Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: mhI1mheny+8Rrb/VK2vsNz0hQTKsioqI6tdCpjsCAU4=
Subject key identifier: 1E:87:70:93:81:E8:F1:A2:16:BA:1A:69:00:44:3F:C5:BC:4F:B7:5F
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 0196523713D3A0485E18424D4CEDB76028AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 08:01:03 +0000
Manifest this update: Sun 20 Apr 2025 08:01:03 +0000
Manifest next update: Mon 21 Apr 2025 08:01:03 +0000
Files and hashes: 1: 5TwfULMH-unHdDYOcT1BkwSNVj4.roa (hash: MnqaA2gAqS7okflGRdl3L2EkczyiAqyp5YnJcnh49kE=)
2: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: J3YrLoG6I71LByAlz3i5NK2/NghZBLVD4/z09p24bQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:13:d3:a0:48:5e:18:42:4d:4c:ed:b7:60:28:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Apr 20 08:01:03 2025 GMT
Not After : Apr 21 08:01:03 2025 GMT
Subject: CN=1e87709381e8f1a216ba1a6900443fc5bc4fb75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:ac:fc:00:f2:33:44:29:53:5c:b4:98:f1:
7a:ae:0e:57:6d:30:46:7b:1d:27:aa:a6:19:75:b3:
78:c1:27:44:aa:0a:56:7f:22:ff:f7:a7:cb:24:32:
6c:3f:93:55:61:ea:1a:0f:c9:4b:1a:84:c0:e4:48:
81:09:69:16:5d:3b:35:4d:2b:50:dc:88:a1:b1:7d:
37:1f:ed:f8:71:80:bd:b8:30:0c:75:5c:f8:5b:dd:
4c:fd:51:4d:52:70:1b:ed:80:55:7c:57:0b:2c:0a:
d0:16:d9:b8:5f:c5:c6:38:47:b1:f8:45:c3:10:e3:
e3:0f:3b:2e:f6:1b:65:55:cd:68:0d:d4:61:b6:d9:
39:cd:ad:5d:ae:c5:ce:92:39:d8:44:c3:37:c2:dd:
3a:1b:70:a3:a0:09:c4:99:de:6f:0b:d1:c5:72:66:
90:23:40:11:c2:8b:ec:8d:fe:8d:45:59:db:ba:64:
da:16:72:bc:8a:91:13:3e:62:db:cf:99:62:5d:70:
39:93:c5:74:7c:a9:22:64:5e:67:c2:79:7d:b8:d6:
e5:fa:8f:51:a3:0a:0d:d5:a7:2a:be:66:23:54:b4:
6b:12:1d:f8:56:f6:ea:b5:f3:13:88:26:8c:c9:52:
b8:61:27:12:60:82:66:f2:24:c3:c7:71:12:70:86:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:70:93:81:E8:F1:A2:16:BA:1A:69:00:44:3F:C5:BC:4F:B7:5F
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:73:42:59:b3:43:84:31:76:7b:1b:34:77:c6:0c:fa:cd:
1a:99:9b:20:8f:0d:19:37:37:79:21:5e:d1:6d:95:ea:5b:86:
e5:67:ef:73:62:55:fc:84:1a:a0:c1:54:dd:a2:49:b2:f2:98:
8f:25:7b:99:1e:70:de:c6:4f:55:a8:8b:5a:f3:a6:14:c7:23:
56:35:ef:a1:bd:24:83:0d:a7:e7:be:f1:36:fc:b4:1a:3d:37:
76:bb:dd:e3:b7:d0:33:f5:a2:70:e0:b1:11:b8:6e:af:d2:52:
97:c5:1b:12:f6:44:5d:24:a0:0a:0c:cf:59:f6:4f:1f:a6:52:
96:e4:20:ac:a4:08:af:ea:4f:4d:d3:75:d8:ec:42:c1:36:5f:
00:58:7a:70:ba:62:b3:10:c2:e7:37:7c:af:e3:18:b4:c5:a2:
b0:e7:00:40:88:01:9e:90:16:a9:38:ef:81:08:fa:bd:cb:af:
98:24:14:98:25:e4:8d:d1:95:db:a0:48:be:3c:54:3d:83:9a:
af:05:72:e3:f9:2b:11:ad:ba:04:ee:d4:a2:c3:1d:41:4c:1c:
5e:4b:8f:aa:8a:70:4c:07:98:fe:17:69:70:7e:8c:fe:65:20:
06:07:e5:9e:d2:49:58:41:90:b6:82:45:6b:c7:2b:94:ca:7c:
07:49:f1:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNxPToEheGEJNTO23YCitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTk1ZDRhNTRlZDY0NDIxM2M0NDYxOTVlMzZmNzhlYzFh
MjgzOTkwHhcNMjUwNDIwMDgwMTAzWhcNMjUwNDIxMDgwMTAzWjAzMTEwLwYDVQQD
EygxZTg3NzA5MzgxZThmMWEyMTZiYTFhNjkwMDQ0M2ZjNWJjNGZiNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Os/ADyM0QpU1y0mPF6rg5XbTBG
ex0nqqYZdbN4wSdEqgpWfyL/96fLJDJsP5NVYeoaD8lLGoTA5EiBCWkWXTs1TStQ
3IihsX03H+34cYC9uDAMdVz4W91M/VFNUnAb7YBVfFcLLArQFtm4X8XGOEex+EXD
EOPjDzsu9htlVc1oDdRhttk5za1drsXOkjnYRMM3wt06G3CjoAnEmd5vC9HFcmaQ
I0ARwovsjf6NRVnbumTaFnK8ipETPmLbz5liXXA5k8V0fKkiZF5nwnl9uNbl+o9R
owoN1acqvmYjVLRrEh34VvbqtfMTiCaMyVK4YScSYIJm8iTDx3EScIYDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6HcJOB6PGiFroaaQBEP8W8T7dfMB8GA1UdIwQY
MBaAFEhZXUpU7WRCE8RGGV42947BooOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYt
MmU4ZGNkZDUxNjUxLzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZTZmNTEtNGUxMy00NjVlLWI0ZDYtMmU4ZGNkZDUxNjUx
LzEvU0ZsZFNsVHRaRUlUeEVZWlhqYjNqc0dpZzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYq5zQlmz
Q4QxdnsbNHfGDPrNGpmbII8NGTc3eSFe0W2V6luG5Wfvc2JV/IQaoMFU3aJJsvKY
jyV7mR5w3sZPVaiLWvOmFMcjVjXvob0kgw2n577xNvy0Gj03drvd47fQM/WicOCx
Ebhur9JSl8UbEvZEXSSgCgzPWfZPH6ZSluQgrKQIr+pPTdN12OxCwTZfAFh6cLpi
sxDC5zd8r+MYtMWisOcAQIgBnpAWqTjvgQj6vcuvmCQUmCXkjdGV26BIvjxUPYOa
rwVy4/krEa26BO7UosMdQUwcXkuPqopwTAeY/hdpcH6M/mUgBgflntJJWEGQtoJF
a8crlMp8B0nxhQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:45 2025 by rpki-client