Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: sy+V0JDx8CRfxxtqlU7HBQmhK5Okkf8NDwt8IzcNQt0=
Subject key identifier: 74:02:4A:15:C3:CE:96:40:A4:D5:E5:FC:26:9B:B4:0B:40:16:C2:C3
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 0196C2DDB34ACF95C7239D232B7CFA62EBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 05:00:31 +0000
Manifest this update: Mon 12 May 2025 05:00:31 +0000
Manifest next update: Tue 13 May 2025 05:00:31 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: iYBAO1k4F9bY7Ud5IiLUB6XjT7lOHMW9ZHiyaCcj3ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:b3:4a:cf:95:c7:23:9d:23:2b:7c:fa:62:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: May 12 05:00:31 2025 GMT
Not After : May 13 05:00:31 2025 GMT
Subject: CN=74024a15c3ce9640a4d5e5fc269bb40b4016c2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:bd:05:74:1e:49:07:26:94:bc:05:09:f9:
0f:97:a1:75:4e:f4:7e:80:69:8a:98:2e:12:13:7b:
2b:9f:ca:fe:f6:5a:46:82:4d:b2:fa:49:28:6d:2c:
5f:24:05:12:3c:e1:c2:5a:11:8b:cb:f4:de:54:c5:
81:dd:eb:6d:1b:fc:87:5b:13:f6:b9:35:e9:67:fb:
b2:29:81:e3:66:62:60:c3:55:ac:09:37:28:e4:7a:
1e:4f:53:57:51:bd:bc:5f:9d:b9:3f:b0:d6:1b:51:
d6:fa:0b:6f:85:ea:4e:b9:b1:e1:05:ce:b3:fb:01:
35:9a:36:40:30:cf:91:6c:88:eb:d4:1b:51:65:4d:
0f:40:46:c3:68:d4:e0:3b:00:57:15:33:64:ef:7d:
ff:9c:56:a4:cb:35:d8:90:f9:81:f9:59:38:89:a6:
82:0c:3d:0e:4c:79:e2:2d:74:fa:1d:68:9f:8a:ed:
78:44:99:b5:81:2a:bd:40:7b:d7:d3:62:a9:cd:39:
be:d4:e4:32:5c:3e:72:f6:c5:c2:32:5d:f8:11:c5:
f1:fc:a9:f6:58:0e:76:b5:77:a4:34:b4:f0:4b:e4:
10:a8:13:25:65:6b:39:5e:20:43:e1:ff:c2:bf:d5:
7c:b7:70:ab:5c:37:68:1a:0c:bf:0f:bd:93:15:43:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:4A:15:C3:CE:96:40:A4:D5:E5:FC:26:9B:B4:0B:40:16:C2:C3
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:19:4b:4a:24:cc:c0:6a:db:ec:9a:a0:de:ac:42:ef:8a:
ae:f9:67:73:c0:8d:60:31:6f:05:57:12:c1:f9:0b:f9:cb:45:
b4:d6:83:6a:d5:ea:39:8c:94:69:35:a1:43:b0:a8:e3:77:86:
5d:59:9c:25:a1:70:20:90:c8:02:19:7e:05:e5:f9:6d:4d:e1:
60:8a:e7:d3:59:95:68:ce:d5:ce:8a:54:1d:d7:d8:5f:86:3d:
ca:d3:e2:19:b1:9b:b3:a9:bc:44:f7:34:24:cc:43:ab:80:d5:
5d:6d:b0:a6:69:fc:4f:af:3b:78:eb:a2:90:3c:f7:aa:30:23:
52:91:df:e3:26:5c:c9:9b:4f:32:4c:f9:4c:e3:ca:20:88:b1:
93:fa:14:8f:ed:8a:2f:f9:a4:9c:b1:54:60:b0:f5:9c:54:0d:
e7:5b:af:c8:04:b7:ac:c4:26:b6:24:a9:53:46:e9:fa:ec:1a:
d8:50:ab:a8:0b:4d:e5:8c:a8:78:df:5e:8a:5a:07:b2:24:5b:
32:c2:71:19:77:2d:28:13:92:4d:7e:b0:68:48:a9:31:51:95:
d7:1b:71:a9:e9:02:c6:0a:00:e8:0a:96:53:df:f8:b0:7f:eb:
50:32:4c:6c:88:ca:31:60:5c:c5:71:29:6e:d4:d4:e5:e8:cc:
22:f7:38:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3bNKz5XHI50jK3z6YuvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OWNlYjEyNDA4NDRjZGU4YTE2ODg5N2U0N2MxZGY1ZDZl
Y2JmMjEwHhcNMjUwNTEyMDUwMDMxWhcNMjUwNTEzMDUwMDMxWjAzMTEwLwYDVQQD
Eyg3NDAyNGExNWMzY2U5NjQwYTRkNWU1ZmMyNjliYjQwYjQwMTZjMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7K9BXQeSQcmlLwFCfkPl6F1TvR+
gGmKmC4SE3srn8r+9lpGgk2y+kkobSxfJAUSPOHCWhGLy/TeVMWB3ettG/yHWxP2
uTXpZ/uyKYHjZmJgw1WsCTco5HoeT1NXUb28X525P7DWG1HW+gtvhepOubHhBc6z
+wE1mjZAMM+RbIjr1BtRZU0PQEbDaNTgOwBXFTNk733/nFakyzXYkPmB+Vk4iaaC
DD0OTHniLXT6HWifiu14RJm1gSq9QHvX02KpzTm+1OQyXD5y9sXCMl34EcXx/Kn2
WA52tXekNLTwS+QQqBMlZWs5XiBD4f/Cv9V8t3CrXDdoGgy/D72TFUOSwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQCShXDzpZApNXl/CabtAtAFsLDMB8GA1UdIwQY
MBaAFMac6xJAhEzeihaIl+R8HfXW7L8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMt
OGJlOTU3MWViMTBkLzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wZmJkOGQtODIwZC00OTc5LTgxYTMtOGJlOTU3MWViMTBk
LzEveHB6ckVrQ0VUTjZLRm9pWDVId2Q5ZGJzdnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlogZS0ok
zMBq2+yaoN6sQu+Krvlnc8CNYDFvBVcSwfkL+ctFtNaDatXqOYyUaTWhQ7Co43eG
XVmcJaFwIJDIAhl+BeX5bU3hYIrn01mVaM7VzopUHdfYX4Y9ytPiGbGbs6m8RPc0
JMxDq4DVXW2wpmn8T687eOuikDz3qjAjUpHf4yZcyZtPMkz5TOPKIIixk/oUj+2K
L/mknLFUYLD1nFQN51uvyAS3rMQmtiSpU0bp+uwa2FCrqAtN5YyoeN9eiloHsiRb
MsJxGXctKBOSTX6waEipMVGV1xtxqekCxgoA6AqWU9/4sH/rUDJMbIjKMWBcxXEp
btTU5ejMIvc4/Q==
-----END CERTIFICATE-----
Generated at Mon May 12 07:39:45 2025 by rpki-client