Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: Pq8duFjg7Lwa8SoOI3UdOWk1fPHpdc3EKrdXL1Uj2zM=
Subject key identifier: 38:EE:08:03:92:2A:7E:71:30:56:4D:3D:B9:B5:A8:DD:D9:CE:F5:98
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 0196C0EF25BE3FEA9453412D96BD5F4C1928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 09A0
Signing time: Sun 11 May 2025 20:00:20 +0000
Manifest this update: Sun 11 May 2025 20:00:20 +0000
Manifest next update: Mon 12 May 2025 20:00:20 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: oTG6xgvI6nGK5yzniZKDIUflkNommL7RAsIg2cRjzmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:25:be:3f:ea:94:53:41:2d:96:bd:5f:4c:19:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: May 11 20:00:20 2025 GMT
Not After : May 12 20:00:20 2025 GMT
Subject: CN=38ee0803922a7e7130564d3db9b5a8ddd9cef598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:85:29:d3:01:1a:00:e9:49:40:57:4d:95:
41:6d:f6:2e:6e:73:c3:67:57:1b:08:41:0b:c6:7e:
3f:cb:41:78:a0:54:d4:0e:0c:11:f8:89:72:83:48:
4b:8c:e1:4c:3a:3c:63:ad:81:06:03:70:9f:38:ea:
d0:88:78:3c:2a:5c:4b:61:17:89:2b:bd:b4:18:47:
73:92:4f:e8:93:c4:f4:2a:f5:c9:47:f0:f3:a0:18:
8f:f2:c7:60:b2:81:05:c9:98:bf:1e:1e:e4:62:23:
ad:c8:55:1e:ed:7b:80:46:ef:84:ea:16:63:b4:22:
b5:30:da:a2:4a:61:21:6e:34:a7:d6:8b:85:ea:0a:
7c:98:c2:a3:1b:8c:7d:e6:20:02:08:b1:13:46:15:
18:af:b6:fb:f8:38:6f:e8:bb:99:49:1c:12:2a:05:
cf:75:a3:ca:26:9f:e9:a5:00:e1:84:fd:ce:1f:c3:
56:3e:7d:02:c1:ff:63:84:d9:45:b2:c4:09:ec:3f:
84:80:90:a1:45:81:0c:fc:06:ef:cb:08:f9:af:04:
d3:ed:99:6a:dd:12:74:c7:af:db:ca:ca:8a:9c:c2:
6d:74:84:1f:e9:21:db:b1:e6:73:18:c7:c8:dd:96:
f0:16:c1:a1:71:40:5c:5a:15:19:25:d7:0a:b4:6a:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:08:03:92:2A:7E:71:30:56:4D:3D:B9:B5:A8:DD:D9:CE:F5:98
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:68:42:4d:a1:76:51:29:96:f7:56:4a:cb:81:ef:3d:2b:f7:
e3:85:02:b9:fe:d3:f6:e5:b0:aa:89:c2:13:f9:9c:51:29:28:
fe:37:a6:de:3f:c7:39:fb:df:69:20:ef:3c:97:06:17:5c:55:
7f:bb:5d:bd:90:f8:d8:22:71:74:29:a9:9d:1d:c3:f6:8c:fa:
64:11:94:32:e0:34:24:0e:85:4a:d6:25:91:dd:77:66:05:47:
c7:9f:bd:bd:9b:20:2f:ab:ea:89:c8:94:5c:75:8c:9d:df:d8:
80:c8:ca:b0:00:f2:5a:eb:01:1f:e5:be:0b:da:9e:cc:3e:ea:
e9:d9:32:bd:1c:0b:0a:b8:b1:7a:2a:59:77:57:f3:85:4b:ad:
97:1c:36:3c:c8:8a:d6:ba:90:d3:2d:3e:0f:b8:3d:03:df:ae:
f5:b2:4e:11:d5:14:02:fc:7c:0e:a6:eb:25:f8:21:5c:83:91:
d1:4f:af:25:8e:b9:f7:8e:11:e0:65:e2:4d:07:06:62:ff:9d:
14:a2:49:ab:89:f4:1a:92:19:98:3e:f4:77:02:3c:ec:ce:02:
56:f0:c2:08:e7:8a:ba:8e:7a:6b:74:39:ea:fc:42:9a:05:bf:
ca:df:19:10:e5:5e:d6:59:8e:3c:a9:85:97:50:14:a3:77:97:
e9:bb:12:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA7yW+P+qUU0Etlr1fTBkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyMjllNzNjZTZiYjE5NmQ2NWMwYmVmMTE5NTYwNjU3
YTM3MjAwHhcNMjUwNTExMjAwMDIwWhcNMjUwNTEyMjAwMDIwWjAzMTEwLwYDVQQD
EygzOGVlMDgwMzkyMmE3ZTcxMzA1NjRkM2RiOWI1YThkZGQ5Y2VmNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcSFKdMBGgDpSUBXTZVBbfYubnPD
Z1cbCEELxn4/y0F4oFTUDgwR+Ilyg0hLjOFMOjxjrYEGA3CfOOrQiHg8KlxLYReJ
K720GEdzkk/ok8T0KvXJR/DzoBiP8sdgsoEFyZi/Hh7kYiOtyFUe7XuARu+E6hZj
tCK1MNqiSmEhbjSn1ouF6gp8mMKjG4x95iACCLETRhUYr7b7+Dhv6LuZSRwSKgXP
daPKJp/ppQDhhP3OH8NWPn0Cwf9jhNlFssQJ7D+EgJChRYEM/Abvywj5rwTT7Zlq
3RJ0x6/bysqKnMJtdIQf6SHbseZzGMfI3ZbwFsGhcUBcWhUZJdcKtGqc/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjuCAOSKn5xMFZNPbm1qN3ZzvWYMB8GA1UdIwQY
MBaAFMU7Ip5zzmuxltZcC+8RlWBlejcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEt
NjM3MjhiMGZhMTA4LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lOTI2NjYtNDUyNi00N2MxLWIyYmEtNjM3MjhiMGZhMTA4
LzEveFRzaW5uUE9hN0dXMWx3TDd4R1ZZR1Y2TnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGhCTaF2
USmW91ZKy4HvPSv344UCuf7T9uWwqonCE/mcUSko/jem3j/HOfvfaSDvPJcGF1xV
f7tdvZD42CJxdCmpnR3D9oz6ZBGUMuA0JA6FStYlkd13ZgVHx5+9vZsgL6vqiciU
XHWMnd/YgMjKsADyWusBH+W+C9qezD7q6dkyvRwLCrixeipZd1fzhUutlxw2PMiK
1rqQ0y0+D7g9A9+u9bJOEdUUAvx8DqbrJfghXIOR0U+vJY65944R4GXiTQcGYv+d
FKJJq4n0GpIZmD70dwI87M4CVvDCCOeKuo56a3Q56vxCmgW/yt8ZEOVe1lmOPKmF
l1AUo3eX6bsSNQ==
-----END CERTIFICATE-----
Generated at Sun May 11 22:08:23 2025 by rpki-client