Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
File: xqvTc8xZUGDxozB2tT4RYlEsPNc.mft (raw, json)
Hash identifier: TyD8F/AaQWHsk2LYyEj/AAw+Dt2J/7bDJdbi9x2t0S0=
Subject key identifier: D1:80:0E:4E:D2:40:07:8C:C5:7A:F9:0F:B8:E2:56:13:D5:96:EE:5B
Authority key identifier: C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
Certificate issuer: /CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Certificate serial: 0196C728B1A783BC5340FB8B9FFBFB17A45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 01:00:54 +0000
Manifest this update: Tue 13 May 2025 01:00:54 +0000
Manifest next update: Wed 14 May 2025 01:00:54 +0000
Files and hashes: 1: Ry6CjTQauY6jePfF9K1aXRBPI1U.roa (hash: c9CRHRXe2zz0jhFDuzmDe52TtCa+3RwGF3AlfmTp4Fo=)
2: krks6C9REj8M_gHzn6hFi3S_Skg.roa (hash: GygsjxyP//HYKQINGkFpfbyTmj1FmIDGcflx1a5rTfo=)
3: xqvTc8xZUGDxozB2tT4RYlEsPNc.crl (hash: RI+/FciBgeX0+7TOyXYxcfVoMm9y85c7K43aiOSoVNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:b1:a7:83:bc:53:40:fb:8b:9f:fb:fb:17:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6abd373cc595060f1a33076b53e1162512c3cd7
Validity
Not Before: May 13 01:00:54 2025 GMT
Not After : May 14 01:00:54 2025 GMT
Subject: CN=d1800e4ed240078cc57af90fb8e25613d596ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ab:8a:ed:af:7f:bc:24:96:35:7c:2b:56:90:
ec:48:25:b6:dc:30:99:2a:5a:1b:d0:91:de:5d:bb:
dd:03:93:be:49:2f:45:87:47:9e:fb:32:51:90:4e:
18:29:29:ff:6f:10:fb:fc:14:98:e2:42:d2:8b:4c:
75:b1:f9:f2:3b:15:75:20:db:eb:07:ba:75:50:2f:
05:52:6e:96:c0:52:76:40:08:82:e2:2c:89:62:f3:
34:01:11:d2:70:d5:2a:cf:86:ae:78:09:52:87:07:
1e:03:0c:cd:b3:4e:22:9a:23:00:54:ea:f7:82:a2:
04:2c:6c:0a:ae:01:75:d0:56:17:c7:ce:da:c8:cc:
b1:17:b7:54:bd:d0:6e:24:7c:38:fa:7a:f9:cf:35:
0e:f5:2a:ca:0e:3d:e0:a7:ce:5a:0d:6d:28:58:db:
80:cd:6c:97:2d:57:ca:40:c2:db:67:81:97:e3:12:
4a:db:52:0d:17:b7:11:4b:9b:19:c4:68:4d:58:6e:
23:a1:52:24:dc:4d:49:94:09:52:c1:13:0d:8a:b3:
27:71:fb:4a:c6:7a:53:ec:8e:ea:fe:01:70:cd:df:
d9:11:0e:a6:b1:fe:37:3b:92:2a:61:e3:76:62:89:
d2:cb:24:d8:14:2f:5f:77:cb:f1:ce:63:97:3f:ce:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:0E:4E:D2:40:07:8C:C5:7A:F9:0F:B8:E2:56:13:D5:96:EE:5B
X509v3 Authority Key Identifier:
keyid:C6:AB:D3:73:CC:59:50:60:F1:A3:30:76:B5:3E:11:62:51:2C:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqvTc8xZUGDxozB2tT4RYlEsPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dd2cdd-9684-41ca-8015-9f150c8ea971/1/xqvTc8xZUGDxozB2tT4RYlEsPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:75:8c:fc:3f:c8:9e:5c:a2:ee:f4:2d:34:f2:48:18:9c:
7d:8a:f0:5e:60:f5:36:db:de:33:e9:fe:36:1d:ce:34:24:e9:
f0:fd:10:a2:65:a0:01:6a:0d:70:b2:6e:35:ce:bc:0a:05:43:
23:ed:a9:8e:09:3e:32:6e:d4:29:bb:e4:be:51:01:96:85:f9:
5a:cf:70:c1:54:95:aa:6d:6b:9f:51:ca:5e:59:40:f6:7a:1f:
2a:e1:69:b3:01:e4:45:75:28:5f:8d:a5:6a:a4:fd:6b:b4:50:
79:f5:11:5f:7b:5c:6e:7f:e6:76:b6:c0:d6:64:ca:82:8c:d3:
7d:12:95:a1:af:9f:4c:ae:f9:1d:9c:71:ce:45:02:98:44:99:
c4:a5:fd:13:25:d3:b7:89:0a:17:40:ec:cf:91:0b:a4:bd:9b:
49:10:e5:f8:02:4f:7c:af:f0:77:11:30:6e:93:33:0a:a1:17:
b8:02:fa:41:2c:11:56:c8:be:8d:bd:44:80:ef:d6:fe:72:f1:
b3:74:dc:76:e1:14:5f:26:7e:ab:01:58:fa:a7:19:a7:57:8a:
4c:ea:47:45:a1:ff:74:b7:07:55:db:ab:46:73:4a:c0:9f:20:
bd:b0:30:17:d3:86:7c:fb:92:f7:06:6f:9f:be:21:b5:85:b9:
82:08:58:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKLGng7xTQPuLn/v7F6RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YWJkMzczY2M1OTUwNjBmMWEzMzA3NmI1M2UxMTYyNTEy
YzNjZDcwHhcNMjUwNTEzMDEwMDU0WhcNMjUwNTE0MDEwMDU0WjAzMTEwLwYDVQQD
EyhkMTgwMGU0ZWQyNDAwNzhjYzU3YWY5MGZiOGUyNTYxM2Q1OTZlZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56uK7a9/vCSWNXwrVpDsSCW23DCZ
Klob0JHeXbvdA5O+SS9Fh0ee+zJRkE4YKSn/bxD7/BSY4kLSi0x1sfnyOxV1INvr
B7p1UC8FUm6WwFJ2QAiC4iyJYvM0ARHScNUqz4aueAlShwceAwzNs04imiMAVOr3
gqIELGwKrgF10FYXx87ayMyxF7dUvdBuJHw4+nr5zzUO9SrKDj3gp85aDW0oWNuA
zWyXLVfKQMLbZ4GX4xJK21INF7cRS5sZxGhNWG4joVIk3E1JlAlSwRMNirMncftK
xnpT7I7q/gFwzd/ZEQ6msf43O5IqYeN2YonSyyTYFC9fd8vxzmOXP84/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGADk7SQAeMxXr5D7jiVhPVlu5bMB8GA1UdIwQY
MBaAFMar03PMWVBg8aMwdrU+EWJRLDzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUt
OWYxNTBjOGVhOTcxLzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kZDJjZGQtOTY4NC00MWNhLTgwMTUtOWYxNTBjOGVhOTcx
LzEveHF2VGM4eFpVR0R4b3pCMnRUNFJZbEVzUE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeN1jPw/
yJ5cou70LTTySBicfYrwXmD1NtveM+n+Nh3ONCTp8P0QomWgAWoNcLJuNc68CgVD
I+2pjgk+Mm7UKbvkvlEBloX5Ws9wwVSVqm1rn1HKXllA9nofKuFpswHkRXUoX42l
aqT9a7RQefURX3tcbn/mdrbA1mTKgozTfRKVoa+fTK75HZxxzkUCmESZxKX9EyXT
t4kKF0Dsz5ELpL2bSRDl+AJPfK/wdxEwbpMzCqEXuAL6QSwRVsi+jb1EgO/W/nLx
s3TcduEUXyZ+qwFY+qcZp1eKTOpHRaH/dLcHVdurRnNKwJ8gvbAwF9OGfPuS9wZv
n74htYW5gghY7w==
-----END CERTIFICATE-----
Generated at Tue May 13 07:10:38 2025 by rpki-client