Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json)
Hash identifier: FVJvZ+/FJTkbO0ulyTOFINE6JwcxcrJTDs3cVrqVBLg=
Subject key identifier: 9C:E0:C4:EC:CC:54:E3:4B:BA:81:89:3A:F0:D6:E0:91:D6:26:2D:A0
Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279
Certificate serial: 0196BF6EF1BD9D7BC332452141F930863C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
Manifest number: 0B37
Signing time: Sun 11 May 2025 13:00:41 +0000
Manifest this update: Sun 11 May 2025 13:00:41 +0000
Manifest next update: Mon 12 May 2025 13:00:41 +0000
Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: gj/9qsD4Do1uVbeFUoCBaTqy+UOOzUzdzHZ2Y6XpJH8=)
2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:f1:bd:9d:7b:c3:32:45:21:41:f9:30:86:3c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279
Validity
Not Before: May 11 13:00:41 2025 GMT
Not After : May 12 13:00:41 2025 GMT
Subject: CN=9ce0c4eccc54e34bba81893af0d6e091d6262da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:49:d9:6f:b5:f8:03:a5:91:08:ea:a3:10:
65:9e:a7:0f:05:5f:32:b3:8a:5d:e5:5d:5a:6d:a7:
b3:e2:01:1e:b0:4d:80:56:c7:8b:7a:04:14:b9:c9:
2e:c7:ac:6b:63:46:6c:06:c4:7d:55:02:55:93:7d:
14:c7:c6:1b:7a:0d:d4:f4:d3:05:af:07:f3:3e:72:
95:28:20:ea:d8:d3:96:d8:d2:d8:e7:1f:cf:b2:10:
51:17:aa:9f:dd:66:af:f6:73:e4:c2:df:f9:7b:13:
1d:5e:0f:b1:b9:e0:90:01:2a:02:f4:fb:e3:6a:f7:
8d:72:3e:8b:6b:24:c0:26:db:24:5e:ee:67:bb:f7:
93:8a:e8:e1:4b:b4:97:e7:4c:a5:18:b0:26:8e:b0:
6d:6c:16:c4:00:a1:d6:2d:d7:c9:72:19:94:ee:1a:
84:c6:fd:52:27:f7:94:67:47:77:4c:b1:7b:e6:1f:
1d:5b:0a:be:f7:08:fa:24:0a:97:d1:ff:18:09:aa:
49:77:1f:a4:5f:ba:72:d8:ea:b1:16:c9:57:10:03:
19:08:ff:23:4b:a8:5d:90:72:6a:67:37:93:96:36:
e5:45:e5:e8:e0:2e:af:16:19:37:cc:d2:7a:00:e8:
24:b6:08:39:33:68:b5:e5:25:3b:46:bc:91:49:8a:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:C4:EC:CC:54:E3:4B:BA:81:89:3A:F0:D6:E0:91:D6:26:2D:A0
X509v3 Authority Key Identifier:
keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:63:99:3b:44:7e:8d:f5:17:1b:cd:1f:ff:a8:bd:18:6e:
7d:ae:5c:38:f8:62:55:8c:b0:f8:fa:f0:09:16:41:01:16:ac:
a6:7c:30:b0:50:40:63:21:74:5e:07:9f:f2:70:99:4c:fc:6b:
66:64:d8:68:f9:14:61:5c:a4:91:30:2a:f0:13:37:03:5a:05:
1e:27:9f:13:01:b5:a7:3b:db:fd:63:3c:a5:dd:85:8e:f8:7a:
83:80:d6:43:71:bb:5b:44:35:c5:74:00:2c:05:27:9d:97:3c:
59:9c:14:bf:11:7d:96:df:20:f4:c3:a1:81:b1:f2:61:86:a0:
47:40:2b:ab:1d:7d:86:29:37:08:26:64:68:44:49:25:df:39:
e0:05:02:93:c1:d7:ed:0c:cf:a5:46:2b:42:b8:d7:8c:5a:57:
b4:3f:dc:17:7d:9d:21:d0:e6:3c:a0:aa:87:48:d8:32:2e:5a:
57:53:ce:4d:f3:35:6b:5e:89:d5:68:c1:32:38:bd:5c:66:8c:
e2:d8:ec:4e:64:eb:90:6f:ba:c6:8a:1b:ad:92:84:14:85:1a:
ab:08:76:dd:de:9b:25:77:14:dc:f1:71:ec:90:5a:05:e4:be:
cb:89:32:8d:a4:57:e5:5f:e9:0d:a4:0f:03:71:3a:6c:2f:e1:
9a:ce:a5:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bvG9nXvDMkUhQfkwhjyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjMxZGY4N2JkZmUyMjdhN2U1ZTQxOTM0MDM3MGJhYjMw
MWUyNzkwHhcNMjUwNTExMTMwMDQxWhcNMjUwNTEyMTMwMDQxWjAzMTEwLwYDVQQD
Eyg5Y2UwYzRlY2NjNTRlMzRiYmE4MTg5M2FmMGQ2ZTA5MWQ2MjYyZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFxJ2W+1+AOlkQjqoxBlnqcPBV8y
s4pd5V1abaez4gEesE2AVseLegQUuckux6xrY0ZsBsR9VQJVk30Ux8Ybeg3U9NMF
rwfzPnKVKCDq2NOW2NLY5x/PshBRF6qf3Wav9nPkwt/5exMdXg+xueCQASoC9Pvj
aveNcj6LayTAJtskXu5nu/eTiujhS7SX50ylGLAmjrBtbBbEAKHWLdfJchmU7hqE
xv1SJ/eUZ0d3TLF75h8dWwq+9wj6JAqX0f8YCapJdx+kX7py2OqxFslXEAMZCP8j
S6hdkHJqZzeTljblReXo4C6vFhk3zNJ6AOgktgg5M2i15SU7RryRSYpm/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzgxOzMVONLuoGJOvDW4JHWJi2gMB8GA1UdIwQY
MBaAFF4jHfh73+Inp+XkGTQDcLqzAeJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mNThlOGEtNjIyNy00ZDA3LWFjNTkt
NzZlZDVjYjBlMDIyLzEvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mNThlOGEtNjIyNy00ZDA3LWFjNTktNzZlZDVjYjBlMDIy
LzEvWGlNZC1IdmY0aWVuNWVRWk5BTnd1ck1CNG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFdjmTtE
fo31FxvNH/+ovRhufa5cOPhiVYyw+PrwCRZBARaspnwwsFBAYyF0Xgef8nCZTPxr
ZmTYaPkUYVykkTAq8BM3A1oFHiefEwG1pzvb/WM8pd2Fjvh6g4DWQ3G7W0Q1xXQA
LAUnnZc8WZwUvxF9lt8g9MOhgbHyYYagR0Arqx19hik3CCZkaERJJd854AUCk8HX
7QzPpUYrQrjXjFpXtD/cF32dIdDmPKCqh0jYMi5aV1POTfM1a16J1WjBMji9XGaM
4tjsTmTrkG+6xoobrZKEFIUaqwh23d6bJXcU3PFx7JBaBeS+y4kyjaRX5V/pDaQP
A3E6bC/hms6lSA==
-----END CERTIFICATE-----
Generated at Sun May 11 16:02:24 2025 by rpki-client