Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: RvKXplSYxWr3gyXWvydyBvcTgJ8GLvxCRl3taO6nLhU=
Subject key identifier: 17:6A:B6:EF:85:D0:50:64:AF:72:A1:83:52:25:99:5C:B9:A7:39:62
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 0196C64C9E0CC1BA19D48713E52DF514F403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 0523
Signing time: Mon 12 May 2025 21:00:32 +0000
Manifest this update: Mon 12 May 2025 21:00:32 +0000
Manifest next update: Tue 13 May 2025 21:00:32 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: kqV7keEe6D4XhV2wxaGH0gaMbeOTuD7p7vaL0zfHEyk=)
2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:9e:0c:c1:ba:19:d4:87:13:e5:2d:f5:14:f4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: May 12 21:00:32 2025 GMT
Not After : May 13 21:00:32 2025 GMT
Subject: CN=176ab6ef85d05064af72a1835225995cb9a73962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:9a:d7:75:02:02:12:63:42:dd:d6:ff:e4:
c9:a5:00:b5:9d:00:38:88:34:dd:e4:12:5c:89:85:
9f:79:87:07:28:75:46:e6:9e:da:a6:1a:19:b8:1d:
f0:27:04:cd:e5:a4:25:bd:e5:b7:67:b3:9a:1c:db:
67:80:52:ba:eb:f6:d2:80:75:d8:06:e5:86:4d:36:
eb:99:2d:ad:9e:36:44:f4:43:17:32:53:de:c8:25:
42:51:89:30:98:8b:64:ca:2e:50:8d:80:f8:c6:05:
80:e8:8c:40:80:dd:b5:bd:c3:08:25:1a:9a:77:2c:
75:77:00:f8:e2:16:ba:07:40:e4:94:5c:0e:06:cd:
4b:be:97:15:54:60:10:82:d6:8d:51:c4:0c:ea:ba:
bb:5a:71:dd:07:f3:fc:b5:a8:6b:a4:be:14:85:30:
c9:1c:d4:c6:21:6d:d2:d0:a5:07:15:e5:17:ee:f5:
16:74:f9:fa:01:94:2f:94:99:f1:21:bf:2a:3d:a8:
80:f3:d7:bd:10:b5:a0:cc:46:68:c0:5b:b6:9a:54:
71:c5:9f:55:e8:d8:2f:b4:89:1f:70:a2:f4:eb:ae:
dd:21:d9:89:cb:53:56:f2:5f:cf:29:aa:59:32:25:
3b:61:98:11:e3:ab:1c:a8:f7:90:3e:64:9d:a0:46:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6A:B6:EF:85:D0:50:64:AF:72:A1:83:52:25:99:5C:B9:A7:39:62
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:f7:f7:73:58:90:91:70:77:63:2c:64:b5:97:a8:d4:cc:
55:e6:6e:5c:e1:4a:b1:d3:fe:d9:9c:c1:fe:3d:ef:b9:f0:36:
fb:3b:04:3e:24:5d:3b:4f:3e:e8:b3:e4:21:e0:ad:21:c5:14:
8e:47:e9:2a:55:e0:ef:86:20:a8:b5:63:a6:fd:61:5b:ab:82:
ed:97:00:f8:77:4c:cc:7d:c0:30:fc:41:91:5b:c9:c1:6b:f0:
67:e9:8e:c5:eb:65:e6:8e:03:89:92:e9:6a:ef:2e:37:3e:ea:
bf:5f:ca:a3:7c:7a:13:a0:d0:c6:92:b3:08:6b:de:aa:1a:c4:
1e:ce:97:eb:9f:d3:36:18:66:03:f6:5e:e2:d0:c1:f5:32:ec:
b8:00:64:ed:fe:33:5d:4e:50:87:95:f8:0c:20:f9:11:7b:72:
2e:c0:c7:66:03:61:f4:da:73:83:ab:61:88:d4:7c:48:d5:2a:
66:23:86:0d:1d:82:8c:25:8e:22:84:c3:df:79:5d:e5:a0:1b:
16:2e:d2:c7:33:d7:e1:31:53:6f:eb:dd:c4:d4:1b:fd:e3:57:
c2:8b:02:5c:22:04:4c:90:80:02:89:4e:17:7a:d9:00:cf:83:
c4:de:c5:ce:82:57:9c:e1:ef:ba:88:c0:1a:ca:80:d3:ad:f3:
09:87:cf:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGTJ4MwboZ1IcT5S31FPQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjUwNTEyMjEwMDMyWhcNMjUwNTEzMjEwMDMyWjAzMTEwLwYDVQQD
EygxNzZhYjZlZjg1ZDA1MDY0YWY3MmExODM1MjI1OTk1Y2I5YTczOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ma13UCAhJjQt3W/+TJpQC1nQA4
iDTd5BJciYWfeYcHKHVG5p7aphoZuB3wJwTN5aQlveW3Z7OaHNtngFK66/bSgHXY
BuWGTTbrmS2tnjZE9EMXMlPeyCVCUYkwmItkyi5QjYD4xgWA6IxAgN21vcMIJRqa
dyx1dwD44ha6B0DklFwOBs1LvpcVVGAQgtaNUcQM6rq7WnHdB/P8tahrpL4UhTDJ
HNTGIW3S0KUHFeUX7vUWdPn6AZQvlJnxIb8qPaiA89e9ELWgzEZowFu2mlRxxZ9V
6NgvtIkfcKL0667dIdmJy1NW8l/PKapZMiU7YZgR46scqPeQPmSdoEZpGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdqtu+F0FBkr3Khg1IlmVy5pzliMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4n393NY
kJFwd2MsZLWXqNTMVeZuXOFKsdP+2ZzB/j3vufA2+zsEPiRdO08+6LPkIeCtIcUU
jkfpKlXg74YgqLVjpv1hW6uC7ZcA+HdMzH3AMPxBkVvJwWvwZ+mOxetl5o4DiZLp
au8uNz7qv1/Ko3x6E6DQxpKzCGveqhrEHs6X65/TNhhmA/Ze4tDB9TLsuABk7f4z
XU5Qh5X4DCD5EXtyLsDHZgNh9Npzg6thiNR8SNUqZiOGDR2CjCWOIoTD33ld5aAb
Fi7SxzPX4TFTb+vdxNQb/eNXwosCXCIETJCAAolOF3rZAM+DxN7FzoJXnOHvuojA
GsqA063zCYfPoA==
-----END CERTIFICATE-----
Generated at Tue May 13 00:14:57 2025 by rpki-client