Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json)
Hash identifier: a5h7MpPB0NScYHKi0njL3cD1Jgoz0Xk4JVZlrvOLkCo=
Subject key identifier: F1:4F:77:B6:8A:87:54:36:F4:90:28:44:86:0B:9A:E4:70:E5:B9:D6
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 0196C5DED5842EAB0D4E3435A6F506FDB81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 19:00:37 +0000
Manifest this update: Mon 12 May 2025 19:00:37 +0000
Manifest next update: Tue 13 May 2025 19:00:37 +0000
Files and hashes: 1: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: ydEef9Yk8Hv5BwXbvP5czA2BhRfDReN68e93CJtEd98=)
2: nP0sRhZHCL86Iv0j3SDGQv7wJ1s.roa (hash: 1vLkNr3Sn/sdaJf6eykh/ZGw0jccrm4CGLqN9g8GoFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:d5:84:2e:ab:0d:4e:34:35:a6:f5:06:fd:b8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: May 12 19:00:37 2025 GMT
Not After : May 13 19:00:37 2025 GMT
Subject: CN=f14f77b68a875436f4902844860b9ae470e5b9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:fd:c9:46:fb:d1:7b:10:3f:f6:87:b4:ba:
5e:b7:5a:cf:b8:e0:0d:6e:a3:66:d5:dd:4e:8c:10:
7c:97:89:26:8e:ac:24:e3:b9:77:c8:e5:61:54:7b:
50:76:0d:b7:77:3b:51:1f:00:61:0a:64:c3:22:f4:
f6:37:85:fd:c8:75:61:31:a2:63:18:8c:50:9e:e4:
b1:a9:e4:73:35:18:68:2b:cc:08:b8:3a:60:02:a2:
e7:b3:8b:ef:aa:83:36:93:ae:24:60:18:4f:7c:2c:
19:2a:da:3d:d6:e7:15:50:e1:11:08:38:08:31:0f:
1a:9f:ad:45:53:e0:f9:d6:50:98:7c:46:6f:e1:58:
ac:5e:5c:9f:0e:80:89:de:9a:eb:06:2f:f7:aa:3e:
a4:ee:54:e6:2f:a7:a8:e4:b1:31:48:c3:59:10:b4:
f2:80:e6:84:76:18:6b:b8:17:ad:de:69:ab:24:b9:
64:8e:b8:9a:7f:41:36:aa:89:24:82:66:5d:ab:5d:
d0:9f:0d:f6:a0:d1:4e:30:b3:c2:e6:52:a4:06:0e:
0e:0b:29:d6:99:1c:37:e8:f6:f4:5e:0c:ff:bc:38:
bc:32:0b:af:61:d6:c5:98:dc:94:16:e4:0f:85:65:
71:9a:47:ff:ec:8b:48:e6:77:73:4b:01:43:86:c1:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:77:B6:8A:87:54:36:F4:90:28:44:86:0B:9A:E4:70:E5:B9:D6
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:00:c5:bc:76:f5:f4:d5:c6:22:cf:ef:77:a1:51:02:7e:
69:a3:fb:3b:be:c9:c3:56:35:dc:87:c7:f5:78:96:2c:27:41:
8a:c1:8e:be:17:e2:61:7d:26:f9:02:16:bb:a9:aa:e0:74:a5:
ca:1a:0d:53:91:83:d6:c0:13:71:2d:55:d6:50:d8:b7:24:10:
b1:25:03:1b:3c:56:19:40:8a:ae:ce:85:a7:eb:79:8a:40:0e:
d3:f0:47:b9:10:57:ae:5a:d6:bc:e2:ef:97:55:0c:d1:0d:a5:
7f:07:04:30:49:f2:94:05:88:ec:59:1c:ad:89:35:9f:58:e5:
31:1d:f0:a5:e6:35:54:75:01:a8:df:ee:17:9e:e7:67:3e:e8:
7a:d4:63:ab:56:42:54:9b:b0:09:59:12:f4:a3:7e:c3:59:1f:
7c:4c:20:15:40:b6:dc:99:39:78:28:97:9c:c9:6d:30:a3:24:
26:91:34:dc:f5:b1:8e:0c:5f:13:42:fc:d0:8f:bc:85:01:8b:
16:76:ff:78:32:9b:61:ce:3e:02:72:f6:70:8e:26:d4:d6:3e:
00:0f:75:04:bb:70:4d:6b:58:a7:33:28:2f:17:08:f0:e0:80:
b5:60:df:39:13:18:8b:04:8c:68:00:fa:36:d6:a3:84:ac:51:
29:e9:64:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3tWELqsNTjQ1pvUG/bgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2MyZjdkNzkwYTgzMDBhN2RkMzUxOWUwZmI4ODdmYTRk
ZTAyNjAwHhcNMjUwNTEyMTkwMDM3WhcNMjUwNTEzMTkwMDM3WjAzMTEwLwYDVQQD
EyhmMTRmNzdiNjhhODc1NDM2ZjQ5MDI4NDQ4NjBiOWFlNDcwZTViOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+L9yUb70XsQP/aHtLpet1rPuOAN
bqNm1d1OjBB8l4kmjqwk47l3yOVhVHtQdg23dztRHwBhCmTDIvT2N4X9yHVhMaJj
GIxQnuSxqeRzNRhoK8wIuDpgAqLns4vvqoM2k64kYBhPfCwZKto91ucVUOERCDgI
MQ8an61FU+D51lCYfEZv4VisXlyfDoCJ3prrBi/3qj6k7lTmL6eo5LExSMNZELTy
gOaEdhhruBet3mmrJLlkjriaf0E2qokkgmZdq13Qnw32oNFOMLPC5lKkBg4OCynW
mRw36Pb0Xgz/vDi8MguvYdbFmNyUFuQPhWVxmkf/7ItI5ndzSwFDhsGevwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFPd7aKh1Q29JAoRIYLmuRw5bnWMB8GA1UdIwQY
MBaAFF3ML315CoMAp901GeD7iH+k3gJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEt
YmY3MTQ0OWQ5N2RkLzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEtYmY3MTQ0OWQ5N2Rk
LzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlREAxbx2
9fTVxiLP73ehUQJ+aaP7O77Jw1Y13IfH9XiWLCdBisGOvhfiYX0m+QIWu6mq4HSl
yhoNU5GD1sATcS1V1lDYtyQQsSUDGzxWGUCKrs6Fp+t5ikAO0/BHuRBXrlrWvOLv
l1UM0Q2lfwcEMEnylAWI7FkcrYk1n1jlMR3wpeY1VHUBqN/uF57nZz7oetRjq1ZC
VJuwCVkS9KN+w1kffEwgFUC23Jk5eCiXnMltMKMkJpE03PWxjgxfE0L80I+8hQGL
Fnb/eDKbYc4+AnL2cI4m1NY+AA91BLtwTWtYpzMoLxcI8OCAtWDfORMYiwSMaAD6
NtajhKxRKelkMA==
-----END CERTIFICATE-----
Generated at Mon May 12 23:55:59 2025 by rpki-client