Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: A3eDMGbgEUnWHYuzknYSIF7jICG54vtyGFeLXkLh6KU=
Subject key identifier: ED:B7:1D:41:BE:A1:1C:4E:D6:82:27:D1:41:59:C4:CC:F3:00:74:8C
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 0196B634AC503AF9DFB01F93B29F6D3582AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 18:00:27 +0000
Manifest this update: Fri 09 May 2025 18:00:27 +0000
Manifest next update: Sat 10 May 2025 18:00:27 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: ZvmWjPKPEgGAnNeemU76pCtSq7oMTg3b1jtfjIpzBjA=)
2: b8cMShMrRsZNeCR-DHToKJSbSFc.roa (hash: Xs+2pmDsikwjys7lR2WnXyOpx7FAM2jx9740akpfIYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:ac:50:3a:f9:df:b0:1f:93:b2:9f:6d:35:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: May 9 18:00:27 2025 GMT
Not After : May 10 18:00:27 2025 GMT
Subject: CN=edb71d41bea11c4ed68227d14159c4ccf300748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:a9:8e:f3:39:37:b2:ed:ed:cb:37:e4:93:
e9:16:ee:b3:0e:77:ee:fd:57:36:9c:7b:98:89:d5:
69:71:4e:e7:9f:0b:35:2f:fd:47:01:cf:38:a0:d7:
db:ae:ed:11:15:04:dd:06:0e:03:e5:4e:0a:e1:04:
63:a2:c8:14:2f:9c:10:65:45:8a:83:51:bb:d4:b1:
70:92:6e:8b:8d:fa:49:55:d7:0d:a7:74:c4:d1:54:
5b:c9:e0:a5:2e:13:f7:84:88:76:8e:aa:d5:d2:2a:
22:23:84:b2:86:a5:58:fd:ab:da:fe:35:cc:ce:2f:
5b:cd:9a:ff:ac:26:1b:92:32:8d:7a:1b:fc:eb:47:
92:e0:fa:3b:5a:53:50:81:74:ef:f5:27:92:92:7c:
f6:b7:9c:f9:fb:c7:67:5f:fd:82:3b:ac:17:69:2f:
24:11:e9:f2:cb:d9:e3:e9:0d:02:c4:52:43:6b:45:
db:c5:ca:c8:16:32:c0:96:12:9d:d7:aa:de:e8:ef:
a3:d7:83:30:b2:02:a1:b4:b1:3b:19:20:83:b8:45:
c3:80:a8:13:8f:6a:35:fb:4d:86:62:9a:c3:c1:39:
18:70:c4:ef:67:62:89:0f:c1:52:f0:f8:ed:03:c8:
5b:58:c0:dc:90:a3:fe:40:b5:f2:48:5d:a9:ef:5e:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:1D:41:BE:A1:1C:4E:D6:82:27:D1:41:59:C4:CC:F3:00:74:8C
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b1:b2:21:17:d2:7f:4a:c0:2d:d7:92:20:ab:89:5a:6a:5d:
4e:d0:da:a9:35:e5:c7:d4:e2:aa:78:ee:de:cc:86:58:58:c2:
1f:29:f9:e9:08:ad:a4:23:ba:80:9f:45:b5:c7:d1:76:03:04:
22:e7:b0:5b:44:1d:44:f0:ef:f4:b8:ef:14:b4:09:22:5a:90:
98:5a:a9:9f:44:37:2f:5f:d2:14:58:04:b6:d1:75:c7:df:88:
45:cb:ce:b4:a3:9b:2f:8c:34:e1:71:9e:a5:fd:0c:79:56:a7:
08:ea:e2:b3:41:66:57:14:fe:fe:26:28:ef:ea:70:25:b2:00:
25:94:19:02:ff:a5:b6:00:01:4e:2c:35:ed:3b:93:8c:7b:74:
6d:9f:2a:1b:65:b6:63:dc:b2:96:21:54:37:43:01:72:76:58:
cc:e5:cf:57:2e:82:cc:73:bc:fa:ec:dc:d7:c9:2b:54:65:b0:
88:c2:1c:61:b5:c3:9f:68:d8:0c:40:23:3c:2e:67:1e:9b:02:
b1:85:63:bd:f4:51:08:c4:8b:43:3f:a8:d0:88:e2:6c:cc:57:
c5:e1:a5:8a:a3:ee:4f:ee:ba:2f:30:30:8b:7c:6c:af:56:96:
89:83:05:56:c3:53:46:e1:44:84:83:7b:c0:f6:91:13:ae:3d:
b4:27:ba:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2NKxQOvnfsB+Tsp9tNYKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZGY1MTZjOTVkZDZlYjJkMWQ5ZGQ0ZTBlMDMyODZjMTkx
MWY2ZTEwHhcNMjUwNTA5MTgwMDI3WhcNMjUwNTEwMTgwMDI3WjAzMTEwLwYDVQQD
EyhlZGI3MWQ0MWJlYTExYzRlZDY4MjI3ZDE0MTU5YzRjY2YzMDA3NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7upjvM5N7Lt7cs35JPpFu6zDnfu
/Vc2nHuYidVpcU7nnws1L/1HAc84oNfbru0RFQTdBg4D5U4K4QRjosgUL5wQZUWK
g1G71LFwkm6LjfpJVdcNp3TE0VRbyeClLhP3hIh2jqrV0ioiI4SyhqVY/ava/jXM
zi9bzZr/rCYbkjKNehv860eS4Po7WlNQgXTv9SeSknz2t5z5+8dnX/2CO6wXaS8k
Eenyy9nj6Q0CxFJDa0XbxcrIFjLAlhKd16re6O+j14MwsgKhtLE7GSCDuEXDgKgT
j2o1+02GYprDwTkYcMTvZ2KJD8FS8PjtA8hbWMDckKP+QLXySF2p717zUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO23HUG+oRxO1oIn0UFZxMzzAHSMMB8GA1UdIwQY
MBaAFF/fUWyV3W6y0dndTg4DKGwZEfbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzct
YmYzZjc5NTFjNWVhLzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82NjVkN2QtZDE3MC00ZGY3LWFjYzctYmYzZjc5NTFjNWVh
LzEvWDk5UmJKWGRickxSMmQxT0RnTW9iQmtSOXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbGyIRfS
f0rALdeSIKuJWmpdTtDaqTXlx9Tiqnju3syGWFjCHyn56QitpCO6gJ9FtcfRdgME
IuewW0QdRPDv9LjvFLQJIlqQmFqpn0Q3L1/SFFgEttF1x9+IRcvOtKObL4w04XGe
pf0MeVanCOris0FmVxT+/iYo7+pwJbIAJZQZAv+ltgABTiw17TuTjHt0bZ8qG2W2
Y9yyliFUN0MBcnZYzOXPVy6CzHO8+uzc18krVGWwiMIcYbXDn2jYDEAjPC5nHpsC
sYVjvfRRCMSLQz+o0IjibMxXxeGliqPuT+66LzAwi3xsr1aWiYMFVsNTRuFEhIN7
wPaRE649tCe6xQ==
-----END CERTIFICATE-----
Generated at Sat May 10 03:43:52 2025 by rpki-client