Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: +4K6xnx/Mva5PwMUgNKcKuSq4yEgjXsHwSCOCxtyNi4=
Subject key identifier: DB:E0:D3:77:E6:1B:1B:C9:43:AE:34:7D:5A:E9:7C:7B:65:BF:FB:4C
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 0196A2E57B2608A229902DD7499662573779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0B7C
Signing time: Tue 06 May 2025 00:01:10 +0000
Manifest this update: Tue 06 May 2025 00:01:10 +0000
Manifest next update: Wed 07 May 2025 00:01:10 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: Gx3TC2Cwc8D+8Bg/14SUResrUlXNza08fKD4rTY8lfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:7b:26:08:a2:29:90:2d:d7:49:96:62:57:37:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: May 6 00:01:10 2025 GMT
Not After : May 7 00:01:10 2025 GMT
Subject: CN=dbe0d377e61b1bc943ae347d5ae97c7b65bffb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:24:10:0e:fd:a2:c3:f0:a0:06:29:00:46:
be:fe:c6:f7:cc:fc:00:b3:00:36:71:32:7b:81:36:
89:a1:c2:2c:25:04:72:35:da:92:bc:f1:36:fe:40:
fc:ba:d3:39:c3:db:01:49:d4:8a:c1:e6:c1:ca:3b:
e1:75:0e:f5:c5:ea:0c:e2:cb:37:64:98:80:3c:16:
e9:6a:0d:84:be:f4:94:dd:74:04:dc:9d:e5:87:90:
22:24:a9:75:41:f9:9f:f1:06:42:42:5d:65:45:f4:
a6:0d:68:dc:7e:b8:12:1b:32:a4:82:d6:e4:82:f7:
4b:b5:22:dc:bd:86:b3:85:86:29:08:5d:ce:dc:35:
9b:ce:92:33:9b:f8:4b:fa:d6:fe:8c:ce:da:0b:a4:
b2:62:3c:62:a1:d3:32:8c:0a:87:4f:00:94:42:c2:
d6:73:25:3a:1f:0a:69:c8:d3:dc:e8:de:02:cd:b7:
18:a3:96:44:c8:55:4c:df:77:07:8d:51:ac:f0:c6:
5a:fd:af:aa:8f:36:f9:db:a8:55:f7:0a:89:9a:89:
3f:ee:0e:85:d9:63:03:aa:42:21:1b:4f:14:33:05:
7a:a4:26:b3:42:c3:fb:1d:9b:8e:7d:11:f6:80:b6:
70:12:01:af:7f:bc:39:46:85:d3:b5:be:d0:33:de:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:D3:77:E6:1B:1B:C9:43:AE:34:7D:5A:E9:7C:7B:65:BF:FB:4C
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:53:95:39:f3:dd:b9:8c:e5:39:a9:ed:c9:fa:5a:6d:27:0e:
09:c9:ff:90:3a:fc:ee:4f:3f:fe:8e:97:5d:5e:23:9a:1f:e0:
9e:b6:03:e2:36:74:de:51:22:2d:61:1f:7a:ab:4f:5d:c3:a8:
f6:03:9a:f8:d1:62:90:e9:fe:9c:97:5b:98:91:c4:0c:71:b8:
fd:65:13:8f:d8:77:e8:16:04:f0:bd:96:77:5a:f8:c5:54:79:
5b:bd:be:2b:93:9d:ca:4a:14:f6:22:c6:c5:dc:4c:8d:05:14:
5e:8b:7f:ef:c6:a1:7a:86:84:c7:e5:b7:a2:ce:ad:74:20:c8:
f7:71:49:89:d8:18:bd:2e:d5:0b:29:33:0b:df:71:da:19:61:
a8:72:0c:0d:82:7c:7c:f6:03:cf:81:c6:83:a5:bd:46:ed:37:
c0:9f:df:32:b0:3c:02:89:32:d3:0e:e6:c2:2f:f5:f9:1a:3f:
6f:9b:00:53:68:ae:20:fd:68:27:fd:b6:3c:24:a3:fd:81:76:
5d:4b:28:e3:82:dc:f2:b3:4e:4f:08:f7:e0:fe:7c:05:16:e1:
9f:d7:35:65:89:c8:15:4c:b6:29:90:5e:e0:94:ac:64:00:63:
cb:5f:f4:9e:24:a0:bd:6f:60:b6:63:42:1c:58:e1:60:de:f0:
52:07:48:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5XsmCKIpkC3XSZZiVzd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2U0ZmE4Yzk5NzFhZWYxMjM0NWZjMGUzN2QxNmIzNDU5
Yjc4M2IwHhcNMjUwNTA2MDAwMTEwWhcNMjUwNTA3MDAwMTEwWjAzMTEwLwYDVQQD
EyhkYmUwZDM3N2U2MWIxYmM5NDNhZTM0N2Q1YWU5N2M3YjY1YmZmYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze8kEA79osPwoAYpAEa+/sb3zPwA
swA2cTJ7gTaJocIsJQRyNdqSvPE2/kD8utM5w9sBSdSKwebByjvhdQ71xeoM4ss3
ZJiAPBbpag2EvvSU3XQE3J3lh5AiJKl1Qfmf8QZCQl1lRfSmDWjcfrgSGzKkgtbk
gvdLtSLcvYazhYYpCF3O3DWbzpIzm/hL+tb+jM7aC6SyYjxiodMyjAqHTwCUQsLW
cyU6HwppyNPc6N4CzbcYo5ZEyFVM33cHjVGs8MZa/a+qjzb526hV9wqJmok/7g6F
2WMDqkIhG08UMwV6pCazQsP7HZuOfRH2gLZwEgGvf7w5RoXTtb7QM94tqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvg03fmGxvJQ640fVrpfHtlv/tMMB8GA1UdIwQY
MBaAFF4+T6jJlxrvEjRfwON9FrNFm3g7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGIt
M2EzYjAyOTZiYjgyLzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lYjU0NTQtNzI5My00MzdmLWFjMGItM2EzYjAyOTZiYjgy
LzEvWGo1UHFNbVhHdThTTkZfQTQzMFdzMFdiZURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1OVOfPd
uYzlOantyfpabScOCcn/kDr87k8//o6XXV4jmh/gnrYD4jZ03lEiLWEfeqtPXcOo
9gOa+NFikOn+nJdbmJHEDHG4/WUTj9h36BYE8L2Wd1r4xVR5W72+K5OdykoU9iLG
xdxMjQUUXot/78aheoaEx+W3os6tdCDI93FJidgYvS7VCykzC99x2hlhqHIMDYJ8
fPYDz4HGg6W9Ru03wJ/fMrA8Aoky0w7mwi/1+Ro/b5sAU2iuIP1oJ/22PCSj/YF2
XUso44Lc8rNOTwj34P58BRbhn9c1ZYnIFUy2KZBe4JSsZABjy1/0niSgvW9gtmNC
HFjhYN7wUgdIuA==
-----END CERTIFICATE-----
Generated at Tue May 6 06:11:52 2025 by rpki-client