Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: ADigJ+JTVy9JmubxYS7X0DzrtDc7cha7wAz9rGXQhgg=
Subject key identifier: 51:2F:5A:69:79:D0:C2:09:AF:6E:A0:51:D5:5D:64:F3:39:CE:BF:B3
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 0196C984820BB7A6D3FFD3AF8A6A0235C61A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0A7B
Signing time: Tue 13 May 2025 12:00:26 +0000
Manifest this update: Tue 13 May 2025 12:00:26 +0000
Manifest next update: Wed 14 May 2025 12:00:26 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: 2aVFR5t7l4KmLqd2l7dvCZ5v3+UQpzw8yMonxaLqDLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:82:0b:b7:a6:d3:ff:d3:af:8a:6a:02:35:c6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: May 13 12:00:26 2025 GMT
Not After : May 14 12:00:26 2025 GMT
Subject: CN=512f5a6979d0c209af6ea051d55d64f339cebfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:ba:eb:80:57:46:a7:6d:c0:d8:19:e7:09:
2d:a6:16:d9:62:de:7c:a0:58:f0:23:b2:f9:77:9b:
ab:cc:c8:63:22:0c:02:b5:0a:65:e1:0c:a0:d0:c7:
13:31:74:61:27:09:41:2f:68:2b:de:2a:f9:2a:92:
64:05:eb:05:34:f1:e4:bf:02:ba:9b:d2:9d:f0:79:
2d:6a:bb:a6:1c:23:08:a1:27:18:88:a1:cc:3e:70:
8e:e0:43:26:72:c8:f5:55:be:d9:45:98:05:7e:4b:
2b:84:05:59:6b:d7:89:7e:95:20:35:13:dd:c8:11:
06:e5:65:a0:b8:59:62:f7:83:4c:a2:da:d6:ce:9a:
18:f9:2b:48:91:08:54:a0:ea:90:de:86:e1:95:12:
2d:49:fc:c2:7a:93:e5:7e:c2:de:71:ce:f5:10:b4:
66:9a:4b:f0:54:f8:cf:0a:0e:96:60:a0:af:74:8b:
19:eb:ab:76:2e:96:28:d2:0d:5e:47:c3:2f:02:97:
54:f4:71:c6:e5:36:ca:87:c6:fe:7a:e8:d3:74:a8:
d8:3f:3f:77:b0:9c:17:5e:7b:f5:b4:63:4f:28:dd:
a9:a0:bd:b0:2f:9a:65:7b:d0:1b:36:6f:dd:5b:40:
f5:7b:b1:f5:13:4a:86:75:b8:f1:35:5d:20:44:6e:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2F:5A:69:79:D0:C2:09:AF:6E:A0:51:D5:5D:64:F3:39:CE:BF:B3
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5e:ac:02:42:92:69:ed:0e:ee:41:22:3e:81:27:e9:87:e9:
78:a8:d6:7c:b4:2a:5f:21:45:de:89:f0:51:a4:b9:d3:88:a6:
9d:71:3f:15:57:af:ae:67:b7:c4:e1:08:82:f3:e9:a2:63:88:
2a:2f:88:03:db:63:e6:e4:db:1f:82:18:e5:b5:9f:e5:10:1c:
68:de:92:32:d5:e9:5a:e6:b5:4b:b7:c3:e1:5a:b9:02:2b:2b:
94:30:c5:c1:c8:6e:e9:cb:b1:98:bc:7f:01:44:d7:f7:f4:0c:
38:82:20:a6:62:92:f4:c3:cd:50:19:50:10:de:85:f8:8d:40:
42:56:ac:aa:47:a3:b6:60:26:95:ec:c1:15:ba:a6:f1:29:82:
52:7e:79:40:01:c3:57:d6:7f:ad:d5:b4:0a:bd:84:a3:b6:55:
6d:51:40:ea:90:04:43:8f:17:13:f1:14:ef:ed:a4:c0:d9:33:
3c:a9:9e:1a:52:fe:71:6c:89:a9:37:97:c6:79:88:f5:b3:a1:
b7:1c:b9:05:d4:cb:df:8d:b2:19:a3:be:b7:29:9f:ba:22:2a:
55:d0:7f:7c:2f:44:fd:9b:22:3f:71:d2:d4:44:b5:2a:a5:8a:
ee:81:be:cb:d2:d7:05:c0:40:2e:52:3f:31:a7:42:52:3c:73:
40:6d:99:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJhIILt6bT/9OvimoCNcYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh
OTNjZDgwHhcNMjUwNTEzMTIwMDI2WhcNMjUwNTE0MTIwMDI2WjAzMTEwLwYDVQQD
Eyg1MTJmNWE2OTc5ZDBjMjA5YWY2ZWEwNTFkNTVkNjRmMzM5Y2ViZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O+664BXRqdtwNgZ5wktphbZYt58
oFjwI7L5d5urzMhjIgwCtQpl4Qyg0McTMXRhJwlBL2gr3ir5KpJkBesFNPHkvwK6
m9Kd8HktarumHCMIoScYiKHMPnCO4EMmcsj1Vb7ZRZgFfksrhAVZa9eJfpUgNRPd
yBEG5WWguFli94NMotrWzpoY+StIkQhUoOqQ3obhlRItSfzCepPlfsLecc71ELRm
mkvwVPjPCg6WYKCvdIsZ66t2LpYo0g1eR8MvApdU9HHG5TbKh8b+eujTdKjYPz93
sJwXXnv1tGNPKN2poL2wL5ple9AbNm/dW0D1e7H1E0qGdbjxNV0gRG7jvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEvWml50MIJr26gUdVdZPM5zr+zMB8GA1UdIwQY
MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt
ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz
LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuF6sAkKS
ae0O7kEiPoEn6YfpeKjWfLQqXyFF3onwUaS504imnXE/FVevrme3xOEIgvPpomOI
Ki+IA9tj5uTbH4IY5bWf5RAcaN6SMtXpWua1S7fD4Vq5AisrlDDFwchu6cuxmLx/
AUTX9/QMOIIgpmKS9MPNUBlQEN6F+I1AQlasqkejtmAmlezBFbqm8SmCUn55QAHD
V9Z/rdW0Cr2Eo7ZVbVFA6pAEQ48XE/EU7+2kwNkzPKmeGlL+cWyJqTeXxnmI9bOh
txy5BdTL342yGaO+tymfuiIqVdB/fC9E/ZsiP3HS1ES1KqWK7oG+y9LXBcBALlI/
MadCUjxzQG2ZPA==
-----END CERTIFICATE-----
Generated at Tue May 13 18:28:23 2025 by rpki-client