Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: EjJhWnO1nXImX6kfLtXtQ4ft7jGcwM3wMtuTO18i4uU=
Subject key identifier: A2:BA:A1:C6:12:23:88:72:F6:E0:F8:0B:36:D3:C5:8F:FF:5C:1C:90
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0196A4D332BC0A9C43ECE46E2B83273B8921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1294
Signing time: Tue 06 May 2025 09:00:26 +0000
Manifest this update: Tue 06 May 2025 09:00:26 +0000
Manifest next update: Wed 07 May 2025 09:00:26 +0000
Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: mzZF6ufKsKhsD8uvPa80ML2mXCUW1MOCzUjSHVzWoIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:32:bc:0a:9c:43:ec:e4:6e:2b:83:27:3b:89:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: May 6 09:00:26 2025 GMT
Not After : May 7 09:00:26 2025 GMT
Subject: CN=a2baa1c612238872f6e0f80b36d3c58fff5c1c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:eb:da:ef:3d:90:db:9e:8b:33:e2:86:c8:
b6:1c:80:2f:25:82:c7:25:96:83:75:54:92:9f:51:
ed:a1:ad:aa:33:5a:4d:36:fa:1d:8b:2b:51:ff:40:
a5:12:63:a6:e4:10:bf:ad:68:e6:28:ed:db:7e:89:
81:34:3c:8c:36:4d:82:33:c5:a1:02:01:df:66:c7:
4e:bf:99:44:e1:6f:80:cd:14:82:eb:46:60:09:54:
42:03:1b:77:9c:10:65:1f:a2:fb:9a:dd:61:5f:6f:
e2:36:e9:59:b5:1a:1b:99:f0:c0:03:5a:a8:db:b0:
ce:44:6f:71:7a:a0:df:3c:73:0e:e6:7d:b6:9c:db:
ba:5b:9e:b6:e1:a1:b9:f6:d8:64:0d:7d:c8:c6:07:
49:2e:b6:31:dd:4f:fc:91:80:8c:d9:5d:3d:29:0e:
20:13:c5:1b:24:d6:90:61:77:25:82:47:f2:58:94:
90:20:0c:a8:a2:80:5b:37:ff:40:db:a1:9a:21:b8:
57:d9:a5:31:c8:a0:8d:ff:0a:47:41:f7:a9:6e:fe:
d2:2a:04:e8:7e:a1:3c:c9:d3:24:16:20:b6:0c:b7:
ca:0e:7f:4a:8d:8e:c6:b7:44:72:f7:b7:ed:6a:06:
84:1b:89:45:50:4c:94:42:cd:e3:39:a1:11:bb:a7:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:A1:C6:12:23:88:72:F6:E0:F8:0B:36:D3:C5:8F:FF:5C:1C:90
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:67:46:9f:ed:5e:01:3e:cd:8e:9a:99:c8:33:02:8b:21:
ef:39:72:73:97:93:17:d0:d0:3c:38:10:e7:40:66:39:5b:6f:
0e:25:24:d5:45:17:2d:f1:ab:9a:34:f2:05:04:09:15:50:67:
64:7d:c5:b9:a1:bf:8d:8d:b8:b5:f8:4f:10:31:ae:c7:a4:04:
6f:ab:70:99:80:ac:4b:1a:75:79:86:00:bd:bd:8d:c1:5e:fb:
06:c5:a4:51:91:9b:93:ad:4c:65:d2:45:8d:00:a3:27:47:eb:
92:f9:94:eb:2d:7a:b9:1b:09:bc:c7:91:c4:62:80:cd:32:26:
bc:b3:2a:53:d1:e9:a9:2b:d7:07:98:d5:f7:01:3d:1c:80:6c:
23:a2:10:b9:05:b9:9e:63:f3:5a:a7:22:25:24:93:29:db:50:
a8:a6:c5:85:49:89:f5:ae:c4:c3:a6:06:dd:91:fd:00:b8:d7:
99:88:76:30:35:35:d0:af:c3:4f:f4:db:23:f9:31:7a:2e:59:
bc:b0:ae:5f:06:0e:01:57:ce:69:84:70:5f:e6:61:af:1b:2c:
dc:e3:c2:22:f7:95:0b:e1:35:da:09:97:7a:94:25:52:27:2d:
1e:01:bd:23:af:62:cd:ce:99:18:82:61:5e:c9:e9:2e:09:90:
dc:41:b6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZak0zK8CpxD7ORuK4MnO4khMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm
ZGQ0YzYwHhcNMjUwNTA2MDkwMDI2WhcNMjUwNTA3MDkwMDI2WjAzMTEwLwYDVQQD
EyhhMmJhYTFjNjEyMjM4ODcyZjZlMGY4MGIzNmQzYzU4ZmZmNWMxYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWHr2u89kNueizPihsi2HIAvJYLH
JZaDdVSSn1Htoa2qM1pNNvodiytR/0ClEmOm5BC/rWjmKO3bfomBNDyMNk2CM8Wh
AgHfZsdOv5lE4W+AzRSC60ZgCVRCAxt3nBBlH6L7mt1hX2/iNulZtRobmfDAA1qo
27DORG9xeqDfPHMO5n22nNu6W5624aG59thkDX3IxgdJLrYx3U/8kYCM2V09KQ4g
E8UbJNaQYXclgkfyWJSQIAyoooBbN/9A26GaIbhX2aUxyKCN/wpHQfepbv7SKgTo
fqE8ydMkFiC2DLfKDn9KjY7Gt0Ry97ftagaEG4lFUEyUQs3jOaERu6eDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK6ocYSI4hy9uD4CzbTxY//XByQMB8GA1UdIwQY
MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt
MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx
LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkxnRp/t
XgE+zY6amcgzAosh7zlyc5eTF9DQPDgQ50BmOVtvDiUk1UUXLfGrmjTyBQQJFVBn
ZH3FuaG/jY24tfhPEDGux6QEb6twmYCsSxp1eYYAvb2NwV77BsWkUZGbk61MZdJF
jQCjJ0frkvmU6y16uRsJvMeRxGKAzTImvLMqU9HpqSvXB5jV9wE9HIBsI6IQuQW5
nmPzWqciJSSTKdtQqKbFhUmJ9a7Ew6YG3ZH9ALjXmYh2MDU10K/DT/TbI/kxei5Z
vLCuXwYOAVfOaYRwX+Zhrxss3OPCIveVC+E12gmXepQlUictHgG9I69izc6ZGIJh
XsnpLgmQ3EG2fQ==
-----END CERTIFICATE-----
Generated at Tue May 6 12:09:11 2025 by rpki-client