Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: xb3tA6dB2OOnTaGjPwOW29+PUKgJSPAbvsjbSPhk2Y0=
Subject key identifier: CA:A5:25:2F:68:D2:F4:B7:D9:34:78:B5:68:90:82:E1:45:01:34:D1
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019653EE56B835601077CFA6563F2A547AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 16:00:50 +0000
Manifest this update: Sun 20 Apr 2025 16:00:50 +0000
Manifest next update: Mon 21 Apr 2025 16:00:50 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: k/OZkPs131mcPjZD0x45M2PI36PsvBHjH326bXP4g0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:56:b8:35:60:10:77:cf:a6:56:3f:2a:54:7a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Apr 20 16:00:50 2025 GMT
Not After : Apr 21 16:00:50 2025 GMT
Subject: CN=caa5252f68d2f4b7d93478b5689082e1450134d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:5b:2e:ed:c9:db:bc:47:ac:f4:e7:a3:72:
d3:95:4d:a6:f9:df:da:c8:9b:57:d4:b4:c9:d6:43:
05:1f:12:10:0d:02:b7:49:a4:cb:c2:81:1b:fe:c5:
5c:26:a2:72:95:2c:96:e9:d6:ac:46:7e:18:b8:0b:
aa:77:af:71:ba:9d:93:af:e7:89:40:0b:ee:c1:22:
6a:b0:90:9b:36:81:17:41:45:ff:7e:5e:ef:6a:f7:
a2:13:91:a2:44:19:b8:77:59:b9:e3:73:f7:8c:81:
10:90:39:11:bf:40:2d:fd:7d:7f:54:d6:c0:7f:94:
68:2e:37:7f:fe:a4:72:7e:33:9c:9b:e5:1d:14:b1:
75:e8:99:df:eb:c0:a4:ad:47:1d:c3:60:07:19:b1:
13:55:1c:6a:b6:df:66:56:24:5f:a7:4c:95:98:d1:
11:05:d9:45:f6:67:7f:6b:9b:d9:e1:76:80:80:3c:
cc:5c:96:21:50:11:62:d0:cd:19:b3:f0:97:2a:cc:
42:70:fc:9a:fb:26:e7:e8:99:3f:b3:38:99:45:0d:
db:1e:6c:6e:a3:ee:cc:f1:a8:7f:8d:c6:4d:07:ba:
55:fc:60:16:78:a7:96:59:11:18:07:0b:c2:1e:f1:
9a:06:a6:0b:92:90:3b:2b:84:68:36:2f:33:89:33:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:25:2F:68:D2:F4:B7:D9:34:78:B5:68:90:82:E1:45:01:34:D1
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:1c:df:0d:86:8c:97:9d:8b:ae:f3:8c:fe:9e:61:37:65:
48:1e:fe:a6:7e:d7:52:e6:10:ae:c3:1a:23:04:cd:69:96:11:
2c:c7:00:01:60:28:78:2d:05:df:98:21:71:25:5c:9d:9d:c0:
0a:62:43:d3:15:64:19:8e:7c:76:0f:f6:f2:91:b5:d2:4d:97:
c9:03:28:8d:3f:c4:bb:10:95:74:ba:11:28:34:41:c3:4c:af:
13:f9:da:83:2f:c0:d6:ca:2b:9a:30:42:c7:f2:34:48:17:72:
14:47:f6:3c:73:85:1a:b1:5a:63:d4:d2:9b:d5:04:91:3c:49:
19:ab:1f:6d:32:a3:69:de:ef:73:9f:22:5c:9d:d7:89:cd:a5:
02:07:fe:c3:9d:ce:20:e5:39:67:7d:ef:e9:c0:06:e2:a6:5b:
78:34:32:91:58:7b:f2:21:14:29:39:57:d6:1b:8c:8d:03:cd:
35:14:b1:b3:24:e2:6d:19:c3:18:d3:a7:29:67:96:df:a1:e2:
f2:cc:1f:3d:8d:6e:8d:15:ad:28:39:15:c7:3d:2e:34:d4:ca:
03:c1:b0:d4:cd:16:d2:9b:65:85:1c:c5:05:a1:c8:bc:1d:df:
1b:f6:d1:e5:50:d3:25:8f:00:2d:52:b3:71:23:c7:81:1d:30:
26:d2:af:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7la4NWAQd8+mVj8qVHr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZkNDUzZjVlMzVmOWM3N2QxZDcwNmU1NjUxMzhhZGY4
MjI1NmEwHhcNMjUwNDIwMTYwMDUwWhcNMjUwNDIxMTYwMDUwWjAzMTEwLwYDVQQD
EyhjYWE1MjUyZjY4ZDJmNGI3ZDkzNDc4YjU2ODkwODJlMTQ1MDEzNGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUZbLu3J27xHrPTno3LTlU2m+d/a
yJtX1LTJ1kMFHxIQDQK3SaTLwoEb/sVcJqJylSyW6dasRn4YuAuqd69xup2Tr+eJ
QAvuwSJqsJCbNoEXQUX/fl7vaveiE5GiRBm4d1m543P3jIEQkDkRv0At/X1/VNbA
f5RoLjd//qRyfjOcm+UdFLF16Jnf68CkrUcdw2AHGbETVRxqtt9mViRfp0yVmNER
BdlF9md/a5vZ4XaAgDzMXJYhUBFi0M0Zs/CXKsxCcPya+ybn6Jk/sziZRQ3bHmxu
o+7M8ah/jcZNB7pV/GAWeKeWWREYBwvCHvGaBqYLkpA7K4RoNi8ziTNMfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqlJS9o0vS32TR4tWiQguFFATTRMB8GA1UdIwQY
MBaAFEmP1FP141+cd9HXBuVlE4rfgiVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYt
Mzk3OWVmMGQzMmRiLzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYtMzk3OWVmMGQzMmRi
LzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAEc3w2G
jJedi67zjP6eYTdlSB7+pn7XUuYQrsMaIwTNaZYRLMcAAWAoeC0F35ghcSVcnZ3A
CmJD0xVkGY58dg/28pG10k2XyQMojT/EuxCVdLoRKDRBw0yvE/nagy/A1sormjBC
x/I0SBdyFEf2PHOFGrFaY9TSm9UEkTxJGasfbTKjad7vc58iXJ3Xic2lAgf+w53O
IOU5Z33v6cAG4qZbeDQykVh78iEUKTlX1huMjQPNNRSxsyTibRnDGNOnKWeW36Hi
8swfPY1ujRWtKDkVxz0uNNTKA8Gw1M0W0ptlhRzFBaHIvB3fG/bR5VDTJY8ALVKz
cSPHgR0wJtKvDA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:37 2025 by rpki-client