Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
File: sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft (raw, json)
Hash identifier: bvuio5snNpnrVFHvIAImmHmDUZIgdyQYLF6/OvC0iIQ=
Subject key identifier: D4:1D:6F:10:BE:1A:00:BB:6E:D7:3B:EF:25:CC:F4:C1:D4:06:E0:0B
Authority key identifier: B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
Certificate issuer: /CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Certificate serial: 01965C4C4C1097E6804BAAF67BD93D854F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
Manifest number: 1482
Signing time: Tue 22 Apr 2025 07:00:26 +0000
Manifest this update: Tue 22 Apr 2025 07:00:26 +0000
Manifest next update: Wed 23 Apr 2025 07:00:26 +0000
Files and hashes: 1: F8n_Svao3XVMTZ9Sm-3QBaNvm1s.roa (hash: jXQFrBti/A7a3NKEgrbBnXx/tbixG/ctP16QJsp1XeE=)
2: sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl (hash: +egIQaQKHDeoOdlbIUCD5YTh4nazqYtHmIqxltFuHrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:4c:10:97:e6:80:4b:aa:f6:7b:d9:3d:85:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14658fcab37032dfea96ef0ae68dc9deff6d705
Validity
Not Before: Apr 22 07:00:26 2025 GMT
Not After : Apr 23 07:00:26 2025 GMT
Subject: CN=d41d6f10be1a00bb6ed73bef25ccf4c1d406e00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:1a:6d:6d:a3:d0:7f:9e:a2:c4:fc:0c:36:
a9:fb:98:23:ee:8d:6c:01:62:5f:2c:92:80:07:bf:
7c:81:eb:13:46:c9:ff:59:21:28:59:1c:01:d1:22:
65:49:47:df:5a:91:2e:36:fc:c7:7a:f4:54:84:2c:
27:30:c3:7e:51:35:a0:52:7f:2e:58:1e:b0:2f:3a:
33:fb:c3:c6:d3:84:8c:bb:f7:7c:32:42:4b:23:6a:
50:25:47:bd:46:a8:f0:9f:dd:14:d9:56:2f:41:2c:
c2:3a:d0:dc:70:8c:2a:e6:f2:89:2c:34:6f:f8:53:
27:b2:e4:b9:9c:09:72:af:c1:c5:73:d2:2d:1a:da:
29:31:79:1d:da:77:86:cb:1e:56:ab:dc:d0:f4:77:
98:a7:2f:d9:e9:88:a4:70:f9:bf:5c:20:c6:f6:94:
df:24:42:ef:97:27:3d:e4:30:3f:d4:2a:53:43:ba:
a2:d9:a3:4d:8c:87:28:b7:05:30:d2:cb:88:ff:93:
01:83:67:4d:4b:b2:6b:67:a7:02:f1:7e:b8:85:86:
69:e2:c3:ce:67:d2:43:17:15:c9:72:c9:cf:dd:b5:
d8:be:51:62:e2:ee:e0:09:cc:7c:c0:bc:3b:7b:43:
36:b3:7d:be:98:7c:9a:35:fe:f7:30:56:ff:b1:c4:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1D:6F:10:BE:1A:00:BB:6E:D7:3B:EF:25:CC:F4:C1:D4:06:E0:0B
X509v3 Authority Key Identifier:
keyid:B1:46:58:FC:AB:37:03:2D:FE:A9:6E:F0:AE:68:DC:9D:EF:F6:D7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUZY_Ks3Ay3-qW7wrmjcne_21wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5f6566-8160-4394-875f-a7ead8ab1273/1/sUZY_Ks3Ay3-qW7wrmjcne_21wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:87:19:67:6f:5e:a7:7f:3b:cd:cd:e5:96:67:5b:e7:5b:5c:
d1:0e:5c:8f:33:c7:48:09:f2:4b:28:b8:bc:30:f7:c7:a5:de:
17:64:89:bd:61:d6:f1:9a:a8:64:69:44:56:b3:1f:ce:d3:a8:
8b:54:37:66:0d:0d:bf:1e:1e:ea:80:33:c6:f2:c3:b2:c3:3c:
0c:b3:88:81:d8:64:c1:71:86:a3:3d:3c:84:3f:ae:20:fd:75:
73:5e:b9:1a:89:60:46:73:5e:f0:40:15:1f:57:98:53:e6:69:
2a:7b:4d:b2:69:fd:89:d4:64:7b:4a:cc:87:1c:48:45:c6:7e:
54:92:64:9b:f7:e2:c2:93:88:cb:89:2b:28:36:fe:4f:d2:e0:
d9:df:e5:52:03:26:da:04:d4:85:e0:f7:1f:2f:c1:26:29:fe:
76:cd:52:96:51:89:23:86:9e:5c:de:4b:2c:4a:c7:a6:05:87:
f9:7d:a3:98:31:de:d5:32:43:b6:9d:2b:c2:22:1e:19:a3:34:
cd:50:ed:48:a9:ab:47:44:93:a2:d8:79:9c:3b:a0:e3:08:16:
31:3a:1d:7e:26:0c:d2:d7:f7:18:dd:02:31:ef:5b:ab:f5:75:
b4:42:1c:f4:c1:d3:33:25:a5:18:c9:eb:7e:ee:66:c1:07:b1:
cc:0c:38:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcTEwQl+aAS6r2e9k9hU8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDY1OGZjYWIzNzAzMmRmZWE5NmVmMGFlNjhkYzlkZWZm
NmQ3MDUwHhcNMjUwNDIyMDcwMDI2WhcNMjUwNDIzMDcwMDI2WjAzMTEwLwYDVQQD
EyhkNDFkNmYxMGJlMWEwMGJiNmVkNzNiZWYyNWNjZjRjMWQ0MDZlMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdIabW2j0H+eosT8DDap+5gj7o1s
AWJfLJKAB798gesTRsn/WSEoWRwB0SJlSUffWpEuNvzHevRUhCwnMMN+UTWgUn8u
WB6wLzoz+8PG04SMu/d8MkJLI2pQJUe9Rqjwn90U2VYvQSzCOtDccIwq5vKJLDRv
+FMnsuS5nAlyr8HFc9ItGtopMXkd2neGyx5Wq9zQ9HeYpy/Z6YikcPm/XCDG9pTf
JELvlyc95DA/1CpTQ7qi2aNNjIcotwUw0suI/5MBg2dNS7JrZ6cC8X64hYZp4sPO
Z9JDFxXJcsnP3bXYvlFi4u7gCcx8wLw7e0M2s32+mHyaNf73MFb/scTARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQdbxC+GgC7btc77yXM9MHUBuALMB8GA1UdIwQY
MBaAFLFGWPyrNwMt/qlu8K5o3J3v9tcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYt
YTdlYWQ4YWIxMjczLzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZjY1NjYtODE2MC00Mzk0LTg3NWYtYTdlYWQ4YWIxMjcz
LzEvc1VaWV9LczNBeTMtcVc3d3JtamNuZV8yMXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqocZZ29e
p387zc3llmdb51tc0Q5cjzPHSAnySyi4vDD3x6XeF2SJvWHW8ZqoZGlEVrMfztOo
i1Q3Zg0Nvx4e6oAzxvLDssM8DLOIgdhkwXGGoz08hD+uIP11c165GolgRnNe8EAV
H1eYU+ZpKntNsmn9idRke0rMhxxIRcZ+VJJkm/fiwpOIy4krKDb+T9Lg2d/lUgMm
2gTUheD3Hy/BJin+ds1SllGJI4aeXN5LLErHpgWH+X2jmDHe1TJDtp0rwiIeGaM0
zVDtSKmrR0SToth5nDug4wgWMTodfiYM0tf3GN0CMe9bq/V1tEIc9MHTMyWlGMnr
fu5mwQexzAw42A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:53:27 2025 by rpki-client