Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: kW1yBhN7bvxW5CXrCnwOagiFf40Q0r3fOKpjZ0zLbjc=
Subject key identifier: AF:62:6E:85:73:43:C6:E8:76:EC:B8:7A:2E:62:7E:34:5F:A8:1E:C2
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 01960942D12283040A908898D6739FAF6792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0D45
Signing time: Sun 06 Apr 2025 04:01:35 +0000
Manifest this update: Sun 06 Apr 2025 04:01:35 +0000
Manifest next update: Mon 07 Apr 2025 04:01:35 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: yV6g65o+9HvhxeNhCzSBzDXu041iEWn56miy5Pl9Tog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:42:d1:22:83:04:0a:90:88:98:d6:73:9f:af:67:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Apr 6 04:01:35 2025 GMT
Not After : Apr 7 04:01:35 2025 GMT
Subject: CN=af626e857343c6e876ecb87a2e627e345fa81ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:75:f3:a1:dc:2a:a8:5e:01:a1:63:86:04:
c9:0a:f4:d9:8c:a2:9c:68:5d:ec:bf:47:6a:eb:96:
74:e3:12:02:ec:20:b9:a2:7a:d8:1b:7b:86:b9:00:
1e:a6:a9:2b:f3:63:9f:cf:36:8c:89:2f:e2:ea:3e:
47:4b:8b:2d:3f:cf:39:ee:ea:c9:d0:6c:d9:42:c7:
24:4d:c0:f7:10:13:b6:db:a7:e1:5b:2c:87:e9:0e:
73:67:be:f6:9d:9e:cb:cd:87:0b:82:1d:8a:51:d1:
20:b6:1b:85:da:51:73:c5:61:d5:4b:4d:96:49:2e:
ab:6a:ac:41:a7:11:95:61:40:e2:69:f8:df:47:cc:
3b:89:35:17:d4:26:23:fb:bf:09:03:6d:99:81:76:
5e:45:75:74:f6:d3:90:45:6d:73:0f:f2:b8:ff:d2:
34:2b:70:d3:3d:4e:05:e1:87:fd:77:e5:2b:3d:41:
16:05:37:2e:2d:53:95:9a:ab:f3:12:9d:ca:9a:c3:
24:c8:47:4c:e5:af:ce:2d:8e:91:b0:55:5b:c3:7a:
0b:82:f3:fd:db:18:61:97:ca:b0:de:23:24:fe:33:
66:7b:76:97:15:7a:09:ed:99:32:b2:f6:1a:0a:06:
2a:a8:7b:1a:88:d9:b0:9a:47:c7:0c:af:7f:91:db:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:6E:85:73:43:C6:E8:76:EC:B8:7A:2E:62:7E:34:5F:A8:1E:C2
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:b1:d6:2b:63:13:e2:57:c4:66:28:75:c1:cd:9b:e7:76:
c3:d5:13:81:7d:28:ed:cf:ab:15:3e:ab:73:b5:3b:83:a9:96:
39:2a:aa:b2:bc:ca:50:a5:d6:34:1e:83:ad:e1:29:5b:09:e9:
6d:ef:5c:c8:09:6d:70:13:c2:3b:06:0b:7b:79:84:fc:28:ab:
6e:14:14:71:b2:a7:68:e3:e3:f4:bd:06:56:1d:20:81:b5:4c:
67:7f:f4:3b:67:5f:bc:a3:e1:74:7b:c7:e1:44:f5:d5:e4:5e:
66:e6:63:ff:b2:90:de:a6:81:ae:0f:1e:54:20:f3:f6:df:0f:
41:6a:c1:90:87:5d:85:4b:e2:10:88:68:8b:89:8b:ee:46:bc:
7a:6a:97:13:2d:57:6d:77:9d:a2:b1:ee:28:c6:38:84:12:eb:
d7:b3:37:75:bf:cf:95:b4:90:5c:60:5f:1b:6a:69:c1:5b:a0:
16:fa:89:82:1d:fc:f4:df:44:0d:b9:12:dd:cd:52:19:17:f9:
b6:c8:f2:18:30:56:07:56:53:a7:b3:db:2c:62:48:cc:b6:5b:
01:33:14:66:3d:aa:d3:19:14:a7:2d:dd:79:a4:be:e5:0f:41:
8d:c7:a4:ca:df:17:50:be:f2:e4:94:34:d3:a1:be:07:26:46:
3b:26:a0:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYJQtEigwQKkIiY1nOfr2eSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjUwNDA2MDQwMTM1WhcNMjUwNDA3MDQwMTM1WjAzMTEwLwYDVQQD
EyhhZjYyNmU4NTczNDNjNmU4NzZlY2I4N2EyZTYyN2UzNDVmYTgxZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWt186HcKqheAaFjhgTJCvTZjKKc
aF3sv0dq65Z04xIC7CC5onrYG3uGuQAepqkr82OfzzaMiS/i6j5HS4stP8857urJ
0GzZQsckTcD3EBO226fhWyyH6Q5zZ772nZ7LzYcLgh2KUdEgthuF2lFzxWHVS02W
SS6raqxBpxGVYUDiafjfR8w7iTUX1CYj+78JA22ZgXZeRXV09tOQRW1zD/K4/9I0
K3DTPU4F4Yf9d+UrPUEWBTcuLVOVmqvzEp3KmsMkyEdM5a/OLY6RsFVbw3oLgvP9
2xhhl8qw3iMk/jNme3aXFXoJ7ZkysvYaCgYqqHsaiNmwmkfHDK9/kdvj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9iboVzQ8boduy4ei5ifjRfqB7CMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpSx1itj
E+JXxGYodcHNm+d2w9UTgX0o7c+rFT6rc7U7g6mWOSqqsrzKUKXWNB6DreEpWwnp
be9cyAltcBPCOwYLe3mE/CirbhQUcbKnaOPj9L0GVh0ggbVMZ3/0O2dfvKPhdHvH
4UT11eReZuZj/7KQ3qaBrg8eVCDz9t8PQWrBkIddhUviEIhoi4mL7ka8emqXEy1X
bXedorHuKMY4hBLr17M3db/PlbSQXGBfG2ppwVugFvqJgh389N9EDbkS3c1SGRf5
tsjyGDBWB1ZTp7PbLGJIzLZbATMUZj2q0xkUpy3deaS+5Q9Bjcekyt8XUL7y5JQ0
06G+ByZGOyagSg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:33 2025 by rpki-client