Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: Mdo0PVBPKb95+DJ6+bg3O+OyqD6X57uM57nD2XTh3Kg=
Subject key identifier: E3:2C:09:43:93:3D:03:1E:7F:45:B7:0F:33:50:23:78:27:58:7B:0B
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 0196CA2929A0373883F02A02FC8E2F081213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 06BD
Signing time: Tue 13 May 2025 15:00:17 +0000
Manifest this update: Tue 13 May 2025 15:00:17 +0000
Manifest next update: Wed 14 May 2025 15:00:17 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: Xoe3LknUb7d/DqhFT75G4+GZ1n7vpgNN6LbyGnhBipg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:29:a0:37:38:83:f0:2a:02:fc:8e:2f:08:12:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: May 13 15:00:17 2025 GMT
Not After : May 14 15:00:17 2025 GMT
Subject: CN=e32c0943933d031e7f45b70f3350237827587b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:ee:00:9e:58:40:8c:db:f1:9d:5d:1e:c7:
9b:4e:39:06:a4:25:3d:a3:50:32:39:79:9f:c8:b9:
03:fc:92:ea:4e:92:af:39:9d:39:f4:0a:44:1d:b5:
1b:6a:7d:b0:53:ab:1c:91:64:83:0d:f9:98:ac:89:
99:c1:fb:4b:f0:df:f6:ab:a8:fb:4c:b6:13:07:41:
06:d9:5c:f6:66:35:cd:05:96:b2:53:8a:f4:45:86:
25:92:f5:79:96:6b:df:24:62:45:b3:80:b1:7c:a7:
f8:2f:22:42:bf:ec:aa:7e:96:49:6a:06:fb:d8:0d:
a9:b5:67:06:bd:58:98:06:e8:79:e2:a1:58:4e:df:
5e:85:d1:fc:1b:20:5b:90:dd:b7:e4:6e:8a:04:54:
34:33:e2:56:62:04:9c:11:d0:4d:c6:80:cf:85:2b:
5d:b1:e6:3f:76:41:c8:ed:bb:c4:8a:48:c8:96:71:
c0:b4:e1:31:a5:d0:8b:71:82:7e:0c:14:bf:de:98:
dd:e0:6d:92:11:2b:78:d4:57:a4:ab:d3:de:3c:37:
af:11:6b:78:15:cd:96:b5:f4:a2:2f:ec:1f:25:b7:
1b:a7:67:d2:64:1c:61:77:4f:5b:c7:70:09:43:55:
a4:b1:ef:ef:4d:a0:04:f2:31:b1:0b:fe:16:2b:59:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:09:43:93:3D:03:1E:7F:45:B7:0F:33:50:23:78:27:58:7B:0B
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5f:a5:d0:9c:9d:c8:46:5c:90:08:8e:97:f7:0b:9b:47:50:
13:4d:7d:aa:e7:51:f2:e0:44:46:f7:b2:8e:30:6a:cd:d9:de:
25:1c:48:b7:29:a2:f3:ca:bf:03:08:c4:49:44:2e:62:46:15:
15:14:78:90:8d:47:b3:89:47:91:7a:65:69:37:99:1c:44:94:
2b:02:f9:9c:ff:93:db:11:ae:e4:df:b7:9b:d9:33:e7:34:59:
29:fc:9b:e4:e5:47:65:6a:b8:21:f9:62:67:70:89:3b:82:65:
2c:30:dc:26:93:23:02:2c:09:31:a3:2a:99:fc:aa:60:1f:cf:
d8:b6:5f:aa:55:1b:b5:2e:cc:6c:ae:50:5a:94:58:e2:e5:ac:
97:2c:5c:86:e4:63:0d:2d:29:b9:59:e9:22:1d:5c:16:b7:94:
04:65:69:23:a2:ad:df:3b:58:72:28:f5:ae:9b:c7:74:7c:02:
33:26:68:2e:13:99:e3:0c:db:af:c8:2a:74:ea:ae:8c:a3:08:
18:60:0d:d8:17:a7:3d:87:15:db:d2:1c:ca:12:21:30:e9:8a:
a7:cb:4c:e3:95:e4:ab:a6:a3:5a:34:16:c4:2c:f2:06:02:20:
a8:f9:e5:9f:d5:a6:0d:e3:32:8f:c6:ad:04:f3:f2:74:1f:68:
9f:af:70:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKKSmgNziD8CoC/I4vCBITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGRmZTBmNGJmYjY5ODJmMTk2MGFiMmEzZmFlN2EyZmI0
NTdhOTMwHhcNMjUwNTEzMTUwMDE3WhcNMjUwNTE0MTUwMDE3WjAzMTEwLwYDVQQD
EyhlMzJjMDk0MzkzM2QwMzFlN2Y0NWI3MGYzMzUwMjM3ODI3NTg3YjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruLuAJ5YQIzb8Z1dHsebTjkGpCU9
o1AyOXmfyLkD/JLqTpKvOZ059ApEHbUban2wU6sckWSDDfmYrImZwftL8N/2q6j7
TLYTB0EG2Vz2ZjXNBZayU4r0RYYlkvV5lmvfJGJFs4CxfKf4LyJCv+yqfpZJagb7
2A2ptWcGvViYBuh54qFYTt9ehdH8GyBbkN235G6KBFQ0M+JWYgScEdBNxoDPhStd
seY/dkHI7bvEikjIlnHAtOExpdCLcYJ+DBS/3pjd4G2SESt41Fekq9PePDevEWt4
Fc2WtfSiL+wfJbcbp2fSZBxhd09bx3AJQ1Wkse/vTaAE8jGxC/4WK1nyywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMsCUOTPQMef0W3DzNQI3gnWHsLMB8GA1UdIwQY
MBaAFMTd/g9L+2mC8ZYKsqP656L7RXqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MGI0ODEtNjUzNS00MGEzLTgxYTgt
MzEzYTRjMTYzYjEwLzEveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MGI0ODEtNjUzNS00MGEzLTgxYTgtMzEzYTRjMTYzYjEw
LzEveE4zLUQwdjdhWUx4bGdxeW9fcm5vdnRGZXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfV+l0Jyd
yEZckAiOl/cLm0dQE019qudR8uBERveyjjBqzdneJRxItymi88q/AwjESUQuYkYV
FRR4kI1Hs4lHkXplaTeZHESUKwL5nP+T2xGu5N+3m9kz5zRZKfyb5OVHZWq4Ifli
Z3CJO4JlLDDcJpMjAiwJMaMqmfyqYB/P2LZfqlUbtS7MbK5QWpRY4uWslyxchuRj
DS0puVnpIh1cFreUBGVpI6Kt3ztYcij1rpvHdHwCMyZoLhOZ4wzbr8gqdOqujKMI
GGAN2BenPYcV29IcyhIhMOmKp8tM45Xkq6ajWjQWxCzyBgIgqPnln9WmDeMyj8at
BPPydB9on69wKg==
-----END CERTIFICATE-----
Generated at Wed May 14 00:19:25 2025 by rpki-client