Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: 9MlI9LNOwIZd6YRQ06tiWa6T6o6B62RrxaCTdEI219U=
Subject key identifier: 4A:19:C1:CF:0B:49:95:31:65:2C:DC:E9:71:B6:CD:9F:5A:38:8B:00
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01969E9ABE43E4B298DA572FA35AD3F7B76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1436
Signing time: Mon 05 May 2025 04:01:03 +0000
Manifest this update: Mon 05 May 2025 04:01:03 +0000
Manifest next update: Tue 06 May 2025 04:01:03 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
3: WdMCPBRF3SYVyusOAvLG3Px1q0o.roa (hash: 0pYw3BfMJddkmV2iZ0Sn1GwTLycumrvuPn+XFayO/cA=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: Z7ptVp4Av2blBnNdzCRjx6tg0RkG06Sq0locBnsxt/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:be:43:e4:b2:98:da:57:2f:a3:5a:d3:f7:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: May 5 04:01:03 2025 GMT
Not After : May 6 04:01:03 2025 GMT
Subject: CN=4a19c1cf0b499531652cdce971b6cd9f5a388b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:8a:83:c4:33:a0:45:69:ee:df:b7:30:a4:
16:32:21:79:02:1b:ee:f4:df:80:af:e7:8a:49:df:
29:1a:1a:a0:9c:61:8c:dc:f3:c3:1c:f5:c3:a8:0a:
ce:f0:de:42:ee:c3:2a:ca:4d:40:91:eb:04:75:85:
29:f9:f2:db:81:b2:4b:9b:46:3c:35:5f:94:59:a1:
18:24:3a:35:59:92:07:b8:26:3c:10:f1:f3:0f:82:
7e:59:a1:a9:26:1a:22:a4:32:4b:af:4e:39:f9:7e:
89:6e:fd:4f:95:e9:b4:53:7d:29:c0:cc:d5:8d:a7:
a2:b7:4d:57:73:d9:38:e0:f7:ae:b6:50:3d:a3:7b:
a0:5a:a3:6c:ec:25:54:14:ca:84:de:ed:f9:29:60:
43:48:8b:41:53:d2:9c:73:3a:30:60:1d:06:e7:72:
0f:28:eb:68:58:c4:aa:84:8f:1c:2a:ad:1d:12:e0:
ef:a0:8c:b6:4e:8b:cf:05:bc:b9:40:26:2a:bd:24:
07:45:53:b4:d5:65:ab:d0:6a:c9:62:1a:c0:4c:07:
b7:0e:46:c0:f2:4a:62:22:83:20:54:8b:36:d3:65:
d4:6e:79:7d:98:e4:23:16:84:41:67:52:9f:f4:3d:
f6:ea:a1:a8:9b:36:b4:f8:9b:f3:9f:ca:3e:68:3d:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:C1:CF:0B:49:95:31:65:2C:DC:E9:71:B6:CD:9F:5A:38:8B:00
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a1:0d:6c:d1:c7:ab:69:6f:32:e0:15:8d:4b:18:21:68:bc:
ed:3a:da:23:fe:b6:09:78:25:6b:fd:a4:81:df:b6:b5:75:ab:
c9:f5:34:23:f9:74:5b:d5:38:33:c0:12:6a:42:a6:d8:db:e1:
22:dc:2b:1e:a2:8b:83:c5:d6:89:34:72:b9:4e:ab:5c:e5:3d:
a0:0f:5e:92:bc:07:e6:70:60:66:d8:ca:77:23:89:3e:45:11:
20:de:22:4c:a3:38:cc:ca:f1:f6:f0:4d:b1:0f:d9:0b:f9:20:
01:70:d8:cb:2a:73:01:c2:9a:d9:10:95:1f:f0:ab:2e:e2:7b:
7a:6d:02:cf:99:21:52:8a:3b:94:4d:9b:dd:8f:42:3e:63:16:
4c:ad:5d:1d:8d:3c:23:91:b7:5f:64:d8:69:88:2d:b1:17:1c:
46:10:d1:8f:af:a2:3f:49:d7:91:04:a7:ad:50:fd:df:b5:e0:
49:35:4d:be:20:f7:15:10:a8:f1:7e:ae:e4:d6:8b:79:2f:65:
b4:d3:18:74:d7:b0:1a:01:76:7d:9d:a9:2d:76:95:65:33:87:
71:f8:03:6f:86:6d:94:ee:19:c5:43:b6:24:d7:ae:c4:53:d6:
e6:95:c9:f4:ad:10:71:1a:fa:30:dd:a8:37:b2:d0:8c:84:a9:
f6:9a:97:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemr5D5LKY2lcvo1rT97drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzJhOTI1YzU1ZjFkNGU2ZTQwYzEwZjRlOGUwMTliNDgz
YzFkNTAwHhcNMjUwNTA1MDQwMTAzWhcNMjUwNTA2MDQwMTAzWjAzMTEwLwYDVQQD
Eyg0YTE5YzFjZjBiNDk5NTMxNjUyY2RjZTk3MWI2Y2Q5ZjVhMzg4YjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNKKg8QzoEVp7t+3MKQWMiF5Ahvu
9N+Ar+eKSd8pGhqgnGGM3PPDHPXDqArO8N5C7sMqyk1AkesEdYUp+fLbgbJLm0Y8
NV+UWaEYJDo1WZIHuCY8EPHzD4J+WaGpJhoipDJLr045+X6Jbv1Plem0U30pwMzV
jaeit01Xc9k44PeutlA9o3ugWqNs7CVUFMqE3u35KWBDSItBU9KcczowYB0G53IP
KOtoWMSqhI8cKq0dEuDvoIy2TovPBby5QCYqvSQHRVO01WWr0GrJYhrATAe3DkbA
8kpiIoMgVIs202XUbnl9mOQjFoRBZ1Kf9D326qGomza0+Jvzn8o+aD0ggwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoZwc8LSZUxZSzc6XG2zZ9aOIsAMB8GA1UdIwQY
MBaAFFwyqSXFXx1ObkDBD06OAZtIPB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjIt
NDUzNzc0MThmYmIyLzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kM2M4ZjctZmY4ZC00MmI4LWE3NjItNDUzNzc0MThmYmIy
LzEvWERLcEpjVmZIVTV1UU1FUFRvNEJtMGc4SFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6ENbNHH
q2lvMuAVjUsYIWi87TraI/62CXgla/2kgd+2tXWryfU0I/l0W9U4M8ASakKm2Nvh
ItwrHqKLg8XWiTRyuU6rXOU9oA9ekrwH5nBgZtjKdyOJPkURIN4iTKM4zMrx9vBN
sQ/ZC/kgAXDYyypzAcKa2RCVH/CrLuJ7em0Cz5khUoo7lE2b3Y9CPmMWTK1dHY08
I5G3X2TYaYgtsRccRhDRj6+iP0nXkQSnrVD937XgSTVNviD3FRCo8X6u5NaLeS9l
tNMYdNewGgF2fZ2pLXaVZTOHcfgDb4ZtlO4ZxUO2JNeuxFPW5pXJ9K0QcRr6MN2o
N7LQjISp9pqXdw==
-----END CERTIFICATE-----
Generated at Mon May 5 08:43:05 2025 by rpki-client