Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
File: S4xZ6sloSDTLl8wq2FjVx03PbO0.mft (raw, json)
Hash identifier: DyunGPSlqBfAZs9QjRORpvVBa/LpJgdqq0N47rTlcY8=
Subject key identifier: C0:D1:89:60:3B:33:DC:5B:6B:35:FF:CF:07:E0:99:AA:B5:FB:09:A9
Authority key identifier: 4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
Certificate issuer: /CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Certificate serial: 01964AEADA7A21FAA19E877BA1492343F368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
Manifest number: 035F
Signing time: Fri 18 Apr 2025 22:00:27 +0000
Manifest this update: Fri 18 Apr 2025 22:00:27 +0000
Manifest next update: Sat 19 Apr 2025 22:00:27 +0000
Files and hashes: 1: RX0vF7s1v3ZmCOZA2PNfN34Nc0Q.roa (hash: DL5GkVVXEPj8zi75flOVBOwBTEyMxXVt8DN9ATKiCDI=)
2: S4xZ6sloSDTLl8wq2FjVx03PbO0.crl (hash: CSg865vdV3tuH4Ze0HpMQRX723wsikrTT5QcWLeZYc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:da:7a:21:fa:a1:9e:87:7b:a1:49:23:43:f3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c59eac9684834cb97cc2ad858d5c74dcf6ced
Validity
Not Before: Apr 18 22:00:27 2025 GMT
Not After : Apr 19 22:00:27 2025 GMT
Subject: CN=c0d189603b33dc5b6b35ffcf07e099aab5fb09a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:f3:e9:fc:c0:37:ee:b3:9b:7e:9a:71:7d:
f2:55:8b:a7:c3:6f:ca:a8:b5:a0:01:43:69:e1:3a:
3c:29:28:63:b1:04:48:7d:f8:a1:42:14:68:63:0a:
9e:b8:99:f3:da:4f:74:70:6a:f0:0e:f8:52:2c:fc:
fd:db:57:32:67:98:85:3d:c6:ad:4e:9c:7d:b1:a2:
2d:d7:5a:5a:be:14:ed:0b:fb:87:74:dc:e1:3e:e5:
9d:06:26:8c:8d:34:4b:17:57:f3:4e:bd:21:9a:41:
25:ed:b7:16:6b:aa:9e:3b:a2:3b:eb:5e:1f:8e:82:
65:b8:38:6b:b6:b6:23:ef:bc:77:6f:9f:65:a7:68:
66:ad:b7:f2:12:43:55:6f:ec:b2:e9:f5:9c:e2:f8:
43:2b:af:b4:08:0e:d2:ce:8b:34:23:39:c7:50:82:
dd:32:a2:55:75:c7:6b:66:1d:30:99:48:e4:0c:67:
39:3c:bf:d2:79:3e:e1:8e:c5:44:7b:12:5d:32:bc:
af:09:08:4d:bb:b2:f2:31:78:d9:87:7a:73:9b:32:
41:d6:d2:ba:dd:08:5c:60:70:75:69:bd:de:0b:c5:
08:cd:3c:b9:4a:c5:0a:b9:5c:25:93:12:c0:3b:6c:
1e:e5:1d:86:54:ea:25:93:7f:a2:f3:f5:c2:4f:5b:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:89:60:3B:33:DC:5B:6B:35:FF:CF:07:E0:99:AA:B5:FB:09:A9
X509v3 Authority Key Identifier:
keyid:4B:8C:59:EA:C9:68:48:34:CB:97:CC:2A:D8:58:D5:C7:4D:CF:6C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4xZ6sloSDTLl8wq2FjVx03PbO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/942e61-7ee6-41d4-b691-019a05ce5e7a/1/S4xZ6sloSDTLl8wq2FjVx03PbO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b4:6f:d6:f2:83:e3:3e:ab:0e:47:6c:1a:36:a0:98:03:30:
dd:32:44:a2:6b:d1:2a:59:81:62:d4:df:c2:17:8e:47:80:dc:
ed:2c:75:dc:7e:35:e4:ea:b0:75:df:8c:19:63:12:7e:64:27:
b5:da:d7:a2:6f:4b:66:7e:0e:e9:18:14:68:d4:99:2c:95:55:
f7:8c:e6:13:9a:86:26:94:52:81:d7:bc:83:41:3c:e5:d0:ae:
2f:a7:d7:3a:b2:2d:a3:87:12:ac:07:85:19:db:de:55:b2:d4:
41:78:6b:4b:cc:eb:61:ee:4a:36:f9:cb:6a:6a:29:0c:6a:a3:
d8:e2:00:fb:18:07:07:c4:fc:82:7e:a3:dc:f6:f6:10:3e:2a:
21:26:ae:14:89:5f:14:41:09:0e:b6:96:7d:b3:4d:46:44:aa:
28:03:24:e1:d2:51:67:b6:99:4d:5c:42:e3:b9:ef:8c:72:05:
e2:ad:e5:57:ba:70:81:2a:4d:bb:98:c4:95:5e:32:9c:57:01:
6d:41:15:11:9d:dc:90:08:87:49:76:7e:0c:a1:66:66:5e:05:
36:df:a9:68:8d:8f:e3:35:32:91:f7:93:f5:8b:d8:b7:36:c5:
a4:1e:5c:24:69:34:56:c6:c9:56:a8:49:06:4e:2d:78:b5:53:
a2:bf:30:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK6tp6Ifqhnod7oUkjQ/NoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGM1OWVhYzk2ODQ4MzRjYjk3Y2MyYWQ4NThkNWM3NGRj
ZjZjZWQwHhcNMjUwNDE4MjIwMDI3WhcNMjUwNDE5MjIwMDI3WjAzMTEwLwYDVQQD
EyhjMGQxODk2MDNiMzNkYzViNmIzNWZmY2YwN2UwOTlhYWI1ZmIwOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG/z6fzAN+6zm36acX3yVYunw2/K
qLWgAUNp4To8KShjsQRIffihQhRoYwqeuJnz2k90cGrwDvhSLPz921cyZ5iFPcat
Tpx9saIt11pavhTtC/uHdNzhPuWdBiaMjTRLF1fzTr0hmkEl7bcWa6qeO6I7614f
joJluDhrtrYj77x3b59lp2hmrbfyEkNVb+yy6fWc4vhDK6+0CA7Szos0IznHUILd
MqJVdcdrZh0wmUjkDGc5PL/SeT7hjsVEexJdMryvCQhNu7LyMXjZh3pzmzJB1tK6
3QhcYHB1ab3eC8UIzTy5SsUKuVwlkxLAO2we5R2GVOolk3+i8/XCT1tvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDRiWA7M9xbazX/zwfgmaq1+wmpMB8GA1UdIwQY
MBaAFEuMWerJaEg0y5fMKthY1cdNz2ztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEt
MDE5YTA1Y2U1ZTdhLzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85NDJlNjEtN2VlNi00MWQ0LWI2OTEtMDE5YTA1Y2U1ZTdh
LzEvUzR4WjZzbG9TRFRMbDh3cTJGalZ4MDNQYk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLRv1vKD
4z6rDkdsGjagmAMw3TJEomvRKlmBYtTfwheOR4Dc7Sx13H415Oqwdd+MGWMSfmQn
tdrXom9LZn4O6RgUaNSZLJVV94zmE5qGJpRSgde8g0E85dCuL6fXOrIto4cSrAeF
GdveVbLUQXhrS8zrYe5KNvnLamopDGqj2OIA+xgHB8T8gn6j3Pb2ED4qISauFIlf
FEEJDraWfbNNRkSqKAMk4dJRZ7aZTVxC47nvjHIF4q3lV7pwgSpNu5jElV4ynFcB
bUEVEZ3ckAiHSXZ+DKFmZl4FNt+paI2P4zUykfeT9YvYtzbFpB5cJGk0VsbJVqhJ
Bk4teLVTor8w7Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:49:51 2025 by rpki-client