Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: Ws5r4x4nhef3rKgUewXcsRyI81llfTlkIIPA9nPksOs=
Subject key identifier: C0:00:23:D6:F3:85:35:BB:E8:88:19:AB:45:68:FE:A8:5E:A6:69:F8
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0196C0139B82E0E70C3D7AB2B1F57A79EE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 07FF
Signing time: Sun 11 May 2025 16:00:32 +0000
Manifest this update: Sun 11 May 2025 16:00:32 +0000
Manifest next update: Mon 12 May 2025 16:00:32 +0000
Files and hashes: 1: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: k5DH5Wm6V3+vWLMuUfpjgQZ9x5lhNg/iiTzeXrg6DbY=)
2: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:9b:82:e0:e7:0c:3d:7a:b2:b1:f5:7a:79:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: May 11 16:00:32 2025 GMT
Not After : May 12 16:00:32 2025 GMT
Subject: CN=c00023d6f38535bbe88819ab4568fea85ea669f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:48:92:17:08:97:20:2e:cd:cf:4f:a8:c2:
ac:8a:e5:6d:9b:85:d8:96:b7:37:f0:2c:bf:ef:2c:
6b:bb:1b:85:66:69:0e:51:71:18:0d:5f:21:b0:24:
c5:25:55:61:80:99:33:ea:d4:6a:d9:4f:2d:1d:b2:
af:c2:bb:43:2f:a3:b0:f9:d0:be:53:0f:e5:71:69:
b0:4c:85:00:e0:43:66:60:7e:e8:03:2f:ab:2b:dc:
ad:db:de:fb:19:74:86:48:43:fc:04:e1:42:54:f6:
be:04:4f:3d:08:0e:3e:6b:bb:87:8f:9b:5e:25:64:
b9:f6:1c:e3:ba:53:c8:b2:d3:0b:96:f0:ac:53:27:
f3:e7:6c:ad:fa:ed:df:69:df:5a:c8:3b:d1:7c:dc:
24:b3:97:94:2c:a1:97:39:18:23:32:be:9c:af:2c:
75:8a:b2:50:51:a8:d8:12:9c:60:94:40:2a:f7:97:
21:d7:c3:06:90:9a:23:75:11:8a:f0:2f:eb:6a:80:
7f:df:47:20:55:4e:5f:29:42:db:fe:c0:5f:d4:fe:
6f:54:af:0e:d0:dd:b9:8c:30:1e:bd:5e:2a:41:fc:
d3:70:8e:b5:9c:70:0a:bd:2f:86:92:00:ae:f6:b9:
17:9c:7c:f7:8e:62:66:a2:8c:4e:4c:7c:cd:5e:e6:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:00:23:D6:F3:85:35:BB:E8:88:19:AB:45:68:FE:A8:5E:A6:69:F8
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5f:e0:2b:18:3a:e6:5b:79:ac:c3:6b:97:17:70:6c:14:a3:
bb:39:38:72:72:e6:9d:35:e1:07:94:64:a0:bb:ba:4d:82:ef:
ae:af:3e:64:3d:55:ca:5c:0c:cb:2b:34:cb:3d:31:9f:84:88:
19:3a:e1:51:57:99:9d:4d:15:3b:9a:77:80:10:16:2f:83:78:
9c:dc:8a:a6:11:92:de:27:5e:7a:71:28:26:af:c0:ba:18:c5:
c4:f5:10:9e:a0:ab:1d:75:45:3e:50:0d:bc:b5:18:59:60:d5:
4d:2b:b3:e8:90:39:5a:07:d4:78:41:22:a8:88:b4:d4:5e:ec:
80:43:25:ff:09:76:58:3e:07:38:7a:f9:69:02:3a:b7:9c:28:
50:7d:90:50:98:42:a0:59:7b:63:a1:59:18:fd:f7:46:c4:20:
cc:c0:77:64:95:4a:97:11:8a:62:3e:21:00:bd:30:7a:01:65:
26:31:8b:f6:f0:c4:11:fd:db:7c:10:cf:22:a4:6a:b6:64:d8:
d0:76:a2:ff:b3:37:db:a9:c4:8d:92:d8:04:54:18:c4:db:4b:
51:be:da:b3:65:fb:1c:fb:82:2d:06:3b:eb:e9:04:ca:87:ac:
e6:7c:03:8e:27:b8:35:79:c0:c4:ae:e8:35:01:9f:52:44:02:
d6:d3:49:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE5uC4OcMPXqysfV6ee5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl
NzkzNWEwHhcNMjUwNTExMTYwMDMyWhcNMjUwNTEyMTYwMDMyWjAzMTEwLwYDVQQD
EyhjMDAwMjNkNmYzODUzNWJiZTg4ODE5YWI0NTY4ZmVhODVlYTY2OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4xIkhcIlyAuzc9PqMKsiuVtm4XY
lrc38Cy/7yxruxuFZmkOUXEYDV8hsCTFJVVhgJkz6tRq2U8tHbKvwrtDL6Ow+dC+
Uw/lcWmwTIUA4ENmYH7oAy+rK9yt2977GXSGSEP8BOFCVPa+BE89CA4+a7uHj5te
JWS59hzjulPIstMLlvCsUyfz52yt+u3fad9ayDvRfNwks5eULKGXORgjMr6cryx1
irJQUajYEpxglEAq95ch18MGkJojdRGK8C/raoB/30cgVU5fKULb/sBf1P5vVK8O
0N25jDAevV4qQfzTcI61nHAKvS+GkgCu9rkXnHz3jmJmooxOTHzNXualAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAAI9bzhTW76IgZq0Vo/qhepmn4MB8GA1UdIwQY
MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt
MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw
LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1/gKxg6
5lt5rMNrlxdwbBSjuzk4cnLmnTXhB5RkoLu6TYLvrq8+ZD1VylwMyys0yz0xn4SI
GTrhUVeZnU0VO5p3gBAWL4N4nNyKphGS3ideenEoJq/AuhjFxPUQnqCrHXVFPlAN
vLUYWWDVTSuz6JA5WgfUeEEiqIi01F7sgEMl/wl2WD4HOHr5aQI6t5woUH2QUJhC
oFl7Y6FZGP33RsQgzMB3ZJVKlxGKYj4hAL0wegFlJjGL9vDEEf3bfBDPIqRqtmTY
0Hai/7M326nEjZLYBFQYxNtLUb7as2X7HPuCLQY76+kEyoes5nwDjie4NXnAxK7o
NQGfUkQC1tNJng==
-----END CERTIFICATE-----
Generated at Sun May 11 19:07:51 2025 by rpki-client