Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier: gofeIYtrGEks+vd8wh9SGn31UGDKbOhymj6yLhxbXRE=
Subject key identifier: 3B:C7:10:D1:0F:0F:3A:01:90:F2:7C:39:A8:42:F2:DE:84:DF:7C:04
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial: 01964E90E6E6817BF61BACD7BE9D7CCE5A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number: 07B8
Signing time: Sat 19 Apr 2025 15:00:41 +0000
Manifest this update: Sat 19 Apr 2025 15:00:41 +0000
Manifest next update: Sun 20 Apr 2025 15:00:41 +0000
Files and hashes: 1: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (hash: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=)
2: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: 0OSPd9X0+0CYJD3Onl8Szhj66H0VGqWO3XaI1CYJ7MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:e6:e6:81:7b:f6:1b:ac:d7:be:9d:7c:ce:5a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
Validity
Not Before: Apr 19 15:00:41 2025 GMT
Not After : Apr 20 15:00:41 2025 GMT
Subject: CN=3bc710d10f0f3a0190f27c39a842f2de84df7c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:80:1c:5c:75:e3:d3:50:34:17:ff:d2:7f:
72:ac:6e:ed:fb:2a:8d:a9:8b:76:56:f4:d8:b4:08:
e1:cb:87:9f:92:07:4c:80:91:3b:61:f5:42:af:b3:
25:fb:15:58:e7:90:cf:a1:ff:c3:55:2d:86:b3:bb:
f7:92:fd:00:82:e0:2c:c2:cf:34:39:f4:7c:c6:a1:
1b:22:73:f7:68:fb:c8:bf:8e:3b:d0:dc:71:bd:6a:
3e:46:0f:88:43:8c:03:3e:1d:f3:da:02:dd:7a:b9:
f5:02:e6:53:d6:9b:06:13:0b:45:30:c4:64:83:68:
79:d0:90:2b:3b:44:ed:e7:62:95:de:f5:1c:fa:42:
6d:69:fa:fc:a8:eb:19:fa:12:8e:b6:75:11:fa:b1:
e9:74:a9:1e:89:b2:a2:0c:5f:df:1f:2a:07:be:78:
23:1b:a1:9a:bf:69:78:48:e1:7a:d5:74:5b:a2:96:
8a:4f:6f:8a:f4:89:74:1c:9e:63:3a:ff:6c:0a:1e:
6c:88:da:92:5a:a8:6a:78:fa:fe:3b:ca:47:09:eb:
36:73:69:b1:88:d2:d2:c5:2c:94:fb:db:14:ca:7b:
8c:3e:7a:74:90:08:1f:f6:59:09:b7:95:0d:7c:fb:
2a:1d:7f:8d:9e:46:a8:fd:96:43:f6:cf:15:6c:b3:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:10:D1:0F:0F:3A:01:90:F2:7C:39:A8:42:F2:DE:84:DF:7C:04
X509v3 Authority Key Identifier:
keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:b4:57:8a:53:85:cb:de:2b:9a:f2:35:41:6b:1c:25:77:
94:ba:ca:49:a7:a5:fd:f8:7b:d2:20:1e:0c:b6:5c:57:81:c9:
ea:0e:1a:33:51:f5:28:7c:fc:cb:c6:4c:7b:93:97:d8:6a:e4:
7f:b3:84:25:a1:7e:01:58:4f:22:39:91:4b:fa:e2:e0:21:2d:
88:23:41:bd:db:cb:b9:8d:1f:47:71:c3:a1:98:be:13:83:33:
4b:6a:04:b2:be:47:b0:73:b6:fd:95:89:70:f8:fd:d5:46:7e:
64:b2:15:b1:6c:04:2d:7e:23:4a:54:9f:fe:f7:dc:7d:b7:92:
21:f8:cd:d2:88:d3:26:c5:08:66:03:a4:4c:2a:96:c1:44:0f:
2c:79:0f:e5:2a:ef:59:b0:37:fd:8d:20:ad:f0:ee:2a:9d:1c:
66:d6:ce:16:59:0c:61:ec:22:53:a7:45:ca:20:48:2b:09:3c:
94:a9:9f:6c:08:1a:a0:08:df:f5:2d:f8:f2:fc:af:64:3d:00:
20:d8:7e:20:3c:77:af:dc:ea:30:3e:18:7e:65:48:f6:f0:e1:
fe:91:42:8e:69:50:28:dc:c4:93:75:5a:fe:22:4d:95:64:da:
a1:3c:03:c3:01:75:40:f9:04:d5:ec:d8:6a:74:1c:75:69:63:
95:9d:c1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOkObmgXv2G6zXvp18zlocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw
ZDU0OGQwHhcNMjUwNDE5MTUwMDQxWhcNMjUwNDIwMTUwMDQxWjAzMTEwLwYDVQQD
EygzYmM3MTBkMTBmMGYzYTAxOTBmMjdjMzlhODQyZjJkZTg0ZGY3YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApomAHFx149NQNBf/0n9yrG7t+yqN
qYt2VvTYtAjhy4efkgdMgJE7YfVCr7Ml+xVY55DPof/DVS2Gs7v3kv0AguAsws80
OfR8xqEbInP3aPvIv4470NxxvWo+Rg+IQ4wDPh3z2gLdern1AuZT1psGEwtFMMRk
g2h50JArO0Tt52KV3vUc+kJtafr8qOsZ+hKOtnUR+rHpdKkeibKiDF/fHyoHvngj
G6Gav2l4SOF61XRbopaKT2+K9Il0HJ5jOv9sCh5siNqSWqhqePr+O8pHCes2c2mx
iNLSxSyU+9sUynuMPnp0kAgf9lkJt5UNfPsqHX+Nnkao/ZZD9s8VbLNypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvHENEPDzoBkPJ8OahC8t6E33wEMB8GA1UdIwQY
MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt
M2Y0ZWY4MWEyZTUzLzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz
LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN+0V4pT
hcveK5ryNUFrHCV3lLrKSael/fh70iAeDLZcV4HJ6g4aM1H1KHz8y8ZMe5OX2Grk
f7OEJaF+AVhPIjmRS/ri4CEtiCNBvdvLuY0fR3HDoZi+E4MzS2oEsr5HsHO2/ZWJ
cPj91UZ+ZLIVsWwELX4jSlSf/vfcfbeSIfjN0ojTJsUIZgOkTCqWwUQPLHkP5Srv
WbA3/Y0grfDuKp0cZtbOFlkMYewiU6dFyiBIKwk8lKmfbAgaoAjf9S348vyvZD0A
INh+IDx3r9zqMD4YfmVI9vDh/pFCjmlQKNzEk3Va/iJNlWTaoTwDwwF1QPkE1ezY
anQcdWljlZ3BdA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:33:50 2025 by rpki-client