Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier: T031k+AhCpguY6boQGXsXmWXsPcfMgRNzch8wqH5h2A=
Subject key identifier: BB:F7:34:35:5A:10:86:91:10:C1:4E:B4:EA:3D:93:45:C4:97:9C:F2
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 0196BC6DBAC4EE2C0585903559E39D59D3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number: 0CB0
Signing time: Sat 10 May 2025 23:00:29 +0000
Manifest this update: Sat 10 May 2025 23:00:29 +0000
Manifest next update: Sun 11 May 2025 23:00:29 +0000
Files and hashes: 1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=)
2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: cONzAjNw+wO+SO+X8ZQOI/6NDpi/jxbxpyZ3x5cF/00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ba:c4:ee:2c:05:85:90:35:59:e3:9d:59:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: May 10 23:00:29 2025 GMT
Not After : May 11 23:00:29 2025 GMT
Subject: CN=bbf734355a10869110c14eb4ea3d9345c4979cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cb:91:cd:a6:e2:5a:67:bf:03:31:88:44:b1:
92:03:ed:8c:07:42:55:9a:41:4c:63:48:9f:94:70:
2c:60:aa:3f:d2:6e:5d:27:43:20:50:48:d2:bd:f6:
87:cc:11:a9:57:c4:db:ca:f7:57:dd:eb:af:4d:d5:
24:c7:c0:74:d7:4c:fc:c4:ed:ba:eb:fc:36:6c:71:
ca:cc:f1:84:93:e3:04:27:3e:2d:cb:64:20:f3:7a:
2c:13:2a:66:0e:d8:4e:d4:1b:d5:ba:3c:de:fb:1f:
04:54:8d:bb:99:53:e1:e3:71:c7:49:d4:2e:a7:15:
ae:9f:50:ff:9d:2b:6e:e3:0e:9e:43:92:e6:68:c3:
92:89:2a:42:55:e5:2c:a4:ed:a1:97:85:4f:c1:68:
fb:33:1d:c9:e7:12:f4:c5:65:6a:fd:4c:d2:a6:f4:
1a:0b:4d:ba:4f:a5:a0:e5:3b:08:c5:1e:65:55:df:
ea:2f:3c:32:d0:28:29:58:cb:71:33:56:cb:54:33:
33:02:84:04:fd:42:53:ed:54:49:20:15:c2:73:66:
81:40:5b:ad:8a:b5:75:03:de:c4:96:5c:0c:eb:78:
af:b0:ed:14:17:c8:1a:bc:4e:fa:6b:5b:c3:be:c6:
c2:2a:9a:85:6a:80:22:ac:9e:41:54:67:53:a2:e0:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F7:34:35:5A:10:86:91:10:C1:4E:B4:EA:3D:93:45:C4:97:9C:F2
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7b:80:3d:b5:45:2f:ee:59:e4:46:c4:27:6e:b1:ff:5d:3c:
b8:2a:e2:6b:e1:06:50:8e:1a:b7:87:35:ab:73:d0:02:7a:27:
1e:47:c6:3e:c5:6e:3f:26:42:a4:d3:fb:dd:3c:10:50:37:64:
65:bf:fe:67:1b:dc:dd:17:fb:0f:71:9c:08:49:06:e2:17:fe:
9e:42:31:51:27:2e:ed:ef:45:34:0a:34:29:e1:d8:15:79:d7:
5e:e6:f8:a4:05:b1:4e:e3:40:3a:c1:06:da:3d:b3:03:eb:53:
30:63:d9:96:11:79:0e:2f:ba:0d:92:15:7f:58:8a:a7:3f:87:
2b:db:7c:e2:d7:28:fb:9a:99:85:cd:c4:a1:ee:0c:a9:74:10:
49:60:e5:49:17:98:c8:36:f2:4e:96:e1:59:09:94:d6:fc:8f:
bc:68:7e:f4:50:94:ce:90:8b:69:eb:29:36:24:cc:88:43:de:
12:0d:50:4a:a8:96:20:64:99:cb:38:1c:4f:1b:d7:ae:1b:da:
e4:2b:48:aa:13:aa:82:ca:8e:6a:5f:a4:df:00:7c:ba:48:ba:
29:36:19:94:f9:56:bc:dc:19:74:46:1b:80:7c:0e:76:4a:2d:
26:d5:dd:73:53:d9:88:ea:fb:92:b7:d2:da:ad:a1:f9:34:70:
c7:f9:f3:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bbrE7iwFhZA1WeOdWdPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDM3OWNlZGNkYzIwZjA4NzVjNGIwOGI5NGI0MTE2MWIz
ZThjMDMwHhcNMjUwNTEwMjMwMDI5WhcNMjUwNTExMjMwMDI5WjAzMTEwLwYDVQQD
EyhiYmY3MzQzNTVhMTA4NjkxMTBjMTRlYjRlYTNkOTM0NWM0OTc5Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MuRzabiWme/AzGIRLGSA+2MB0JV
mkFMY0iflHAsYKo/0m5dJ0MgUEjSvfaHzBGpV8TbyvdX3euvTdUkx8B010z8xO26
6/w2bHHKzPGEk+MEJz4ty2Qg83osEypmDthO1BvVujze+x8EVI27mVPh43HHSdQu
pxWun1D/nStu4w6eQ5LmaMOSiSpCVeUspO2hl4VPwWj7Mx3J5xL0xWVq/UzSpvQa
C026T6Wg5TsIxR5lVd/qLzwy0CgpWMtxM1bLVDMzAoQE/UJT7VRJIBXCc2aBQFut
irV1A97EllwM63ivsO0UF8gavE76a1vDvsbCKpqFaoAirJ5BVGdTouBfuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv3NDVaEIaREMFOtOo9k0XEl5zyMB8GA1UdIwQY
MBaAFFzTec7c3CDwh1xLCLlLQRYbPowDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQt
MDk2NDQ2NGMxNzUxLzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQtMDk2NDQ2NGMxNzUx
LzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanuAPbVF
L+5Z5EbEJ26x/108uCria+EGUI4at4c1q3PQAnonHkfGPsVuPyZCpNP73TwQUDdk
Zb/+Zxvc3Rf7D3GcCEkG4hf+nkIxUScu7e9FNAo0KeHYFXnXXub4pAWxTuNAOsEG
2j2zA+tTMGPZlhF5Di+6DZIVf1iKpz+HK9t84tco+5qZhc3Eoe4MqXQQSWDlSReY
yDbyTpbhWQmU1vyPvGh+9FCUzpCLaespNiTMiEPeEg1QSqiWIGSZyzgcTxvXrhva
5CtIqhOqgsqOal+k3wB8uki6KTYZlPlWvNwZdEYbgHwOdkotJtXdc1PZiOr7krfS
2q2h+TRwx/nzvQ==
-----END CERTIFICATE-----
Generated at Sun May 11 04:32:21 2025 by rpki-client