Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: vbD/8vxlOUtVG1ASHBNU+Ba4MgMUlwdNtWm2jZMA5mg=
Subject key identifier: B6:10:79:16:0D:13:24:7F:CB:AF:49:3B:A5:A8:B8:8D:32:E1:0E:DC
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019747427F3C0348126901D0A859D0E42AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 14D4
Signing time: Fri 06 Jun 2025 22:00:29 +0000
Manifest this update: Fri 06 Jun 2025 22:00:29 +0000
Manifest next update: Sat 07 Jun 2025 22:00:29 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: guZZoszq+EyZkA58p2GdXWENH0PyKvrr8vj+PKpO0R0=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:7f:3c:03:48:12:69:01:d0:a8:59:d0:e4:2a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Jun 6 22:00:29 2025 GMT
Not After : Jun 7 22:00:29 2025 GMT
Subject: CN=b61079160d13247fcbaf493ba5a8b88d32e10edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:e6:da:1b:be:bb:7c:fc:58:0b:ba:c0:68:
1e:96:b0:ad:b3:57:e9:9d:48:87:82:90:d6:ac:d4:
9e:47:4a:4d:af:ed:44:f4:cf:42:25:3a:e0:f2:ea:
42:3f:0a:05:c8:04:d5:d0:5a:73:6c:1a:89:83:b0:
de:d9:c0:7f:6b:bc:14:b9:6f:17:e4:b5:69:9f:d3:
e6:fc:9c:94:b0:02:34:a5:a9:51:4d:af:99:f5:5f:
0f:d5:35:c2:ba:76:9f:89:d9:b2:d2:60:48:98:e7:
83:3b:e8:ae:c5:71:15:7e:e4:f8:19:71:8a:28:42:
7d:f9:12:2e:d4:e1:32:7a:6d:9e:5e:b6:71:e8:88:
c9:56:5d:ca:df:7a:14:2c:b1:97:51:42:f7:5c:11:
05:84:63:75:14:b9:d9:f7:1b:7c:ba:79:fb:97:ad:
dd:f7:80:e8:f8:ae:8b:f6:70:fd:ac:80:77:78:10:
97:4a:41:70:90:74:99:b0:da:f9:55:5c:03:9f:46:
75:10:f4:d0:12:4b:93:7f:b9:1f:e8:93:ce:79:63:
29:c3:c5:6d:b5:fc:dc:42:f1:fe:0f:d9:ab:2b:da:
b6:95:18:b1:be:cc:46:cd:ad:a9:7d:80:e9:b4:1f:
91:9b:79:0b:34:a8:00:86:a4:76:10:81:b9:4d:e0:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:79:16:0D:13:24:7F:CB:AF:49:3B:A5:A8:B8:8D:32:E1:0E:DC
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:05:ce:6f:2d:f5:9a:f8:cd:61:55:2d:52:2f:ec:30:31:92:
5f:43:13:fa:f7:9f:7d:84:99:35:32:48:eb:4f:3f:99:90:8c:
52:11:d6:b7:f3:bb:32:fc:15:a0:84:fe:72:91:ab:6e:26:db:
45:24:02:61:8b:4a:2d:0c:c2:a2:e1:02:eb:5e:78:9b:14:87:
b6:68:89:12:af:a0:5d:52:00:ce:26:88:de:6d:ac:81:12:b1:
77:d4:90:de:05:ae:5a:ea:97:09:cb:29:32:38:3c:9e:40:a3:
d9:97:62:98:ca:75:37:03:04:d3:b7:d3:e2:8a:d4:24:ac:99:
cb:f1:d5:ae:e8:b3:3f:08:63:59:12:7e:87:86:80:55:79:c7:
44:a8:fb:af:5c:d9:53:02:01:31:60:e5:84:26:e0:eb:8f:ef:
c5:3b:34:a5:59:70:93:9b:c0:a1:8b:c5:16:c6:56:d1:1b:b1:
a4:e3:a6:f8:d4:75:eb:74:b8:a7:78:4f:11:8c:76:8e:49:30:
0b:3d:ab:d5:70:69:83:56:cc:42:7a:2b:fa:a9:7e:0b:42:72:
e0:fb:3e:eb:41:06:84:8e:51:5d:1e:94:00:76:d1:6f:28:ed:
b7:af:eb:74:cb:04:09:8a:c1:13:55:4a:bf:2b:49:0e:ff:48:
98:09:98:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQn88A0gSaQHQqFnQ5CqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjUwNjA2MjIwMDI5WhcNMjUwNjA3MjIwMDI5WjAzMTEwLwYDVQQD
EyhiNjEwNzkxNjBkMTMyNDdmY2JhZjQ5M2JhNWE4Yjg4ZDMyZTEwZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTPm2hu+u3z8WAu6wGgelrCts1fp
nUiHgpDWrNSeR0pNr+1E9M9CJTrg8upCPwoFyATV0FpzbBqJg7De2cB/a7wUuW8X
5LVpn9Pm/JyUsAI0palRTa+Z9V8P1TXCunafidmy0mBImOeDO+iuxXEVfuT4GXGK
KEJ9+RIu1OEyem2eXrZx6IjJVl3K33oULLGXUUL3XBEFhGN1FLnZ9xt8unn7l63d
94Do+K6L9nD9rIB3eBCXSkFwkHSZsNr5VVwDn0Z1EPTQEkuTf7kf6JPOeWMpw8Vt
tfzcQvH+D9mrK9q2lRixvsxGza2pfYDptB+Rm3kLNKgAhqR2EIG5TeAVtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYQeRYNEyR/y69JO6WouI0y4Q7cMB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswXOby31
mvjNYVUtUi/sMDGSX0MT+veffYSZNTJI608/mZCMUhHWt/O7MvwVoIT+cpGrbibb
RSQCYYtKLQzCouEC6154mxSHtmiJEq+gXVIAziaI3m2sgRKxd9SQ3gWuWuqXCcsp
Mjg8nkCj2ZdimMp1NwME07fT4orUJKyZy/HVruizPwhjWRJ+h4aAVXnHRKj7r1zZ
UwIBMWDlhCbg64/vxTs0pVlwk5vAoYvFFsZW0RuxpOOm+NR163S4p3hPEYx2jkkw
Cz2r1XBpg1bMQnor+ql+C0Jy4Ps+60EGhI5RXR6UAHbRbyjtt6/rdMsECYrBE1VK
vytJDv9ImAmYcA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:23 2025 by rpki-client