Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: sQLx/znmcc3V6Bq4wE41n+zgRTubSzpkrtB4cEBuRkM=
Subject key identifier: 8E:2D:D6:1A:A9:09:51:71:65:83:E3:55:E0:49:4E:9F:86:40:94:2F
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 0196A3899CF17903D3061A87606ACDB36AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 04AD
Signing time: Tue 06 May 2025 03:00:26 +0000
Manifest this update: Tue 06 May 2025 03:00:26 +0000
Manifest next update: Wed 07 May 2025 03:00:26 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: mA64RhqrB9qU4s2aq9sLFA3v+nuvf7cBOkAr9LqmHxc=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:9c:f1:79:03:d3:06:1a:87:60:6a:cd:b3:6a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: May 6 03:00:26 2025 GMT
Not After : May 7 03:00:26 2025 GMT
Subject: CN=8e2dd61aa90951716583e355e0494e9f8640942f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:44:38:99:3b:08:0a:99:e5:ee:8d:bb:cd:
21:e1:5e:c2:21:ca:3f:60:cb:cf:0f:a2:94:a7:3a:
7b:48:a1:70:b3:cd:b3:16:9d:fb:1a:ef:08:3e:67:
e2:13:65:27:f5:e4:67:c0:51:7d:9f:4e:48:6d:15:
96:16:a1:cb:29:43:63:fb:80:14:ea:43:25:da:a8:
c1:4f:c8:a2:79:21:39:cf:4a:a3:66:70:96:81:23:
e3:97:ad:f0:e3:49:b6:38:b6:88:62:25:a5:e0:47:
1b:ea:ee:9d:ea:41:35:b4:c5:4c:e1:43:0d:54:c6:
ee:25:ae:cd:fe:d3:ae:c0:e8:f4:8a:83:e8:1b:2e:
01:b5:c7:91:9e:08:d2:fb:a1:22:fa:4c:c7:c6:95:
67:c1:98:75:de:56:d8:4b:63:9b:ad:25:73:5d:4e:
c3:b4:24:1a:dc:ba:9f:28:b4:7c:83:6d:1b:25:ed:
c0:37:ca:28:9a:f3:3d:01:4e:ea:7b:3c:b9:2d:98:
9b:eb:b6:bb:aa:3a:07:0c:2c:e6:7b:e7:ef:dd:6b:
5f:4b:46:4f:b4:62:3f:c0:7e:f0:b1:08:63:a5:8f:
1d:86:f7:34:02:b1:f4:15:4b:b0:e0:e1:10:53:b2:
94:d7:0e:be:f4:4f:7a:ca:7d:aa:74:50:ee:0a:ca:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:D6:1A:A9:09:51:71:65:83:E3:55:E0:49:4E:9F:86:40:94:2F
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3a:63:73:50:37:4a:e0:9c:2c:1b:9c:10:23:e6:54:28:19:
38:07:4f:fb:87:ae:d6:b0:c5:9c:43:a3:35:92:a4:da:3b:b5:
6a:2b:35:0c:f9:85:39:9a:fa:26:04:00:64:be:3b:c9:ea:9d:
2e:38:65:b6:46:de:5a:2e:02:01:7c:c8:89:07:f6:9e:e6:eb:
1c:2f:e9:c6:35:1f:bc:af:66:75:e8:9b:8b:69:97:a5:2b:9f:
fe:76:09:28:d3:69:3a:e0:64:3c:80:a1:47:b8:08:c4:da:af:
53:3c:87:53:db:d6:b4:a0:bb:70:29:4d:4b:52:f0:17:0e:2a:
78:96:f5:94:17:65:16:11:a4:9b:9f:73:10:99:8e:58:0b:b7:
68:31:ab:19:e2:3b:74:8d:98:e9:17:90:f6:f5:fa:c3:c4:9d:
b4:ea:bb:bd:b8:3f:02:9e:ee:a5:96:0a:0a:17:2a:0c:16:ae:
63:d2:15:77:6c:53:55:1c:cc:d8:e4:3d:6b:87:92:7e:68:28:
53:13:28:87:46:a1:a3:4a:fa:e8:c1:0b:7d:e6:b7:e0:0a:ad:
14:ea:53:cc:61:22:ab:36:e0:98:e0:45:53:9b:b1:82:4f:c9:
1c:69:c4:14:d3:79:0e:22:78:03:66:b7:e0:3b:ce:88:b8:f7:
d7:b8:d6:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajiZzxeQPTBhqHYGrNs2rEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjUwNTA2MDMwMDI2WhcNMjUwNTA3MDMwMDI2WjAzMTEwLwYDVQQD
Eyg4ZTJkZDYxYWE5MDk1MTcxNjU4M2UzNTVlMDQ5NGU5Zjg2NDA5NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopxEOJk7CAqZ5e6Nu80h4V7CIco/
YMvPD6KUpzp7SKFws82zFp37Gu8IPmfiE2Un9eRnwFF9n05IbRWWFqHLKUNj+4AU
6kMl2qjBT8iieSE5z0qjZnCWgSPjl63w40m2OLaIYiWl4Ecb6u6d6kE1tMVM4UMN
VMbuJa7N/tOuwOj0ioPoGy4BtceRngjS+6Ei+kzHxpVnwZh13lbYS2ObrSVzXU7D
tCQa3LqfKLR8g20bJe3AN8oomvM9AU7qezy5LZib67a7qjoHDCzme+fv3WtfS0ZP
tGI/wH7wsQhjpY8dhvc0ArH0FUuw4OEQU7KU1w6+9E96yn2qdFDuCsq8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4t1hqpCVFxZYPjVeBJTp+GQJQvMB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjpjc1A3
SuCcLBucECPmVCgZOAdP+4eu1rDFnEOjNZKk2ju1ais1DPmFOZr6JgQAZL47yeqd
LjhltkbeWi4CAXzIiQf2nubrHC/pxjUfvK9mdeibi2mXpSuf/nYJKNNpOuBkPICh
R7gIxNqvUzyHU9vWtKC7cClNS1LwFw4qeJb1lBdlFhGkm59zEJmOWAu3aDGrGeI7
dI2Y6ReQ9vX6w8SdtOq7vbg/Ap7upZYKChcqDBauY9IVd2xTVRzM2OQ9a4eSfmgo
UxMoh0aho0r66MELfea34AqtFOpTzGEiqzbgmOBFU5uxgk/JHGnEFNN5DiJ4A2a3
4DvOiLj317jWEw==
-----END CERTIFICATE-----
Generated at Tue May 6 13:17:12 2025 by rpki-client