Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier: 71hhC7sV39tzmlPeiUsrCJfQy8fbZmVHcErJnTgzXq4=
Subject key identifier: 6B:F1:DD:F0:D1:34:7C:F8:13:39:E4:79:7E:F0:5A:6E:20:14:C8:46
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial: 0196C15DE288D1C6690BC386CF301F5E7EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number: 0693
Signing time: Sun 11 May 2025 22:01:17 +0000
Manifest this update: Sun 11 May 2025 22:01:17 +0000
Manifest next update: Mon 12 May 2025 22:01:17 +0000
Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: OZD/M8hlDgQqhbNFiJGhy8629yLH84oSagqUeY2t+Ao=)
2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:e2:88:d1:c6:69:0b:c3:86:cf:30:1f:5e:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Validity
Not Before: May 11 22:01:17 2025 GMT
Not After : May 12 22:01:17 2025 GMT
Subject: CN=6bf1ddf0d1347cf81339e4797ef05a6e2014c846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:30:74:8c:b5:ad:cb:22:71:ce:b8:54:23:
d3:37:7d:16:ab:b0:b7:2f:2d:5c:8a:e7:ea:ab:65:
bc:13:93:4c:9e:1b:3d:ac:be:09:1e:1c:7f:8a:13:
bd:50:a5:16:85:89:cf:68:0e:d3:c2:43:c6:7a:5b:
13:8c:e4:cf:2c:96:d7:57:ac:b3:dd:80:3f:11:20:
47:c9:a2:f4:1f:80:5b:74:8b:99:56:a5:9d:87:14:
ea:0b:4e:ae:b4:c1:6e:0b:c5:03:c6:e6:ed:09:18:
38:de:1f:da:67:b3:0e:3d:a9:7d:ba:12:1d:8f:0b:
3e:af:c1:72:fb:b4:54:24:ec:14:6d:a7:3f:6f:50:
22:59:b0:6f:63:25:ab:e4:c7:5b:d9:a0:ba:59:59:
e7:e4:28:11:ff:e8:2e:4d:42:43:9e:ae:e3:44:69:
9f:28:de:cc:0c:ca:06:f3:88:3d:6c:87:24:ad:6a:
86:ad:ef:5a:15:29:51:68:84:8d:66:44:99:de:da:
70:1c:83:d5:c9:95:cb:4c:42:75:d9:0e:02:2e:9c:
ff:c6:2c:2d:52:8a:77:f6:78:bb:0d:d3:a6:af:ff:
bb:a8:aa:c1:99:f1:c0:df:f3:4e:a9:3d:1a:2e:6e:
2a:7a:85:4c:b0:68:48:9f:30:7d:9f:78:f9:2c:d5:
b0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:DD:F0:D1:34:7C:F8:13:39:E4:79:7E:F0:5A:6E:20:14:C8:46
X509v3 Authority Key Identifier:
keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:12:37:6b:8f:58:6e:37:54:27:6d:35:44:e7:f8:37:78:7d:
37:0e:05:16:92:23:e6:7d:26:a7:f3:3f:0f:f0:bc:0e:a2:82:
ab:6a:55:60:53:0d:4a:3b:25:6a:64:65:e6:3b:40:62:f3:75:
ff:6d:75:74:36:c0:64:b6:ed:ae:e2:3c:c3:02:5d:9e:bd:0f:
63:e3:d5:b1:f1:cf:c3:8d:06:ee:83:56:94:13:63:c7:a1:46:
42:56:e2:d5:a3:2f:5a:95:26:16:0b:f9:93:5b:75:3e:64:b5:
ed:43:f6:eb:22:ad:d8:12:ba:af:62:7d:be:9f:30:e9:54:d2:
f0:0a:60:72:3e:52:8f:55:b6:f0:75:51:9c:90:68:ec:9c:1a:
47:92:6b:80:df:4d:48:64:bf:dd:3f:88:d9:86:09:4b:44:45:
5a:67:d3:d7:34:bd:79:e1:bb:2f:93:75:f1:55:5b:3b:0d:81:
3d:eb:3a:64:2b:bf:6d:9c:47:90:22:24:f3:3f:2d:eb:46:53:
b6:39:98:df:8a:b0:fa:16:0d:79:1e:5c:12:a5:51:3e:92:0f:
b6:10:0c:1d:ba:09:f6:ae:45:14:cb:45:44:5e:ac:0b:1f:6a:
13:82:01:07:d9:0f:26:16:a0:ab:e2:c5:d0:cb:2c:dc:d3:ab:
72:d1:ac:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXeKI0cZpC8OGzzAfXn6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy
MmMwZDgwHhcNMjUwNTExMjIwMTE3WhcNMjUwNTEyMjIwMTE3WjAzMTEwLwYDVQQD
Eyg2YmYxZGRmMGQxMzQ3Y2Y4MTMzOWU0Nzk3ZWYwNWE2ZTIwMTRjODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx38wdIy1rcsicc64VCPTN30Wq7C3
Ly1ciufqq2W8E5NMnhs9rL4JHhx/ihO9UKUWhYnPaA7TwkPGelsTjOTPLJbXV6yz
3YA/ESBHyaL0H4BbdIuZVqWdhxTqC06utMFuC8UDxubtCRg43h/aZ7MOPal9uhId
jws+r8Fy+7RUJOwUbac/b1AiWbBvYyWr5Mdb2aC6WVnn5CgR/+guTUJDnq7jRGmf
KN7MDMoG84g9bIckrWqGre9aFSlRaISNZkSZ3tpwHIPVyZXLTEJ12Q4CLpz/xiwt
Uop39ni7DdOmr/+7qKrBmfHA3/NOqT0aLm4qeoVMsGhInzB9n3j5LNWwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvx3fDRNHz4EznkeX7wWm4gFMhGMB8GA1UdIwQY
MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt
ODU5NWI0NTAwODg0LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0
LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhI3a49Y
bjdUJ201ROf4N3h9Nw4FFpIj5n0mp/M/D/C8DqKCq2pVYFMNSjslamRl5jtAYvN1
/211dDbAZLbtruI8wwJdnr0PY+PVsfHPw40G7oNWlBNjx6FGQlbi1aMvWpUmFgv5
k1t1PmS17UP26yKt2BK6r2J9vp8w6VTS8Apgcj5Sj1W28HVRnJBo7JwaR5JrgN9N
SGS/3T+I2YYJS0RFWmfT1zS9eeG7L5N18VVbOw2BPes6ZCu/bZxHkCIk8z8t60ZT
tjmY34qw+hYNeR5cEqVRPpIPthAMHboJ9q5FFMtFRF6sCx9qE4IBB9kPJhagq+LF
0Mss3NOrctGs5g==
-----END CERTIFICATE-----
Generated at Mon May 12 01:34:30 2025 by rpki-client