Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: vOe8axVvivIxSKPJsUJyi5TlnnDMo188ULnr7lx4eBs=
Subject key identifier: 8F:52:40:62:08:97:5B:A4:7F:F1:3A:4C:7C:3E:D3:58:3B:3C:5F:1C
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 01969E637EDBEB63BCECCF72A76F9A92E087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 03:00:42 +0000
Manifest this update: Mon 05 May 2025 03:00:42 +0000
Manifest next update: Tue 06 May 2025 03:00:42 +0000
Files and hashes: 1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: 3vfo+8mRJK6GZ14HkIkfnPGgyCxd0eZiiu3av2AF7uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:7e:db:eb:63:bc:ec:cf:72:a7:6f:9a:92:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: May 5 03:00:42 2025 GMT
Not After : May 6 03:00:42 2025 GMT
Subject: CN=8f52406208975ba47ff13a4c7c3ed3583b3c5f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:e3:22:e0:95:ed:b5:ac:20:80:1a:9e:c1:
1e:6d:b2:c0:86:87:fd:e8:d7:09:d8:5c:f2:1e:86:
9d:f7:14:2e:05:d6:91:f6:67:4a:58:8c:ec:0f:b8:
cb:34:50:9b:e4:d0:cc:52:e0:14:95:8c:6f:91:f8:
e5:e1:be:c7:e4:8c:fb:2e:a3:6f:3c:4a:86:c6:4b:
be:fe:8b:83:e3:3d:5b:97:6f:95:76:4f:60:be:1f:
03:21:aa:4e:d7:65:78:90:09:27:12:65:b5:3f:58:
f3:5b:4e:b6:ec:69:8e:a3:9d:6e:da:16:1d:30:cf:
0c:f4:82:40:c0:9e:4e:59:a1:45:e6:e9:36:40:ca:
3f:1d:74:ce:fc:50:c9:7c:48:25:4f:14:f2:9d:e1:
c6:24:58:3e:1a:6b:c4:02:a2:a3:51:78:8c:2b:7f:
5b:91:d9:d4:53:cb:ef:e1:0c:ae:6b:1a:4e:8d:a0:
ff:1b:f1:f5:51:2a:94:aa:4a:3e:a2:05:03:e0:c6:
22:94:4b:bb:60:bc:d7:28:a5:22:64:69:13:41:b8:
9e:39:4d:0c:6a:c4:c8:62:e3:74:3b:56:fe:ab:fa:
7e:04:9b:ca:fc:b4:9e:8a:3c:ff:ac:2a:83:51:bc:
4d:aa:95:86:fc:52:33:70:f1:39:87:6a:d4:6a:9c:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:40:62:08:97:5B:A4:7F:F1:3A:4C:7C:3E:D3:58:3B:3C:5F:1C
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:47:0f:34:96:62:05:ed:f6:04:69:f7:63:c8:e1:04:b2:57:
67:16:cf:fa:8e:ef:9d:ed:0b:c0:88:b9:3a:e9:84:f6:da:98:
a1:35:f3:76:f3:7e:fe:f5:69:ed:63:a9:ca:a7:91:46:df:6f:
93:a7:56:4a:b3:10:19:37:e7:db:6e:d8:21:fe:48:63:ea:7c:
cc:22:b9:92:25:26:a3:f0:6f:43:f9:9b:7f:15:e0:4c:c7:6d:
c8:f3:ed:fb:8d:f7:44:02:50:e9:16:e2:1e:c4:35:91:91:26:
de:2d:1c:14:72:9e:70:3b:bc:01:f1:ed:1c:cd:8a:c5:14:1b:
88:2e:f1:2e:52:8d:e0:ac:7d:ac:82:40:77:68:92:2b:6e:29:
fa:31:a0:2b:d2:53:9e:f4:93:e0:04:21:97:e2:a9:5a:94:1b:
68:55:3d:b6:4d:aa:e6:71:e3:8d:20:c6:0d:aa:87:62:eb:7f:
b7:d8:bc:39:f6:f6:60:6b:ca:86:5e:9a:87:be:64:2d:17:29:
72:d8:3a:3a:08:83:6b:1a:b0:24:13:ec:4d:b1:8d:77:89:b3:
56:58:b8:96:92:9f:dc:28:55:4a:b1:76:1d:b0:08:13:08:66:
58:c3:42:de:ed:1d:bb:50:d9:a0:cb:72:5c:32:9b:63:45:91:
e2:9f:d8:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY37b62O87M9yp2+akuCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUwNTA1MDMwMDQyWhcNMjUwNTA2MDMwMDQyWjAzMTEwLwYDVQQD
Eyg4ZjUyNDA2MjA4OTc1YmE0N2ZmMTNhNGM3YzNlZDM1ODNiM2M1ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp83jIuCV7bWsIIAansEebbLAhof9
6NcJ2FzyHoad9xQuBdaR9mdKWIzsD7jLNFCb5NDMUuAUlYxvkfjl4b7H5Iz7LqNv
PEqGxku+/ouD4z1bl2+Vdk9gvh8DIapO12V4kAknEmW1P1jzW0627GmOo51u2hYd
MM8M9IJAwJ5OWaFF5uk2QMo/HXTO/FDJfEglTxTyneHGJFg+GmvEAqKjUXiMK39b
kdnUU8vv4QyuaxpOjaD/G/H1USqUqko+ogUD4MYilEu7YLzXKKUiZGkTQbieOU0M
asTIYuN0O1b+q/p+BJvK/LSeijz/rCqDUbxNqpWG/FIzcPE5h2rUapxYbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9SQGIIl1ukf/E6THw+01g7PF8cMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUcPNJZi
Be32BGn3Y8jhBLJXZxbP+o7vne0LwIi5OumE9tqYoTXzdvN+/vVp7WOpyqeRRt9v
k6dWSrMQGTfn227YIf5IY+p8zCK5kiUmo/BvQ/mbfxXgTMdtyPPt+433RAJQ6Rbi
HsQ1kZEm3i0cFHKecDu8AfHtHM2KxRQbiC7xLlKN4Kx9rIJAd2iSK24p+jGgK9JT
nvST4AQhl+KpWpQbaFU9tk2q5nHjjSDGDaqHYut/t9i8Ofb2YGvKhl6ah75kLRcp
ctg6OgiDaxqwJBPsTbGNd4mzVli4lpKf3ChVSrF2HbAIEwhmWMNC3u0du1DZoMty
XDKbY0WR4p/Y0g==
-----END CERTIFICATE-----
Generated at Mon May 5 11:02:22 2025 by rpki-client