Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
File: SPaKoudVqgrGmnD-jv6-pMIzVhE.mft (raw, json)
Hash identifier: MtL71Shc7HVeMuxODfGhvAL+5ReZoibpOc4isBkpXQc=
Subject key identifier: 96:0F:1F:1F:22:87:A8:EF:18:64:47:30:C8:C0:B8:32:07:D8:A4:DF
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 019656138AD81B043593ED1D988534DDB2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:43 +0000
Manifest this update: Mon 21 Apr 2025 02:00:43 +0000
Manifest next update: Tue 22 Apr 2025 02:00:43 +0000
Files and hashes: 1: SPaKoudVqgrGmnD-jv6-pMIzVhE.crl (hash: RcUbI2J0zoqG8SLPfpW6WPefCVg0O7Q3dYMbKuMrNqY=)
2: zdcU1X_muklbr0PsAXf5FfLi2-4.roa (hash: xVhUBfvK07juxF0BpH1Z7Z8zQ9yW0QLwTqhNif5nVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:8a:d8:1b:04:35:93:ed:1d:98:85:34:dd:b2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Apr 21 02:00:43 2025 GMT
Not After : Apr 22 02:00:43 2025 GMT
Subject: CN=960f1f1f2287a8ef18644730c8c0b83207d8a4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:4a:12:5d:c0:5a:49:69:fc:44:40:cf:76:
85:d7:9c:fb:70:74:53:89:62:0c:c9:cd:45:ea:04:
d7:59:fb:da:30:5e:2a:bc:17:82:84:df:10:79:4f:
91:1c:8b:c7:ca:2a:f4:13:f7:ca:73:f9:44:cc:ff:
79:b1:02:0b:69:74:09:37:64:c6:68:7a:76:87:0c:
00:91:e6:60:b6:18:b7:65:9f:5e:ca:5c:54:fb:1d:
2e:3a:8f:ac:bb:d8:f1:6c:8d:e2:f1:40:20:b4:db:
19:39:b1:d5:79:c4:f2:1c:3c:72:47:8b:4d:69:63:
cc:aa:58:c7:d8:53:87:23:7e:01:85:66:6f:c9:48:
35:4f:78:d8:e2:00:f1:5d:07:94:03:73:2a:31:93:
fc:d5:41:63:18:ee:f8:65:1d:2c:6a:39:cd:39:63:
cf:9b:22:74:d9:a3:04:7d:a7:41:79:da:67:06:81:
a6:66:84:3b:be:1e:af:6d:39:a6:6a:f2:8c:8a:83:
ae:95:e0:d8:15:8c:f6:44:d3:89:ce:46:a8:d2:ff:
64:ee:8c:46:45:e4:56:60:9b:5a:71:df:d6:bf:97:
5f:69:6a:9d:13:29:e6:4f:c3:3b:56:cc:7a:d9:dc:
ff:63:49:a3:51:e4:c1:3e:d7:d7:a2:5c:45:36:3a:
48:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:1F:1F:22:87:A8:EF:18:64:47:30:C8:C0:B8:32:07:D8:A4:DF
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:73:bb:e0:d6:30:56:52:3f:79:59:87:38:24:3d:53:df:
f0:6d:b5:03:ea:02:15:69:1a:c1:04:fd:e7:02:a2:24:c5:fa:
78:53:83:38:35:88:bf:db:63:d2:e1:76:b2:5a:27:b2:24:6d:
19:91:0e:20:dc:f5:c4:0e:c3:71:b1:ec:52:4e:c6:19:4c:e6:
16:9d:2c:e6:22:85:2e:b5:19:87:07:48:be:cb:f4:d9:65:15:
84:47:d6:9e:ad:0a:89:4b:5a:67:27:7a:a9:d5:65:35:1c:3d:
44:3d:13:68:b1:db:2d:03:48:e8:c0:57:44:7a:16:bf:1b:30:
d0:22:94:2b:9e:9d:fa:fc:83:ca:84:0a:b8:8e:2a:d6:8c:24:
ec:cc:be:4c:7c:c6:dd:ec:d1:86:9a:d2:ba:e1:54:ee:8b:1c:
b4:c1:be:99:d5:40:89:fa:21:64:48:9b:07:6b:da:21:d4:7b:
07:4f:c7:37:e3:f5:e9:62:c6:52:bd:6f:a9:e6:fb:8d:93:fa:
c2:e1:90:ca:26:1a:fd:0f:da:9e:14:b4:3b:79:78:10:c5:af:
9f:44:7d:1e:60:21:77:db:38:c5:e6:e8:4d:3b:f0:4b:e0:06:
fb:55:d0:d8:79:bb:05:19:74:21:91:a4:83:2d:d9:10:fc:c8:
4b:77:96:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE4rYGwQ1k+0dmIU03bLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZjY4YWEyZTc1NWFhMGFjNjlhNzBmZThlZmViZWE0YzIz
MzU2MTEwHhcNMjUwNDIxMDIwMDQzWhcNMjUwNDIyMDIwMDQzWjAzMTEwLwYDVQQD
Eyg5NjBmMWYxZjIyODdhOGVmMTg2NDQ3MzBjOGMwYjgzMjA3ZDhhNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52BKEl3AWklp/ERAz3aF15z7cHRT
iWIMyc1F6gTXWfvaMF4qvBeChN8QeU+RHIvHyir0E/fKc/lEzP95sQILaXQJN2TG
aHp2hwwAkeZgthi3ZZ9eylxU+x0uOo+su9jxbI3i8UAgtNsZObHVecTyHDxyR4tN
aWPMqljH2FOHI34BhWZvyUg1T3jY4gDxXQeUA3MqMZP81UFjGO74ZR0sajnNOWPP
myJ02aMEfadBedpnBoGmZoQ7vh6vbTmmavKMioOuleDYFYz2RNOJzkao0v9k7oxG
ReRWYJtacd/Wv5dfaWqdEynmT8M7Vsx62dz/Y0mjUeTBPtfXolxFNjpI3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYPHx8ih6jvGGRHMMjAuDIH2KTfMB8GA1UdIwQY
MBaAFEj2iqLnVaoKxppw/o7+vqTCM1YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lYzI4N2QtZWZhYi00MzQxLWJlNTMt
ZjJiNTQ0YjBmZTdiLzEvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lYzI4N2QtZWZhYi00MzQxLWJlNTMtZjJiNTQ0YjBmZTdi
LzEvU1BhS291ZFZxZ3JHbW5ELWp2Ni1wTUl6VmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTJzu+DW
MFZSP3lZhzgkPVPf8G21A+oCFWkawQT95wKiJMX6eFODODWIv9tj0uF2slonsiRt
GZEOINz1xA7DcbHsUk7GGUzmFp0s5iKFLrUZhwdIvsv02WUVhEfWnq0KiUtaZyd6
qdVlNRw9RD0TaLHbLQNI6MBXRHoWvxsw0CKUK56d+vyDyoQKuI4q1owk7My+THzG
3ezRhprSuuFU7osctMG+mdVAifohZEibB2vaIdR7B0/HN+P16WLGUr1vqeb7jZP6
wuGQyiYa/Q/anhS0O3l4EMWvn0R9HmAhd9s4xeboTTvwS+AG+1XQ2Hm7BRl0IZGk
gy3ZEPzIS3eW9A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:29:29 2025 by rpki-client