Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: bGrBqmcgldafM4i/DI3m0CAXk/YHaDV9ZeN5ctp0+MM=
Subject key identifier: 03:26:F1:BA:BF:60:62:0E:32:00:5C:ED:94:F9:45:96:AD:2F:99:5A
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 0196409EB06F782620F61A9C533FABD19CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 144C
Signing time: Wed 16 Apr 2025 22:01:03 +0000
Manifest this update: Wed 16 Apr 2025 22:01:03 +0000
Manifest next update: Thu 17 Apr 2025 22:01:03 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: +dwEIa93LQT2zUifFO0lG55V2R73lYTsMMJmy2LHoS8=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:b0:6f:78:26:20:f6:1a:9c:53:3f:ab:d1:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Apr 16 22:01:03 2025 GMT
Not After : Apr 17 22:01:03 2025 GMT
Subject: CN=0326f1babf60620e32005ced94f94596ad2f995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:1b:f8:9c:14:a2:a6:a1:e6:fc:51:ff:dd:
a8:b2:69:bb:c3:54:55:b0:0b:d5:54:a0:bb:b9:5e:
5d:4b:c5:62:f1:aa:d8:7b:7b:b1:0b:49:b6:e9:e1:
ed:7d:6b:b5:2a:0b:3d:61:4a:5c:e4:94:9f:80:88:
ac:79:f0:f6:bc:23:4e:5b:14:9e:c1:70:b1:f6:b9:
8a:7a:a0:ea:bd:04:90:19:18:0a:6a:b2:0e:c8:f0:
85:8d:87:cc:a7:3a:b7:2f:a0:0b:41:a9:b9:74:e1:
d0:ef:f0:1f:b0:0b:42:ac:ac:5b:04:95:cf:93:c0:
75:e2:18:cf:ad:6a:58:c9:fb:8b:0d:f0:11:30:09:
90:22:62:91:28:90:b3:08:4d:5a:7d:b5:8e:a9:80:
06:45:92:1f:cd:a4:61:12:31:28:3e:1b:c7:66:f4:
31:5b:3b:f2:7d:68:f3:35:1d:33:c7:aa:20:4c:e1:
ae:ec:f1:b8:81:77:2b:c8:d8:92:59:0a:96:36:0b:
39:b8:2d:06:fb:d4:af:99:0d:6d:6d:60:35:76:d1:
19:82:d7:cc:4e:54:91:85:40:87:5e:f4:f4:52:53:
d2:e7:f7:02:58:5a:4b:a2:cd:49:57:63:9d:e0:d9:
1b:67:8f:31:87:b6:d1:ef:23:4b:64:02:33:d0:05:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:F1:BA:BF:60:62:0E:32:00:5C:ED:94:F9:45:96:AD:2F:99:5A
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6f:59:73:56:26:3c:53:64:52:a6:2f:37:d2:73:ed:9a:1b:
58:c6:1e:c4:9e:e8:4d:fe:1f:c3:39:71:05:22:03:62:72:f4:
7e:7b:01:ba:75:2e:08:25:85:89:ae:37:e8:65:6b:b9:ce:68:
68:f6:a5:8c:29:41:a4:3d:17:f6:01:db:58:c0:ae:e9:6d:f4:
d5:29:29:ab:41:5a:ad:e4:9e:43:b2:44:84:5b:64:5d:a1:23:
1f:35:c7:0a:8c:20:4e:a1:dc:7d:45:54:01:e7:61:08:52:4c:
1d:7e:d0:34:88:a8:a7:23:1d:ba:ba:97:dc:f6:23:0f:f0:34:
ba:ec:a4:f0:fe:fd:2b:26:01:ed:71:70:8c:92:5b:c0:b7:27:
fd:00:51:ea:ee:08:2b:a0:ce:fb:d4:7c:11:0b:65:70:d2:a4:
b8:9f:4c:07:76:c2:bf:6b:d2:d9:a0:6f:cf:9f:cf:92:d2:dd:
27:ac:c9:58:f2:f1:b2:5c:d5:83:56:0c:b8:f5:d6:04:2e:d3:
e6:4a:55:37:19:bf:36:dc:c6:56:c7:f5:d5:bb:87:3c:17:ea:
c2:9f:f6:05:1e:bb:aa:f2:80:b3:69:df:de:4d:bd:35:7f:f4:
ba:ab:3f:6e:6c:33:86:a2:0f:d0:56:f7:1c:2d:6a:b1:71:31:
98:83:88:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAnrBveCYg9hqcUz+r0Zy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjUwNDE2MjIwMTAzWhcNMjUwNDE3MjIwMTAzWjAzMTEwLwYDVQQD
EygwMzI2ZjFiYWJmNjA2MjBlMzIwMDVjZWQ5NGY5NDU5NmFkMmY5OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwQb+JwUoqah5vxR/92osmm7w1RV
sAvVVKC7uV5dS8Vi8arYe3uxC0m26eHtfWu1Kgs9YUpc5JSfgIisefD2vCNOWxSe
wXCx9rmKeqDqvQSQGRgKarIOyPCFjYfMpzq3L6ALQam5dOHQ7/AfsAtCrKxbBJXP
k8B14hjPrWpYyfuLDfARMAmQImKRKJCzCE1afbWOqYAGRZIfzaRhEjEoPhvHZvQx
WzvyfWjzNR0zx6ogTOGu7PG4gXcryNiSWQqWNgs5uC0G+9SvmQ1tbWA1dtEZgtfM
TlSRhUCHXvT0UlPS5/cCWFpLos1JV2Od4NkbZ48xh7bR7yNLZAIz0AVXYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMm8bq/YGIOMgBc7ZT5RZatL5laMB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX29Zc1Ym
PFNkUqYvN9Jz7ZobWMYexJ7oTf4fwzlxBSIDYnL0fnsBunUuCCWFia436GVruc5o
aPaljClBpD0X9gHbWMCu6W301Skpq0FareSeQ7JEhFtkXaEjHzXHCowgTqHcfUVU
AedhCFJMHX7QNIiopyMdurqX3PYjD/A0uuyk8P79KyYB7XFwjJJbwLcn/QBR6u4I
K6DO+9R8EQtlcNKkuJ9MB3bCv2vS2aBvz5/PktLdJ6zJWPLxslzVg1YMuPXWBC7T
5kpVNxm/NtzGVsf11buHPBfqwp/2BR67qvKAs2nf3k29NX/0uqs/bmwzhqIP0Fb3
HC1qsXExmIOI7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:44 2025 by rpki-client