Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: IHuhq0LU0SWC+FppXmfOZMlPItvH0oz9c7YGSNkph2s=
Subject key identifier: 99:C5:BA:48:C0:F8:95:EF:E3:78:F2:26:93:20:41:6D:89:63:A4:EF
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0196BAB62C5F4E6A74A3B0E15F8C35E04B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 1464
Signing time: Sat 10 May 2025 15:00:23 +0000
Manifest this update: Sat 10 May 2025 15:00:23 +0000
Manifest next update: Sun 11 May 2025 15:00:23 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: TnbRpSO5whm0tvyqRYq7ZRgrQ37V1T6lov0I+FFyaUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:2c:5f:4e:6a:74:a3:b0:e1:5f:8c:35:e0:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: May 10 15:00:23 2025 GMT
Not After : May 11 15:00:23 2025 GMT
Subject: CN=99c5ba48c0f895efe378f2269320416d8963a4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:55:17:65:d8:a6:47:1c:ca:f2:68:7a:00:
9a:7a:e5:8d:86:68:42:16:c5:38:cf:45:85:b2:78:
3a:76:36:06:fa:a2:37:98:f9:b5:8a:ba:5f:55:71:
97:37:c3:f7:60:f5:89:9f:16:22:9d:fe:8b:19:56:
ea:6a:2c:f6:df:5b:05:e0:31:cb:e2:75:a1:fd:fe:
f2:01:f2:d8:42:54:87:b4:72:d4:d9:71:42:e7:64:
71:d7:8c:99:ab:17:8b:20:d7:2a:47:d2:85:87:40:
1d:56:90:47:47:21:fc:99:4d:8e:63:20:7e:f8:74:
47:b4:61:8a:94:4a:ff:99:6f:1f:b6:09:69:97:24:
8a:bd:6a:c2:b9:db:93:5c:94:29:2b:83:e6:b3:8e:
b9:fa:21:f4:be:c5:9d:4e:35:7d:2f:c8:f3:b5:6f:
15:0d:77:69:e5:52:59:af:e4:0b:27:8b:ae:ee:62:
12:a3:79:b8:a6:f6:5e:70:4b:de:a1:58:fb:62:b0:
a0:ad:d0:0f:42:50:09:52:ba:20:5e:7a:01:5e:75:
69:31:ee:03:ad:ff:f9:6d:a4:4c:33:bb:ad:ff:4e:
69:40:a8:96:3d:6b:3c:db:e8:42:12:e6:c0:f6:b1:
3f:a0:ce:69:bb:9b:a0:41:c0:f5:02:79:11:6e:65:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:BA:48:C0:F8:95:EF:E3:78:F2:26:93:20:41:6D:89:63:A4:EF
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:9c:54:93:89:f3:2e:7c:9e:9f:86:22:57:81:84:98:32:
ec:23:e0:99:51:e5:c7:db:91:23:61:16:e1:34:d6:9f:7f:8b:
67:c9:88:ab:4a:29:a6:e9:b6:5e:3f:0f:9f:c8:4b:0c:9f:f2:
cf:6a:ee:20:c2:8b:05:3c:2d:92:17:0c:2c:5a:38:ee:82:d3:
bb:da:30:27:cf:39:24:78:12:b9:a1:bb:c8:ea:a6:8e:24:32:
ca:00:37:a1:5e:74:31:8d:7e:6e:9e:6d:67:51:95:d9:bc:28:
ab:4e:f9:d9:7a:23:d2:9a:0b:a2:b7:6a:e1:44:75:ac:af:61:
7f:d0:9c:57:a2:27:a5:69:5a:ad:8f:3f:2f:9f:75:f9:df:f9:
e1:54:97:3e:9c:5d:b3:c4:ab:c6:bc:fe:a8:38:24:af:63:87:
68:fa:cf:03:d7:3b:3a:1b:0f:73:75:38:23:70:9d:5b:86:aa:
4d:c2:1c:0e:8b:cc:50:20:07:a0:6b:ef:d9:40:13:d0:b7:55:
0c:ae:3f:eb:26:4a:aa:6f:51:65:81:19:53:86:50:d6:80:57:
d0:5d:5a:f3:89:c5:9c:c1:3e:0c:16:be:b6:a6:dc:b6:b1:46:
5c:37:3c:ad:44:82:18:2b:34:55:58:42:f0:27:71:ac:05:30:
98:e9:2f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tixfTmp0o7DhX4w14EseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUwNTEwMTUwMDIzWhcNMjUwNTExMTUwMDIzWjAzMTEwLwYDVQQD
Eyg5OWM1YmE0OGMwZjg5NWVmZTM3OGYyMjY5MzIwNDE2ZDg5NjNhNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdlVF2XYpkccyvJoegCaeuWNhmhC
FsU4z0WFsng6djYG+qI3mPm1irpfVXGXN8P3YPWJnxYinf6LGVbqaiz231sF4DHL
4nWh/f7yAfLYQlSHtHLU2XFC52Rx14yZqxeLINcqR9KFh0AdVpBHRyH8mU2OYyB+
+HRHtGGKlEr/mW8ftglplySKvWrCuduTXJQpK4Pms465+iH0vsWdTjV9L8jztW8V
DXdp5VJZr+QLJ4uu7mISo3m4pvZecEveoVj7YrCgrdAPQlAJUrogXnoBXnVpMe4D
rf/5baRMM7ut/05pQKiWPWs82+hCEubA9rE/oM5pu5ugQcD1AnkRbmUXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnFukjA+JXv43jyJpMgQW2JY6TvMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJ2cVJOJ
8y58np+GIleBhJgy7CPgmVHlx9uRI2EW4TTWn3+LZ8mIq0oppum2Xj8Pn8hLDJ/y
z2ruIMKLBTwtkhcMLFo47oLTu9owJ885JHgSuaG7yOqmjiQyygA3oV50MY1+bp5t
Z1GV2bwoq0752Xoj0poLordq4UR1rK9hf9CcV6InpWlarY8/L591+d/54VSXPpxd
s8Srxrz+qDgkr2OHaPrPA9c7OhsPc3U4I3CdW4aqTcIcDovMUCAHoGvv2UAT0LdV
DK4/6yZKqm9RZYEZU4ZQ1oBX0F1a84nFnME+DBa+tqbctrFGXDc8rUSCGCs0VVhC
8CdxrAUwmOkvdQ==
-----END CERTIFICATE-----
Generated at Sat May 10 22:15:18 2025 by rpki-client