaK3zd1Rj
4h+l3tlOjkB2202JtKC5VE6OGi5LgMjunZ0Iyi9jFST801J1bjTsAMrOOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj0PY6URcbaOVU/l4O8lQRxw+JAMB8GA1UdIwQY
MBaAFMW6UcBxSIQ9QAgFtAM15y0yQmXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEt
OWZmNWMxYTNiMGUwLzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kYjYzYjUtMWY5Ni00ZjAwLTg2NWEtOWZmNWMxYTNiMGUw
LzEveGJwUndIRkloRDFBQ0FXMEF6WG5MVEpDWmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC84Tc+S/
vijvKtwVLEJRf2puSqewGA6od+3+2hYE92xvWE/z5vN9gCwDeTOdjQUtMh9uL9FT
Rs4OhrexqmK26QMJIaMQIv5q9v5JiBzJq5+bSiZltwZUmP8WXVhypj48bEpXYRha
MWZ8KbIyb9mCsBV1oIsgpv1RMR1CNeT4AkRyy6U4zAsxfKxodP44xvui4a+G+7Wr
NfUgSR8AIzGMBaEO/K79dCMUhYDiKolyFIfZ6cRWWDRlepv4DAJGTbAm2Poxiy7L
np2SAa738UFjur1CX4S0sn7qPkAY7m0SX18mHSh0o8STmBEAOQq4lN4qhkB/DSM8
foBNgOALQdKCHg==
-----END CERTIFICATE-----
Generated at Sun May 11 02:29:56 2025 by rpki-client