Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: qBH8P2yCNQmy40ZLUXs90hSlbDgq6nlqrq22R6Y5arw=
Subject key identifier: 77:EB:81:24:2F:3D:9D:CF:54:DC:66:89:2C:C2:25:45:08:09:7E:96
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 0196BB929FA01E27CB4B77DD91F3B9340AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 08C9
Signing time: Sat 10 May 2025 19:01:10 +0000
Manifest this update: Sat 10 May 2025 19:01:10 +0000
Manifest next update: Sun 11 May 2025 19:01:10 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: IJjWT74V6CEwp8YNct4Fy1K3/MfybCwUvvtnPXb/B0E=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:9f:a0:1e:27:cb:4b:77:dd:91:f3:b9:34:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: May 10 19:01:10 2025 GMT
Not After : May 11 19:01:10 2025 GMT
Subject: CN=77eb81242f3d9dcf54dc66892cc2254508097e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:ad:21:27:ee:15:03:bc:b2:c5:90:a0:2c:
8a:e6:da:6d:f2:75:a9:a2:2e:40:d5:14:19:07:23:
44:83:f4:e8:94:7f:5a:10:aa:36:12:be:00:5b:0c:
32:0c:6e:5a:bd:88:d3:95:81:f9:1d:a5:3e:9f:1f:
e4:d6:be:05:a7:10:0a:4d:22:eb:8b:5d:aa:c9:f8:
8a:9d:e7:d9:f1:0d:3d:1f:98:57:be:32:85:a2:84:
e7:19:a2:c2:bf:40:ff:59:ca:21:2d:5f:ce:b6:79:
b4:07:92:89:3a:f5:75:12:f8:8f:a7:0d:e9:01:f3:
89:10:94:6a:1e:1e:12:6e:64:62:64:a2:69:d0:c8:
46:78:2d:48:9c:fd:c3:f9:fb:8d:77:06:f3:76:85:
ca:44:03:35:08:75:e0:0c:21:a9:53:95:16:74:fa:
1d:b4:43:63:9e:3d:29:af:3d:d8:d4:ec:dc:5e:08:
ee:6c:6b:6b:ce:d8:32:4b:b4:27:54:e0:8a:63:b8:
c2:ff:43:8b:3a:b5:03:68:b5:61:41:3d:c5:6e:cd:
ea:ba:59:f9:eb:48:4c:0b:2b:33:25:67:8a:17:59:
c9:80:e7:63:9c:d9:31:aa:83:eb:8f:d5:95:a9:f3:
ca:cc:0e:a7:c9:85:c4:4a:1f:35:01:57:72:66:38:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EB:81:24:2F:3D:9D:CF:54:DC:66:89:2C:C2:25:45:08:09:7E:96
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f5:4a:0f:60:69:fd:d9:e0:43:70:0b:bb:24:14:0d:e1:e7:
8a:60:68:dd:98:28:ad:3c:55:ac:60:1b:59:74:4f:ac:9c:38:
a3:a9:09:f9:2f:d9:8c:2a:48:cf:8b:30:8f:72:51:78:02:5b:
de:42:06:20:b4:2e:d7:05:28:4d:24:05:64:e4:04:2f:7e:5a:
a3:56:d9:52:fb:39:8a:fd:b1:ca:cb:97:2b:05:1d:d6:bb:c2:
2b:f6:a9:50:3a:68:83:3f:a4:85:55:0b:83:d3:f0:61:fe:57:
49:e2:04:f5:71:d8:65:0b:a9:34:4d:96:11:68:82:2f:c4:21:
03:9c:4e:1b:ea:38:e0:29:f7:36:9f:86:32:80:63:25:a0:09:
5d:a6:a8:be:4c:3d:04:78:68:d7:54:41:e5:5f:9f:17:c7:b7:
c6:ec:c1:3c:56:45:b7:da:73:13:4a:23:dc:69:22:14:52:bd:
13:47:66:a3:55:30:69:cc:b9:0e:db:c8:36:31:32:79:8d:a5:
b6:49:35:d7:17:cf:ea:d3:9d:e2:34:f1:4d:4d:4a:15:a9:d7:
44:78:9c:78:00:e7:c1:43:c8:e5:42:7b:da:0c:dc:34:05:5d:
06:6b:5d:43:79:72:34:55:bc:b4:82:1c:a6:4b:06:d3:4a:91:
f3:dd:b0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kp+gHifLS3fdkfO5NArzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl
NmRiMGUwHhcNMjUwNTEwMTkwMTEwWhcNMjUwNTExMTkwMTEwWjAzMTEwLwYDVQQD
Eyg3N2ViODEyNDJmM2Q5ZGNmNTRkYzY2ODkyY2MyMjU0NTA4MDk3ZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNGtISfuFQO8ssWQoCyK5tpt8nWp
oi5A1RQZByNEg/TolH9aEKo2Er4AWwwyDG5avYjTlYH5HaU+nx/k1r4FpxAKTSLr
i12qyfiKnefZ8Q09H5hXvjKFooTnGaLCv0D/WcohLV/Otnm0B5KJOvV1EviPpw3p
AfOJEJRqHh4SbmRiZKJp0MhGeC1InP3D+fuNdwbzdoXKRAM1CHXgDCGpU5UWdPod
tENjnj0prz3Y1OzcXgjubGtrztgyS7QnVOCKY7jC/0OLOrUDaLVhQT3Fbs3quln5
60hMCyszJWeKF1nJgOdjnNkxqoPrj9WVqfPKzA6nyYXESh81AVdyZjjbaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfrgSQvPZ3PVNxmiSzCJUUICX6WMB8GA1UdIwQY
MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt
ZTU5NDc2MTRlZjNmLzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm
LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt/VKD2Bp
/dngQ3ALuyQUDeHnimBo3ZgorTxVrGAbWXRPrJw4o6kJ+S/ZjCpIz4swj3JReAJb
3kIGILQu1wUoTSQFZOQEL35ao1bZUvs5iv2xysuXKwUd1rvCK/apUDpogz+khVUL
g9PwYf5XSeIE9XHYZQupNE2WEWiCL8QhA5xOG+o44Cn3Np+GMoBjJaAJXaaovkw9
BHho11RB5V+fF8e3xuzBPFZFt9pzE0oj3GkiFFK9E0dmo1Uwacy5DtvINjEyeY2l
tkk11xfP6tOd4jTxTU1KFanXRHiceADnwUPI5UJ72gzcNAVdBmtdQ3lyNFW8tIIc
pksG00qR892w3Q==
-----END CERTIFICATE-----
Generated at Sat May 10 23:18:41 2025 by rpki-client