Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
File: xqnvrGfjS7iro4n_jw16HFZUM_0.mft (raw, json)
Hash identifier: TK7wodiVuLg7kdDx8gyUoiCWgvll/zYmrwvr1KbR2gg=
Subject key identifier: 4A:03:5D:3E:85:CE:C7:38:F5:B4:20:93:2F:AF:4A:19:12:CA:5C:64
Authority key identifier: C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
Certificate issuer: /CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Certificate serial: 01969D511CC4C411BEBD296223366185CB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
Manifest number: 0C2F
Signing time: Sun 04 May 2025 22:01:00 +0000
Manifest this update: Sun 04 May 2025 22:01:00 +0000
Manifest next update: Mon 05 May 2025 22:01:00 +0000
Files and hashes: 1: xqnvrGfjS7iro4n_jw16HFZUM_0.crl (hash: 7vrQBUPMwy0HXKhxD2XIlxmwxjwSqykXBrLfpaD30sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:1c:c4:c4:11:be:bd:29:62:23:36:61:85:cb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a9efac67e34bb8aba389ff8f0d7a1c565433fd
Validity
Not Before: May 4 22:01:00 2025 GMT
Not After : May 5 22:01:00 2025 GMT
Subject: CN=4a035d3e85cec738f5b420932faf4a1912ca5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:52:2d:e9:1a:1a:1c:69:2f:72:92:e0:87:
f4:37:ef:a7:2d:06:1c:6c:5b:a1:d2:a7:f1:1b:ef:
07:f5:bc:f6:70:66:72:4e:a9:76:98:20:45:e2:13:
03:86:a6:8e:bd:bb:f8:54:f2:b0:e2:85:06:5c:9f:
58:2f:10:3e:89:a0:d1:78:44:0c:a9:87:0b:72:a1:
1c:88:12:b9:9f:b2:42:4b:3c:82:ad:dd:e5:55:5d:
4d:76:2d:0d:64:15:39:c6:c1:71:97:43:cb:5e:c1:
ab:c5:09:a0:e9:0a:aa:8a:c1:70:70:cc:2f:30:bb:
fa:1c:22:c6:a9:1c:2c:82:b7:99:e5:32:c2:69:88:
90:d3:9d:fb:75:9d:c1:ed:14:1d:a6:04:20:98:af:
29:35:58:8a:1d:98:3d:ae:e3:36:bb:51:c2:77:6e:
64:91:3d:49:1f:d6:c7:6e:3a:89:4a:71:22:96:dd:
af:32:4a:9d:5e:ec:13:e6:f8:3a:89:57:a7:bf:0e:
ff:b3:c2:09:32:36:dc:99:97:44:24:16:6f:5c:da:
b7:3c:b5:7e:57:b4:86:a3:ad:60:3c:bc:66:ed:45:
ca:97:dd:6d:ff:ee:f6:d2:4c:b8:3f:e6:d4:cc:e4:
15:0b:f0:31:10:c9:bb:40:37:39:46:bd:42:fa:05:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:5D:3E:85:CE:C7:38:F5:B4:20:93:2F:AF:4A:19:12:CA:5C:64
X509v3 Authority Key Identifier:
keyid:C6:A9:EF:AC:67:E3:4B:B8:AB:A3:89:FF:8F:0D:7A:1C:56:54:33:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqnvrGfjS7iro4n_jw16HFZUM_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ea71c4-3d5e-4e68-8779-dc33942ca197/1/xqnvrGfjS7iro4n_jw16HFZUM_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:79:2e:ac:85:cb:16:c9:3f:38:bc:d0:32:48:cd:02:db:
be:e9:fa:8e:81:c6:ad:a2:d5:3d:46:67:54:f6:84:ff:8f:c8:
8e:b0:e5:69:33:f6:88:92:d4:33:dd:c4:d6:55:e8:bf:e7:81:
99:ce:de:8e:61:4e:e7:65:65:70:48:34:14:bf:c4:ae:ca:3f:
9c:63:08:fe:40:1d:3f:1b:e7:4f:9d:55:9a:b2:24:be:4a:65:
9f:9f:ff:e7:8e:12:aa:1d:11:15:31:19:32:61:5f:97:0a:99:
b7:ac:c3:8c:8b:4b:11:5d:a9:02:11:90:17:b2:06:51:60:1a:
19:94:7f:07:f1:cd:70:b0:42:df:ae:71:a2:77:3f:e2:8d:0c:
bc:83:c9:03:30:14:c5:76:9a:61:b9:85:4b:1f:61:43:4d:b6:
c1:34:05:83:43:bf:3d:22:60:19:a5:ad:b3:86:f2:8d:8d:d0:
7c:6e:8a:69:17:e8:12:39:93:48:c3:96:3f:f6:a9:69:98:ea:
56:79:56:47:75:df:9b:8e:a4:1f:31:0c:03:d2:c8:53:58:07:
79:f9:2b:35:dd:a6:f2:95:e1:68:12:f2:3b:4a:8b:70:c6:82:
98:ab:a7:11:37:e1:4a:d6:81:05:b5:9c:68:14:b4:e5:d8:ff:
af:71:3e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadURzExBG+vSliIzZhhcsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTllZmFjNjdlMzRiYjhhYmEzODlmZjhmMGQ3YTFjNTY1
NDMzZmQwHhcNMjUwNTA0MjIwMTAwWhcNMjUwNTA1MjIwMTAwWjAzMTEwLwYDVQQD
Eyg0YTAzNWQzZTg1Y2VjNzM4ZjViNDIwOTMyZmFmNGExOTEyY2E1YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5dSLekaGhxpL3KS4If0N++nLQYc
bFuh0qfxG+8H9bz2cGZyTql2mCBF4hMDhqaOvbv4VPKw4oUGXJ9YLxA+iaDReEQM
qYcLcqEciBK5n7JCSzyCrd3lVV1Ndi0NZBU5xsFxl0PLXsGrxQmg6QqqisFwcMwv
MLv6HCLGqRwsgreZ5TLCaYiQ0537dZ3B7RQdpgQgmK8pNViKHZg9ruM2u1HCd25k
kT1JH9bHbjqJSnEilt2vMkqdXuwT5vg6iVenvw7/s8IJMjbcmZdEJBZvXNq3PLV+
V7SGo61gPLxm7UXKl91t/+720ky4P+bUzOQVC/AxEMm7QDc5Rr1C+gV9vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoDXT6Fzsc49bQgky+vShkSylxkMB8GA1UdIwQY
MBaAFMap76xn40u4q6OJ/48NehxWVDP9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFudnJHZmpTN2lybzRuX2p3MTZIRlpVTV8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYTcxYzQtM2Q1ZS00ZTY4LTg3Nzkt
ZGMzMzk0MmNhMTk3LzEveHFudnJHZmpTN2lybzRuX2p3MTZIRlpVTV8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYTcxYzQtM2Q1ZS00ZTY4LTg3NzktZGMzMzk0MmNhMTk3
LzEveHFudnJHZmpTN2lybzRuX2p3MTZIRlpVTV8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZ15LqyF
yxbJPzi80DJIzQLbvun6joHGraLVPUZnVPaE/4/IjrDlaTP2iJLUM93E1lXov+eB
mc7ejmFO52VlcEg0FL/Erso/nGMI/kAdPxvnT51VmrIkvkpln5//544Sqh0RFTEZ
MmFflwqZt6zDjItLEV2pAhGQF7IGUWAaGZR/B/HNcLBC365xonc/4o0MvIPJAzAU
xXaaYbmFSx9hQ022wTQFg0O/PSJgGaWts4byjY3QfG6KaRfoEjmTSMOWP/apaZjq
VnlWR3Xfm46kHzEMA9LIU1gHefkrNd2m8pXhaBLyO0qLcMaCmKunETfhStaBBbWc
aBS05dj/r3E+wQ==
-----END CERTIFICATE-----
Generated at Mon May 5 05:15:24 2025 by rpki-client