Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: fb6boPCTISQIsXyTNPBsmFuaYz3AVbVZpztneplSFCw=
Subject key identifier: D6:E9:3F:A1:26:C6:0B:46:08:CB:0C:91:27:A4:32:1D:A2:1A:85:0C
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01965123B56F08C0300579ADA0DF241EFEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 03:00:16 +0000
Manifest this update: Sun 20 Apr 2025 03:00:16 +0000
Manifest next update: Mon 21 Apr 2025 03:00:16 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: WA3huo7/YiEYg5xOJxg8M+9Zrfy6SOSEDcvhuy7/F+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:b5:6f:08:c0:30:05:79:ad:a0:df:24:1e:fe:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Apr 20 03:00:16 2025 GMT
Not After : Apr 21 03:00:16 2025 GMT
Subject: CN=d6e93fa126c60b4608cb0c9127a4321da21a850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:0a:5b:7c:9a:fe:21:eb:5b:7c:0e:1f:7e:
6e:5f:15:97:fc:81:92:c7:aa:d7:f6:6e:e7:72:00:
cd:a9:f3:38:16:62:b8:ad:fd:63:7b:07:42:b7:82:
25:c7:d1:d4:cf:ed:df:cb:93:54:1c:01:ab:45:21:
e7:04:70:30:5e:8c:95:ec:c8:11:44:41:53:9d:90:
47:8e:99:fe:e4:4f:a2:e4:c5:2b:6c:15:3d:98:fd:
58:8c:cf:e9:b8:c3:bb:c2:5f:3b:60:f6:c3:80:52:
3d:58:da:ae:35:48:5e:39:5d:10:b0:f7:bd:d4:d4:
4c:ab:4b:b4:78:b6:0a:f5:10:c6:5a:5b:15:26:78:
91:30:ea:d6:3a:b8:f9:66:33:5f:c8:22:0b:fe:bb:
f4:82:1e:9a:23:4d:88:fc:b7:f0:85:27:a9:1c:6e:
e1:68:d9:b3:3c:cd:6e:0e:04:35:0c:1c:07:49:44:
fe:a7:85:52:7d:9a:28:f4:21:9b:94:62:51:4c:22:
8d:31:f7:e0:39:96:e4:f8:fa:9d:c6:71:3f:43:c1:
66:81:41:f5:a2:90:bb:e4:ab:99:a0:39:86:8c:b9:
5a:5b:99:20:3b:7b:5e:05:1b:b5:a7:51:47:3f:2d:
a5:08:8f:eb:cb:0f:b0:9f:d5:3e:25:80:5d:b1:e9:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:3F:A1:26:C6:0B:46:08:CB:0C:91:27:A4:32:1D:A2:1A:85:0C
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0f:7e:86:41:85:8a:47:49:b1:5e:83:8f:3f:1a:3a:10:a9:
57:33:01:22:01:f3:85:3f:b4:11:f3:31:d2:59:8f:0a:32:a9:
d1:61:3a:fb:76:05:d4:e1:4b:10:0b:07:69:34:d2:b3:ae:d9:
5e:a5:01:df:d2:3b:7f:99:a3:51:49:f5:7b:76:6e:38:3d:4b:
6d:7c:f6:7e:2c:d9:ec:4e:4e:74:81:03:a4:97:25:d3:09:b9:
ed:d5:9c:fb:89:33:0a:69:c2:25:3e:07:90:b5:9c:72:20:a4:
c1:ba:a6:ce:2d:aa:2e:49:8c:0e:62:10:b6:2d:82:8d:11:63:
a9:c3:43:37:fa:d5:3b:37:13:99:03:46:82:f6:9c:3e:ec:fd:
59:e5:e6:f8:9c:ae:db:1d:24:b8:cb:b3:04:6b:98:ea:3c:4e:
55:90:da:56:cd:a5:70:27:d3:e5:7f:1c:44:78:7b:30:a8:82:
f0:e4:7d:53:bc:f4:c3:d8:45:e8:3b:86:3f:a1:3f:91:85:fb:
8e:f3:f9:7a:5c:fb:88:af:21:f7:bb:60:d5:4d:9b:bc:61:44:
00:c0:21:c1:c2:5b:d3:7c:6a:e3:7c:08:0f:47:c5:1d:6b:77:
45:02:b4:c9:50:83:49:18:ce:d4:cd:a2:63:56:64:4d:17:2a:
c2:37:f7:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRI7VvCMAwBXmtoN8kHv7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm
OWNhNTAwHhcNMjUwNDIwMDMwMDE2WhcNMjUwNDIxMDMwMDE2WjAzMTEwLwYDVQQD
EyhkNmU5M2ZhMTI2YzYwYjQ2MDhjYjBjOTEyN2E0MzIxZGEyMWE4NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbsKW3ya/iHrW3wOH35uXxWX/IGS
x6rX9m7ncgDNqfM4FmK4rf1jewdCt4Ilx9HUz+3fy5NUHAGrRSHnBHAwXoyV7MgR
REFTnZBHjpn+5E+i5MUrbBU9mP1YjM/puMO7wl87YPbDgFI9WNquNUheOV0QsPe9
1NRMq0u0eLYK9RDGWlsVJniRMOrWOrj5ZjNfyCIL/rv0gh6aI02I/LfwhSepHG7h
aNmzPM1uDgQ1DBwHSUT+p4VSfZoo9CGblGJRTCKNMffgOZbk+PqdxnE/Q8FmgUH1
opC75KuZoDmGjLlaW5kgO3teBRu1p1FHPy2lCI/ryw+wn9U+JYBdselBAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbpP6EmxgtGCMsMkSekMh2iGoUMMB8GA1UdIwQY
MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt
Njk0ZDc4YjMyZDIwLzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw
LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ9+hkGF
ikdJsV6Djz8aOhCpVzMBIgHzhT+0EfMx0lmPCjKp0WE6+3YF1OFLEAsHaTTSs67Z
XqUB39I7f5mjUUn1e3ZuOD1LbXz2fizZ7E5OdIEDpJcl0wm57dWc+4kzCmnCJT4H
kLWcciCkwbqmzi2qLkmMDmIQti2CjRFjqcNDN/rVOzcTmQNGgvacPuz9WeXm+Jyu
2x0kuMuzBGuY6jxOVZDaVs2lcCfT5X8cRHh7MKiC8OR9U7z0w9hF6DuGP6E/kYX7
jvP5elz7iK8h97tg1U2bvGFEAMAhwcJb03xq43wID0fFHWt3RQK0yVCDSRjO1M2i
Y1ZkTRcqwjf3XA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:11:59 2025 by rpki-client