Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: kB4GRM0EPsm+6i4huxrznrlGWi/DVjiPA9yBy/gGkgM=
Subject key identifier: 48:87:D3:2F:D4:20:B3:57:3C:55:57:1B:31:64:84:C6:AF:62:9D:7F
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 0196C26FA89E94424D31FC4A8EA563F11744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 123E
Signing time: Mon 12 May 2025 03:00:19 +0000
Manifest this update: Mon 12 May 2025 03:00:19 +0000
Manifest next update: Tue 13 May 2025 03:00:19 +0000
Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: R9CzxIg+CEfbe3cwPoKyumni9ZKiWkIyrvEphaD7Gck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:a8:9e:94:42:4d:31:fc:4a:8e:a5:63:f1:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: May 12 03:00:19 2025 GMT
Not After : May 13 03:00:19 2025 GMT
Subject: CN=4887d32fd420b3573c55571b316484c6af629d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:d9:eb:8c:e0:72:1f:70:f7:c9:ee:94:4c:
d6:7c:d9:b2:db:64:a6:3c:77:0a:c1:87:db:1f:26:
22:ec:d7:8c:4d:81:32:d0:b5:9a:e7:5e:d9:86:a4:
2e:8f:a4:33:3d:1a:2f:05:f1:73:c9:92:bb:98:df:
94:d6:9c:ae:17:d5:8d:02:58:a3:7c:07:bc:54:b2:
7e:ab:34:be:17:08:ec:b4:07:a4:a7:93:7c:da:58:
92:3b:b2:b2:51:0a:67:4e:08:b9:88:57:a6:de:71:
c2:1f:a0:ef:e1:b4:68:d6:6d:56:32:de:1f:a4:44:
9a:47:e7:b6:18:09:87:09:a6:c5:9a:75:d9:0b:40:
15:75:64:24:cb:4e:82:ac:e2:7a:25:d9:0f:9a:a9:
b6:23:73:6c:97:d2:08:ca:44:c8:43:32:d7:03:59:
d3:bd:ae:67:d8:ba:33:86:a0:5e:9d:39:cd:dc:f5:
28:d8:78:d3:3c:aa:76:60:02:40:a6:c2:90:6f:ac:
27:e3:09:95:58:b7:60:3c:af:3b:9c:63:49:7d:ad:
35:2f:24:d6:86:ce:58:d7:68:b0:92:04:75:4c:7f:
d2:51:51:a6:4e:39:16:4b:b2:80:bb:d4:b7:3a:3c:
7b:9e:9c:f2:92:62:fb:eb:e7:42:05:2f:22:6a:ba:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:87:D3:2F:D4:20:B3:57:3C:55:57:1B:31:64:84:C6:AF:62:9D:7F
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0b:f3:6a:be:45:0a:25:e3:e5:c6:e0:dd:89:eb:6d:ad:fc:
cb:24:21:de:63:6b:b8:7d:2f:fc:ed:06:77:c9:0d:dc:62:2e:
0d:14:7b:d7:b6:31:a6:61:b7:79:ec:2e:4b:a4:97:fd:e3:cf:
f4:cf:85:a6:4f:be:30:e3:0f:20:6b:44:7b:2f:6b:01:c5:05:
e6:b2:d7:a9:cc:ea:bc:b8:d9:b4:5f:0d:d0:c5:fd:6b:08:07:
eb:1c:97:ae:a5:bb:f9:01:e7:a9:4d:84:4b:88:3a:48:08:de:
79:f6:70:a7:ad:d1:98:94:b9:69:0e:ab:b9:1c:5c:ee:b6:33:
b3:68:fe:cc:45:34:c9:b6:18:15:ea:e0:5e:09:ae:c0:ad:f0:
ab:3b:cf:2e:60:67:35:58:9f:38:ba:0a:1e:53:53:d2:0e:6e:
f4:f6:cb:9a:e5:59:b7:e9:95:ea:9b:31:c4:92:3b:fa:f9:59:
2e:0f:0a:7a:72:11:44:09:13:38:d8:84:a0:35:4a:e2:d6:0c:
85:ec:9a:af:8d:e2:f0:39:8c:8f:ff:0a:a6:f3:f0:f2:77:5d:
05:e8:2e:60:c5:f5:55:10:0e:bf:6a:51:3c:94:04:95:db:83:
df:fb:86:13:75:e3:ff:32:ae:09:a6:86:07:84:2d:bc:1e:f4:
98:cd:43:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb6ielEJNMfxKjqVj8RdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz
NGI1ZDEwHhcNMjUwNTEyMDMwMDE5WhcNMjUwNTEzMDMwMDE5WjAzMTEwLwYDVQQD
Eyg0ODg3ZDMyZmQ0MjBiMzU3M2M1NTU3MWIzMTY0ODRjNmFmNjI5ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQzZ64zgch9w98nulEzWfNmy22Sm
PHcKwYfbHyYi7NeMTYEy0LWa517ZhqQuj6QzPRovBfFzyZK7mN+U1pyuF9WNAlij
fAe8VLJ+qzS+FwjstAekp5N82liSO7KyUQpnTgi5iFem3nHCH6Dv4bRo1m1WMt4f
pESaR+e2GAmHCabFmnXZC0AVdWQky06CrOJ6JdkPmqm2I3Nsl9IIykTIQzLXA1nT
va5n2LozhqBenTnN3PUo2HjTPKp2YAJApsKQb6wn4wmVWLdgPK87nGNJfa01LyTW
hs5Y12iwkgR1TH/SUVGmTjkWS7KAu9S3Ojx7npzykmL76+dCBS8iarqZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiH0y/UILNXPFVXGzFkhMavYp1/MB8GA1UdIwQY
MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt
ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1
LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwvzar5F
CiXj5cbg3Ynrba38yyQh3mNruH0v/O0Gd8kN3GIuDRR717YxpmG3eewuS6SX/ePP
9M+Fpk++MOMPIGtEey9rAcUF5rLXqczqvLjZtF8N0MX9awgH6xyXrqW7+QHnqU2E
S4g6SAjeefZwp63RmJS5aQ6ruRxc7rYzs2j+zEU0ybYYFergXgmuwK3wqzvPLmBn
NVifOLoKHlNT0g5u9PbLmuVZt+mV6psxxJI7+vlZLg8KenIRRAkTONiEoDVK4tYM
heyar43i8DmMj/8KpvPw8nddBeguYMX1VRAOv2pRPJQElduD3/uGE3Xj/zKuCaaG
B4QtvB70mM1DvQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:41:11 2025 by rpki-client