Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: iFPauanHKQvFdBQXV3SlUL5ekCFruYrchE54Ya0qUOo=
Subject key identifier: C3:B8:2B:DB:B9:3A:8C:36:73:F3:F4:76:60:52:03:73:73:26:9C:3A
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 0196A5E5EDDEA6A0240D23FA9FD00FC849BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 05B7
Signing time: Tue 06 May 2025 14:00:31 +0000
Manifest this update: Tue 06 May 2025 14:00:31 +0000
Manifest next update: Wed 07 May 2025 14:00:31 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: nYZN/VXPscinOJ2YQ4wbB0Hakz/SDBrSv0VY5YMzmc8=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e5:ed:de:a6:a0:24:0d:23:fa:9f:d0:0f:c8:49:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: May 6 14:00:31 2025 GMT
Not After : May 7 14:00:31 2025 GMT
Subject: CN=c3b82bdbb93a8c3673f3f4766052037373269c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:44:f0:5a:a8:85:ca:db:96:67:2a:8e:65:
99:28:ae:c8:65:74:d3:5c:e1:0f:41:04:fa:d6:89:
9d:a4:85:6d:b5:00:53:16:20:2d:0c:41:61:79:5e:
50:67:9f:3a:86:b2:ec:ca:90:10:37:f5:95:5f:15:
57:fc:f4:fd:4f:37:bb:22:5a:51:31:f1:f6:c8:52:
89:f5:6a:1d:a0:0d:e4:17:03:70:37:da:8b:85:4b:
c7:59:b4:c9:ed:81:ac:71:3b:b3:9f:03:9f:35:b4:
03:6b:91:6c:96:08:f3:52:94:f3:20:e5:d4:a4:81:
d6:94:2f:78:59:c8:55:a4:bb:61:bc:86:bf:b9:08:
d2:72:08:d1:45:1c:29:00:76:82:e9:6b:d2:12:f0:
bb:4d:d6:2c:d1:8f:25:f5:66:d7:c6:55:13:7e:7b:
f0:aa:d6:4d:45:87:ee:e5:ea:65:ff:1a:10:f1:09:
f6:0f:84:5d:ee:eb:d7:36:49:df:d0:33:3e:49:f2:
d4:69:d6:90:be:99:c4:c2:af:c9:65:73:c6:87:0a:
f5:42:17:9d:46:86:b8:e8:fe:0c:e9:4f:7c:2c:06:
73:ad:cb:12:02:ec:b5:54:2c:6e:f7:04:d3:05:9d:
c1:d1:e4:dc:1b:96:f0:2a:61:d1:74:a6:8c:a9:25:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B8:2B:DB:B9:3A:8C:36:73:F3:F4:76:60:52:03:73:73:26:9C:3A
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7e:ff:3b:28:5c:71:93:e5:67:0f:6f:f0:50:66:40:f2:53:
23:4b:18:cd:e9:6f:44:f5:31:53:29:72:17:02:8c:81:b6:b8:
ad:5d:03:1a:92:b8:d0:6b:9f:2e:1c:2d:4c:70:96:76:8f:83:
94:d6:74:3c:be:25:69:94:ad:c4:63:04:00:2b:b1:25:93:bf:
84:b2:c0:51:fc:e3:8b:63:2a:5f:4e:8e:41:d4:6c:cf:a0:d4:
6d:15:fe:3f:04:c9:4b:6e:ca:b3:e9:a4:93:91:d8:49:cf:0a:
b6:60:ad:93:70:e0:d4:99:ba:7e:7f:40:57:58:20:cc:ef:a4:
7f:97:46:8f:61:11:13:1a:8e:eb:9a:d6:4c:f5:5f:b9:30:4e:
5a:a4:b0:60:f5:3d:c6:00:52:7e:cc:e9:7b:72:0e:c2:e4:60:
2e:db:36:60:b7:2e:3f:d9:ba:bc:d4:4e:8f:16:a4:e4:10:62:
5a:a3:15:bb:5f:d0:61:9f:0d:91:c1:69:ea:16:fe:37:6b:48:
d3:22:32:fd:5f:d8:6e:6d:c8:2a:f3:73:be:aa:5a:fe:ef:ac:
34:ce:cb:07:bd:6b:fb:d1:b7:2a:6c:c3:cb:e9:21:31:68:10:
1c:45:f0:25:c4:4e:77:ca:c3:8d:b0:8f:1e:3e:b5:3c:5b:16:
2c:4c:ba:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZal5e3epqAkDSP6n9APyEm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh
MWQxOTUwHhcNMjUwNTA2MTQwMDMxWhcNMjUwNTA3MTQwMDMxWjAzMTEwLwYDVQQD
EyhjM2I4MmJkYmI5M2E4YzM2NzNmM2Y0NzY2MDUyMDM3MzczMjY5YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WRE8FqohcrblmcqjmWZKK7IZXTT
XOEPQQT61omdpIVttQBTFiAtDEFheV5QZ586hrLsypAQN/WVXxVX/PT9Tze7IlpR
MfH2yFKJ9WodoA3kFwNwN9qLhUvHWbTJ7YGscTuznwOfNbQDa5FslgjzUpTzIOXU
pIHWlC94WchVpLthvIa/uQjScgjRRRwpAHaC6WvSEvC7TdYs0Y8l9WbXxlUTfnvw
qtZNRYfu5epl/xoQ8Qn2D4Rd7uvXNknf0DM+SfLUadaQvpnEwq/JZXPGhwr1Qhed
Roa46P4M6U98LAZzrcsSAuy1VCxu9wTTBZ3B0eTcG5bwKmHRdKaMqSWMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMO4K9u5Oow2c/P0dmBSA3NzJpw6MB8GA1UdIwQY
MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt
MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm
LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH7/Oyhc
cZPlZw9v8FBmQPJTI0sYzelvRPUxUylyFwKMgba4rV0DGpK40GufLhwtTHCWdo+D
lNZ0PL4laZStxGMEACuxJZO/hLLAUfzji2MqX06OQdRsz6DUbRX+PwTJS27Ks+mk
k5HYSc8KtmCtk3Dg1Jm6fn9AV1ggzO+kf5dGj2ERExqO65rWTPVfuTBOWqSwYPU9
xgBSfszpe3IOwuRgLts2YLcuP9m6vNROjxak5BBiWqMVu1/QYZ8NkcFp6hb+N2tI
0yIy/V/Ybm3IKvNzvqpa/u+sNM7LB71r+9G3KmzDy+khMWgQHEXwJcROd8rDjbCP
Hj61PFsWLEy69A==
-----END CERTIFICATE-----
Generated at Tue May 6 18:41:53 2025 by rpki-client