Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: Mu2bpN2jRpqN6YPNOxEUbly5NF45d4cvk1UwDaBB3hw=
Subject key identifier: 94:34:55:09:2F:05:17:DD:16:4C:94:CE:64:F5:B7:F5:18:4D:F5:2F
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 0196C26F9E4122A5BA62434DBEFB6E9FEDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0340
Signing time: Mon 12 May 2025 03:00:16 +0000
Manifest this update: Mon 12 May 2025 03:00:16 +0000
Manifest next update: Tue 13 May 2025 03:00:16 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: a+qmGE3auzRmWljDL4576+OApo0b6hF3Sj1C/RMCW/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:9e:41:22:a5:ba:62:43:4d:be:fb:6e:9f:ed:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: May 12 03:00:16 2025 GMT
Not After : May 13 03:00:16 2025 GMT
Subject: CN=943455092f0517dd164c94ce64f5b7f5184df52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:7d:d7:ae:af:eb:80:5a:60:a7:c2:6c:da:
1e:71:63:88:ac:b7:93:61:4a:4a:84:c7:d3:db:22:
df:d8:58:30:72:b8:8e:ab:6b:73:21:cf:b6:48:79:
1c:b5:8b:7d:98:71:c5:2e:1e:7f:8d:42:79:7d:92:
bc:81:57:23:95:f8:a0:8c:32:69:8b:05:e3:e5:52:
0b:d1:11:d5:ab:f8:f5:f4:e2:5a:16:4d:f5:1c:d9:
90:62:e2:ed:14:81:17:21:63:23:e6:ff:f3:d6:e4:
1a:d7:50:a3:2e:1f:c9:8d:4f:5c:86:c0:e8:4b:99:
17:b2:74:26:4b:8a:99:f5:20:5c:40:ac:05:a9:69:
fd:61:3e:ac:bf:04:ad:c0:b1:ed:07:5c:07:02:0f:
6f:27:f3:4b:87:5a:f8:17:85:07:62:1a:d4:7e:7e:
2e:83:c5:0a:a9:f9:62:35:cc:18:51:ff:87:fb:56:
cf:2a:71:b0:6e:f6:e0:6b:d2:45:1a:ce:32:0a:6d:
e9:53:fe:79:67:3d:ec:55:f3:e3:5e:eb:98:a4:ea:
7b:b7:26:20:12:68:3c:98:ba:7e:cb:34:4b:33:ae:
da:16:e2:35:bd:d2:ea:83:02:4e:9d:7f:b0:dc:6d:
0c:23:de:10:f0:5a:37:af:d5:06:1b:ed:f1:fe:90:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:34:55:09:2F:05:17:DD:16:4C:94:CE:64:F5:B7:F5:18:4D:F5:2F
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:0a:dd:5c:e8:4d:bd:90:7b:42:cb:64:c0:01:ee:98:ff:
11:a5:78:b4:ad:70:7d:af:8c:a8:ee:57:26:4d:5b:3b:b5:60:
6d:ef:ef:14:e5:83:a9:9d:5a:2e:b8:95:e2:89:3b:22:51:ff:
1a:09:a1:94:cd:0e:c4:d1:c6:89:20:8e:0b:82:c3:35:1a:15:
fb:c3:1d:0d:43:9f:da:a0:c9:6f:f2:bd:02:77:12:c4:8d:f3:
83:7d:fb:e1:e8:66:04:8a:de:33:17:02:a5:7f:f9:ec:29:5f:
62:da:02:72:3f:da:ea:2d:a1:ad:70:a1:0d:ce:15:62:dc:cf:
16:de:e9:a0:9d:f9:6e:de:24:d3:7a:5d:11:ee:28:d5:9a:39:
58:1b:9f:22:f5:74:37:e6:04:67:95:83:24:2a:76:b9:b3:74:
de:06:a3:8e:e7:62:6e:a5:db:a7:a4:9e:77:ac:87:a0:c9:36:
40:20:4f:99:31:42:34:92:25:28:71:fb:f3:cb:cd:60:06:26:
9e:f7:b7:21:9a:c8:c4:34:87:13:cf:ba:00:5d:5f:9b:de:3d:
f8:97:4a:a2:f3:0d:bb:01:89:6b:4c:08:d9:5d:23:bb:08:a1:
b5:8c:fc:c6:b6:d4:93:1f:2c:63:7a:7a:af:f8:53:6e:f8:04:
ab:2e:2b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb55BIqW6YkNNvvtun+3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm
MWRiNDYwHhcNMjUwNTEyMDMwMDE2WhcNMjUwNTEzMDMwMDE2WjAzMTEwLwYDVQQD
Eyg5NDM0NTUwOTJmMDUxN2RkMTY0Yzk0Y2U2NGY1YjdmNTE4NGRmNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+B9166v64BaYKfCbNoecWOIrLeT
YUpKhMfT2yLf2FgwcriOq2tzIc+2SHkctYt9mHHFLh5/jUJ5fZK8gVcjlfigjDJp
iwXj5VIL0RHVq/j19OJaFk31HNmQYuLtFIEXIWMj5v/z1uQa11CjLh/JjU9chsDo
S5kXsnQmS4qZ9SBcQKwFqWn9YT6svwStwLHtB1wHAg9vJ/NLh1r4F4UHYhrUfn4u
g8UKqfliNcwYUf+H+1bPKnGwbvbga9JFGs4yCm3pU/55Zz3sVfPjXuuYpOp7tyYg
Emg8mLp+yzRLM67aFuI1vdLqgwJOnX+w3G0MI94Q8Fo3r9UGG+3x/pAbQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ0VQkvBRfdFkyUzmT1t/UYTfUvMB8GA1UdIwQY
MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt
MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy
LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnMK3Vzo
Tb2Qe0LLZMAB7pj/EaV4tK1wfa+MqO5XJk1bO7Vgbe/vFOWDqZ1aLriV4ok7IlH/
GgmhlM0OxNHGiSCOC4LDNRoV+8MdDUOf2qDJb/K9AncSxI3zg3374ehmBIreMxcC
pX/57ClfYtoCcj/a6i2hrXChDc4VYtzPFt7poJ35bt4k03pdEe4o1Zo5WBufIvV0
N+YEZ5WDJCp2ubN03gajjudibqXbp6Sed6yHoMk2QCBPmTFCNJIlKHH788vNYAYm
nve3IZrIxDSHE8+6AF1fm949+JdKovMNuwGJa0wI2V0juwihtYz8xrbUkx8sY3p6
r/hTbvgEqy4rfg==
-----END CERTIFICATE-----
Generated at Mon May 12 10:57:37 2025 by rpki-client