Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: NSX0zyGkB5Z0JkU1TxuRW3VkBAMYdVvLtut4CCnnwKw=
Subject key identifier: DC:25:AC:0D:6B:1B:52:A3:A1:44:4A:0D:B3:96:C2:77:B3:FF:4B:69
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 0196BF37DC99224F9FEAEDBE651022F777DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 0429
Signing time: Sun 11 May 2025 12:00:31 +0000
Manifest this update: Sun 11 May 2025 12:00:31 +0000
Manifest next update: Mon 12 May 2025 12:00:31 +0000
Files and hashes: 1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: o+LwUUkmnx1FPjBNcHPYB7RKRtNpMI/6601q9GxvshI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:dc:99:22:4f:9f:ea:ed:be:65:10:22:f7:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: May 11 12:00:31 2025 GMT
Not After : May 12 12:00:31 2025 GMT
Subject: CN=dc25ac0d6b1b52a3a1444a0db396c277b3ff4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:10:f6:ee:01:7c:5d:22:a8:81:c6:1d:8f:
7e:a9:c2:2b:7d:0b:d0:bc:78:6c:74:6e:e7:91:a5:
47:82:49:ba:3c:8a:03:8e:f1:b4:f1:a3:a9:fa:da:
7e:2c:2e:99:6a:59:c9:55:5b:6c:dc:45:2b:30:c9:
43:7e:ad:11:d9:8c:b9:df:ac:23:0a:c7:90:4f:e5:
aa:76:3b:a5:e3:0a:41:a8:e0:d1:83:e3:a7:fa:dc:
ec:2c:cc:1e:ca:58:f7:98:c4:78:7a:d3:ce:52:03:
64:43:bf:b6:d3:56:a7:cd:75:ea:6d:b2:8f:e2:79:
f3:44:d5:0b:75:ae:0e:7c:3e:d6:a0:a0:78:6e:20:
98:d1:b6:d3:1b:80:52:19:5d:9d:72:ac:41:6c:c0:
fe:09:4a:61:7a:9b:fe:08:d7:ca:86:1c:eb:71:0f:
60:69:85:f0:e9:99:db:af:63:10:90:36:be:c0:33:
1f:64:a1:e3:79:91:23:5c:70:e4:ab:09:c9:4b:10:
65:73:e3:33:3a:c5:b4:9a:ea:4f:8d:11:ed:4d:d7:
65:4f:53:f8:77:d8:96:ab:83:85:d8:92:41:c0:ce:
a2:ec:f3:74:09:1c:c4:9e:fa:4d:8f:20:55:1b:43:
70:a8:2c:b6:54:e9:8f:b4:26:1a:c8:46:3c:d5:d6:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:AC:0D:6B:1B:52:A3:A1:44:4A:0D:B3:96:C2:77:B3:FF:4B:69
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:07:db:1b:1f:b3:25:61:b6:4a:ba:33:5a:a3:de:fa:cf:b0:
45:0e:a1:45:b9:6a:1a:fb:4c:9d:9d:bc:41:1e:7b:82:8a:2b:
1d:ba:8a:c2:99:07:16:7e:fe:81:bc:c7:6b:e0:d2:ed:bd:9b:
7a:25:e7:0c:3e:e0:af:53:19:c2:e0:95:04:1a:5b:59:bf:96:
ba:97:02:cc:10:71:72:66:1d:66:6c:c0:be:f7:6f:be:d6:44:
12:7e:10:d0:05:f5:dd:05:37:ae:9a:6c:b4:9d:80:5f:54:67:
62:fe:56:cd:ea:e3:ad:e0:02:42:b4:dd:11:9b:e4:c8:6c:1f:
63:2a:50:f2:76:b3:77:4b:81:6c:32:7c:d9:3a:83:56:07:8c:
d3:c9:2f:2e:b5:fc:0c:c7:7c:4c:47:1c:fc:ac:7b:a1:49:3e:
a9:48:b7:de:eb:2a:f5:ae:4a:11:9c:20:60:b5:8b:1f:fa:ac:
01:4f:f3:24:68:49:36:a3:ff:89:f1:33:26:23:d9:96:15:35:
e4:64:0d:9f:5b:0b:9d:ec:08:72:e4:93:29:33:ef:29:da:3a:
4f:1a:64:ce:51:db:17:98:cd:2e:85:41:41:b3:2a:5b:6a:04:
29:40:44:e9:f6:b6:fa:7a:f3:37:ce:f8:15:fe:82:70:3c:35:
d3:b8:eb:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N9yZIk+f6u2+ZRAi93ffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzZiYTBjMDk4ZGM0NzIxODYyMjNjOTFlN2RlZjUyMTZl
MjM5ZjEwHhcNMjUwNTExMTIwMDMxWhcNMjUwNTEyMTIwMDMxWjAzMTEwLwYDVQQD
EyhkYzI1YWMwZDZiMWI1MmEzYTE0NDRhMGRiMzk2YzI3N2IzZmY0YjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVkQ9u4BfF0iqIHGHY9+qcIrfQvQ
vHhsdG7nkaVHgkm6PIoDjvG08aOp+tp+LC6ZalnJVVts3EUrMMlDfq0R2Yy536wj
CseQT+Wqdjul4wpBqODRg+On+tzsLMweylj3mMR4etPOUgNkQ7+201anzXXqbbKP
4nnzRNULda4OfD7WoKB4biCY0bbTG4BSGV2dcqxBbMD+CUphepv+CNfKhhzrcQ9g
aYXw6Znbr2MQkDa+wDMfZKHjeZEjXHDkqwnJSxBlc+MzOsW0mupPjRHtTddlT1P4
d9iWq4OF2JJBwM6i7PN0CRzEnvpNjyBVG0NwqCy2VOmPtCYayEY81db79wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwlrA1rG1KjoURKDbOWwnez/0tpMB8GA1UdIwQY
MBaAFMV2ugwJjcRyGGIjyR5971IW4jnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMt
MzJlZTQ1OGE2MzQ4LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMtMzJlZTQ1OGE2MzQ4
LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwfbGx+z
JWG2SrozWqPe+s+wRQ6hRblqGvtMnZ28QR57goorHbqKwpkHFn7+gbzHa+DS7b2b
eiXnDD7gr1MZwuCVBBpbWb+WupcCzBBxcmYdZmzAvvdvvtZEEn4Q0AX13QU3rpps
tJ2AX1RnYv5WzerjreACQrTdEZvkyGwfYypQ8nazd0uBbDJ82TqDVgeM08kvLrX8
DMd8TEcc/Kx7oUk+qUi33usq9a5KEZwgYLWLH/qsAU/zJGhJNqP/ifEzJiPZlhU1
5GQNn1sLnewIcuSTKTPvKdo6TxpkzlHbF5jNLoVBQbMqW2oEKUBE6fa2+nrzN874
Ff6CcDw107jrcA==
-----END CERTIFICATE-----
Generated at Sun May 11 17:08:24 2025 by rpki-client