Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: 2G0hEAs+vmjWxIQjDaF8/jz8PTUKvPtBO/cACImSj2k=
Subject key identifier: 1B:48:60:30:58:D2:36:83:7B:DE:32:53:FC:2A:EE:A9:A5:83:4D:67
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 01965A94EF42D0C12A05619831D39A36AD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 23:00:32 +0000
Manifest this update: Mon 21 Apr 2025 23:00:32 +0000
Manifest next update: Tue 22 Apr 2025 23:00:32 +0000
Files and hashes: 1: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: lnNQhIOgK4Yl4YRFstQK+hdqRIkOrnDWpe5ef29kGRA=)
2: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:ef:42:d0:c1:2a:05:61:98:31:d3:9a:36:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Apr 21 23:00:32 2025 GMT
Not After : Apr 22 23:00:32 2025 GMT
Subject: CN=1b48603058d236837bde3253fc2aeea9a5834d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:9b:2a:d6:06:72:1d:2b:67:71:65:23:17:
56:61:c3:b4:bd:21:6a:54:e8:15:81:a0:4a:83:12:
ba:57:02:32:f3:ca:f7:35:03:b0:4a:68:62:76:d2:
e0:3d:b2:3e:75:1f:98:c9:9b:03:28:8f:3a:a8:b9:
d2:08:70:f4:2c:5a:33:f0:2d:b0:a1:51:af:c1:31:
f7:1c:83:22:59:d9:97:31:52:f5:5a:cb:57:ec:ec:
8e:fa:17:a2:3b:e2:0c:f5:ab:44:95:b5:ea:d6:62:
da:ee:65:a2:1f:4f:ab:88:7f:1d:54:9d:76:37:bb:
06:6a:e0:2a:b5:ef:78:4d:19:b3:56:65:28:ee:e1:
c8:30:68:08:82:c3:2d:8b:ed:4f:ee:0f:ab:3e:94:
03:e3:72:06:c6:bc:62:a9:ae:fe:5c:82:c6:89:08:
79:56:2c:8c:50:39:4d:26:e3:bc:79:c4:33:6f:30:
fd:55:fc:27:20:49:a2:26:8c:ef:00:5c:03:26:76:
bc:9f:cc:f0:06:42:bc:81:bd:c9:35:63:88:27:71:
1f:89:a2:4d:50:92:85:c9:da:c7:46:d6:17:81:96:
2a:48:5a:d2:ed:1c:5e:bc:1d:90:3e:d7:a6:f0:98:
af:1e:40:53:ef:87:b9:d0:ac:4e:0e:9d:b7:4b:e6:
21:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:60:30:58:D2:36:83:7B:DE:32:53:FC:2A:EE:A9:A5:83:4D:67
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c7:b2:45:6e:c0:cf:4e:a0:2d:d4:1d:af:e8:13:74:bb:be:
7a:8b:6c:43:11:4d:05:ee:b7:37:8b:46:6f:30:ce:3d:12:8c:
81:33:20:79:e6:17:3c:65:8c:b7:fb:1f:ff:11:3c:a6:b5:44:
60:79:85:e5:0c:56:9f:2f:f4:df:2b:a6:1b:ef:84:ce:3a:3e:
3c:c4:74:c8:83:00:10:dd:79:15:f4:c8:fa:e2:02:6c:bb:36:
1e:68:56:da:65:52:a6:54:54:96:de:6c:84:7d:c7:15:a4:59:
9b:f4:7e:4d:22:b9:43:c2:7d:61:6b:1a:9e:7e:57:6e:78:4a:
29:a9:6c:95:0f:b8:c7:3b:8b:27:15:61:ac:e8:06:39:7b:5e:
62:62:58:f7:2d:c4:fc:07:a8:9e:68:85:b8:28:92:1e:2a:24:
d1:a5:9c:ac:1c:7f:80:fb:4a:49:11:45:38:3a:06:42:45:b8:
6b:52:d8:83:9e:6d:4b:ea:f8:98:d6:cf:3a:4e:ec:da:6c:f0:
d7:69:9c:5d:99:dd:aa:87:26:c1:1a:fb:3d:f2:9a:50:f4:16:
1b:41:49:97:f1:93:c6:52:d1:01:ac:53:15:5d:ea:8d:26:ea:
2c:72:f5:d3:27:b0:6e:b6:b3:09:8b:3c:e1:dc:c2:34:83:64:
69:88:54:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalO9C0MEqBWGYMdOaNq07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi
Zjc5OTYwHhcNMjUwNDIxMjMwMDMyWhcNMjUwNDIyMjMwMDMyWjAzMTEwLwYDVQQD
EygxYjQ4NjAzMDU4ZDIzNjgzN2JkZTMyNTNmYzJhZWVhOWE1ODM0ZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOKbKtYGch0rZ3FlIxdWYcO0vSFq
VOgVgaBKgxK6VwIy88r3NQOwSmhidtLgPbI+dR+YyZsDKI86qLnSCHD0LFoz8C2w
oVGvwTH3HIMiWdmXMVL1WstX7OyO+heiO+IM9atElbXq1mLa7mWiH0+riH8dVJ12
N7sGauAqte94TRmzVmUo7uHIMGgIgsMti+1P7g+rPpQD43IGxrxiqa7+XILGiQh5
ViyMUDlNJuO8ecQzbzD9VfwnIEmiJozvAFwDJna8n8zwBkK8gb3JNWOIJ3EfiaJN
UJKFydrHRtYXgZYqSFrS7RxevB2QPtem8JivHkBT74e50KxODp23S+YhswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtIYDBY0jaDe94yU/wq7qmlg01nMB8GA1UdIwQY
MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt
NmVhYTFjODk4MjRhLzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh
LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbseyRW7A
z06gLdQdr+gTdLu+eotsQxFNBe63N4tGbzDOPRKMgTMgeeYXPGWMt/sf/xE8prVE
YHmF5QxWny/03yumG++Ezjo+PMR0yIMAEN15FfTI+uICbLs2HmhW2mVSplRUlt5s
hH3HFaRZm/R+TSK5Q8J9YWsann5XbnhKKalslQ+4xzuLJxVhrOgGOXteYmJY9y3E
/AeonmiFuCiSHiok0aWcrBx/gPtKSRFFODoGQkW4a1LYg55tS+r4mNbPOk7s2mzw
12mcXZndqocmwRr7PfKaUPQWG0FJl/GTxlLRAaxTFV3qjSbqLHL10yewbrazCYs8
4dzCNINkaYhUIw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:41 2025 by rpki-client