Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json)
Hash identifier: q0Hg2R1IzzcvxjmeB20cb/IlGPP6Xwk3VK1z3cB113k=
Subject key identifier: 17:66:39:C3:B2:B4:82:63:F3:C9:C0:85:30:D7:78:43:4B:A4:7D:37
Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Certificate serial: 0196C0B8A318EC7EC3FAB89BEC25E01697FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
Manifest number: 0E55
Signing time: Sun 11 May 2025 19:00:47 +0000
Manifest this update: Sun 11 May 2025 19:00:47 +0000
Manifest next update: Mon 12 May 2025 19:00:47 +0000
Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: hdBo/kP5QmiO/y4dv/NaPzFSJBS6KuXZSNt+EE5SyRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:a3:18:ec:7e:c3:fa:b8:9b:ec:25:e0:16:97:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5
Validity
Not Before: May 11 19:00:47 2025 GMT
Not After : May 12 19:00:47 2025 GMT
Subject: CN=176639c3b2b48263f3c9c08530d778434ba47d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:dd:ce:4a:c6:cb:e5:ca:4a:55:04:61:ab:
e1:f2:60:8d:81:7c:ac:af:a0:e8:7a:a0:7f:0f:2b:
d6:66:cd:40:ca:fc:3e:34:42:2a:51:eb:f2:8e:d0:
71:67:6f:68:ec:67:46:17:cb:f0:aa:81:f3:f3:fc:
d8:79:b2:e2:a6:7c:c2:63:ce:af:26:81:ec:f8:14:
1d:09:ab:16:07:9f:4f:e4:97:24:e7:d0:27:9f:b6:
97:69:f6:e7:d0:b3:fe:47:5c:81:dc:5c:cc:b4:54:
8a:93:38:9c:4b:ec:fc:4d:72:7e:7d:82:7e:19:30:
02:49:a3:3b:90:a4:a1:b8:e0:cd:a2:3c:07:1b:d3:
7e:0c:eb:d7:d3:80:57:66:35:cc:61:06:2b:20:42:
82:77:72:1c:9e:ad:6b:c6:55:fe:70:c2:f5:b1:f2:
1d:25:db:ec:98:f7:06:c3:d9:1b:85:81:3d:25:95:
40:de:d8:42:6c:cf:49:07:f6:d9:bb:b9:12:52:59:
fb:83:a0:d1:e3:77:26:c5:c4:9f:64:27:e3:54:e5:
df:26:a4:83:34:0d:06:27:8a:a0:ac:3b:b6:6d:f2:
00:70:57:56:8b:f3:60:a0:24:d8:39:b7:03:f5:da:
2c:6c:85:83:07:9c:d8:d7:8d:39:fc:6c:7d:a8:a3:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:39:C3:B2:B4:82:63:F3:C9:C0:85:30:D7:78:43:4B:A4:7D:37
X509v3 Authority Key Identifier:
keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0c:e1:ca:64:69:bb:b0:88:43:41:a6:19:94:64:d1:32:42:
9e:5e:7f:2f:66:76:63:8a:b7:d6:ac:ab:ca:25:2a:ee:67:ec:
c5:9d:4e:1e:03:e7:04:67:0a:76:cb:ba:23:50:ae:90:9a:ca:
8f:17:a2:bc:6f:80:8a:23:dd:a7:2d:fc:86:55:1d:27:d7:ea:
62:e1:db:b3:f8:cb:da:5a:03:76:94:71:bb:15:51:f7:b9:ed:
d4:c0:ea:95:b6:43:43:af:95:69:43:f4:1e:cf:8e:3c:11:91:
26:b8:b1:4f:4f:44:66:0e:83:be:ee:37:0f:2f:5e:95:88:92:
15:0e:84:bb:60:e6:e6:d3:83:eb:a4:dd:a5:de:9c:8c:8c:99:
1d:58:3a:48:4c:b5:cc:f5:6f:b3:41:bf:a9:c3:df:18:7b:83:
67:4e:4b:95:3b:62:44:f5:49:1e:ae:df:81:e1:d0:20:8b:29:
78:44:db:d2:60:ac:5a:45:39:55:e8:58:98:88:5e:d8:67:f9:
c6:fd:16:55:b0:e3:e9:4e:bc:6d:d7:7a:dc:0d:07:09:67:25:
a8:1a:4b:e0:7c:85:5d:ad:f8:9e:4b:bd:b0:9d:d0:2e:b6:71:
22:1e:bf:46:f0:8f:9b:26:50:7d:c6:38:a7:9a:5e:fe:9f:2a:
bb:86:2e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuKMY7H7D+rib7CXgFpf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTQ0Y2U0MGQxMWQ2MWQzYjgwYTdkMTAzMjMwMTIzZmI3
ZDY4YTUwHhcNMjUwNTExMTkwMDQ3WhcNMjUwNTEyMTkwMDQ3WjAzMTEwLwYDVQQD
EygxNzY2MzljM2IyYjQ4MjYzZjNjOWMwODUzMGQ3Nzg0MzRiYTQ3ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdXdzkrGy+XKSlUEYavh8mCNgXys
r6DoeqB/DyvWZs1Ayvw+NEIqUevyjtBxZ29o7GdGF8vwqoHz8/zYebLipnzCY86v
JoHs+BQdCasWB59P5Jck59Ann7aXafbn0LP+R1yB3FzMtFSKkzicS+z8TXJ+fYJ+
GTACSaM7kKShuODNojwHG9N+DOvX04BXZjXMYQYrIEKCd3Icnq1rxlX+cML1sfId
JdvsmPcGw9kbhYE9JZVA3thCbM9JB/bZu7kSUln7g6DR43cmxcSfZCfjVOXfJqSD
NA0GJ4qgrDu2bfIAcFdWi/NgoCTYObcD9dosbIWDB5zY1405/Gx9qKMAWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdmOcOytIJj88nAhTDXeENLpH03MB8GA1UdIwQY
MBaAFMVUTOQNEdYdO4Cn0QMjASP7fWilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQt
NTI3Y2IyNGRiZDQwLzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQtNTI3Y2IyNGRiZDQw
LzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQzhymRp
u7CIQ0GmGZRk0TJCnl5/L2Z2Y4q31qyryiUq7mfsxZ1OHgPnBGcKdsu6I1CukJrK
jxeivG+AiiPdpy38hlUdJ9fqYuHbs/jL2loDdpRxuxVR97nt1MDqlbZDQ6+VaUP0
Hs+OPBGRJrixT09EZg6Dvu43Dy9elYiSFQ6Eu2Dm5tOD66Tdpd6cjIyZHVg6SEy1
zPVvs0G/qcPfGHuDZ05LlTtiRPVJHq7fgeHQIIspeETb0mCsWkU5VehYmIhe2Gf5
xv0WVbDj6U68bdd63A0HCWclqBpL4HyFXa34nku9sJ3QLrZxIh6/RvCPmyZQfcY4
p5pe/p8qu4YuRA==
-----END CERTIFICATE-----
Generated at Mon May 12 04:08:49 2025 by rpki-client