Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: nlQDumgho8XTo1AplqOriLliiQiIh883jEwUqpySO4Y=
Subject key identifier: F7:89:F6:FC:72:FC:37:B8:63:3D:B5:E0:FC:FF:5F:19:58:B3:7B:36
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019746D4CA178A70EDB09005892CB93BF468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 05B4
Signing time: Fri 06 Jun 2025 20:00:39 +0000
Manifest this update: Fri 06 Jun 2025 20:00:39 +0000
Manifest next update: Sat 07 Jun 2025 20:00:39 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: eYVOQ3uuQeRDoAqQ3l34M+HM2PxzRrIal4QxO0AFR+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:ca:17:8a:70:ed:b0:90:05:89:2c:b9:3b:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Jun 6 20:00:39 2025 GMT
Not After : Jun 7 20:00:39 2025 GMT
Subject: CN=f789f6fc72fc37b8633db5e0fcff5f1958b37b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:8d:ce:2b:ee:dc:d4:4f:d8:5a:64:63:b9:
63:fe:3d:17:08:79:21:bb:24:a7:94:ee:c3:e3:77:
f2:9e:ba:e1:16:95:89:9a:a2:c1:9d:e4:1c:aa:68:
f1:b7:bb:3e:9a:8e:f9:a0:5e:fc:81:95:0c:fd:86:
d1:6b:94:e2:fd:d3:12:d0:f5:12:48:07:be:06:07:
35:98:21:7e:49:8b:0d:1e:73:84:33:2c:b2:f8:6b:
c3:e5:b9:fb:c9:5b:19:b4:cf:4d:11:4e:e4:3b:54:
19:b0:10:61:c3:01:25:43:c5:e9:fd:1f:d8:01:c1:
b6:6c:31:01:c9:11:a1:d3:de:65:84:b9:69:d0:bd:
83:37:29:6e:af:e0:b2:64:a3:1f:f7:b3:57:fa:19:
31:aa:5f:ce:6a:7f:69:49:c1:41:24:a4:5d:c7:28:
37:be:bd:86:15:34:10:f5:29:fc:8f:bd:e9:0c:e6:
4a:da:f7:cf:69:84:dd:8c:e2:ef:33:a0:c2:2e:e6:
4a:7f:81:0d:c3:cc:2b:b2:bf:fb:5b:fb:89:15:8b:
ab:27:d0:d6:07:7a:63:ea:c0:62:f7:b9:7f:b0:2c:
fd:3a:af:56:68:11:93:95:f4:9f:d0:6f:ec:af:9c:
46:95:d3:15:f5:65:a6:64:bd:f3:0b:5b:1c:12:a4:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:F6:FC:72:FC:37:B8:63:3D:B5:E0:FC:FF:5F:19:58:B3:7B:36
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:17:ca:df:fd:d2:bb:dc:85:4a:ab:93:2f:9c:b7:9d:c7:73:
99:c8:80:1a:aa:b8:74:c8:b9:09:ae:81:e3:f3:0d:a1:9f:96:
ba:44:d7:e2:6c:f7:1f:2e:6c:a3:e4:2b:0b:5d:5f:65:16:4a:
56:02:71:0b:98:08:b0:3a:37:16:d9:26:f6:b0:31:dc:f8:6d:
0c:19:93:12:16:65:18:27:07:33:1f:5e:bd:1c:d1:9c:3b:07:
68:ed:6d:96:e2:52:e5:0c:5a:6c:1c:23:02:1f:c3:a7:dc:b4:
cc:73:f6:da:dc:88:bb:c1:0e:89:fe:cd:23:0c:5c:c2:d7:de:
d3:d0:36:0d:42:e5:10:96:32:aa:7c:9f:89:43:8a:be:8b:77:
41:ca:61:43:10:33:da:99:3a:63:28:4a:28:3f:65:13:08:a8:
7c:75:3a:dd:7f:ba:36:b4:51:96:72:25:bd:00:c8:fe:69:f2:
14:e7:84:55:58:ce:b0:81:b3:18:f4:45:fc:ca:d7:41:60:3e:
10:d0:19:ed:01:8a:c9:78:3a:e3:68:46:1d:aa:72:05:d1:87:
f2:ef:dc:cd:51:c9:4b:b9:34:c6:a7:10:88:6c:71:8a:1e:6e:
ad:74:a1:66:0c:10:af:bf:37:8e:39:02:e1:94:66:82:d1:fb:
41:5a:37:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1MoXinDtsJAFiSy5O/RoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDgwMjY2Nzk4MDk0NGRmNGRhMmFiNGIwOGU5ZDM0YjIw
YThkMTEwHhcNMjUwNjA2MjAwMDM5WhcNMjUwNjA3MjAwMDM5WjAzMTEwLwYDVQQD
EyhmNzg5ZjZmYzcyZmMzN2I4NjMzZGI1ZTBmY2ZmNWYxOTU4YjM3YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKaNzivu3NRP2FpkY7lj/j0XCHkh
uySnlO7D43fynrrhFpWJmqLBneQcqmjxt7s+mo75oF78gZUM/YbRa5Ti/dMS0PUS
SAe+Bgc1mCF+SYsNHnOEMyyy+GvD5bn7yVsZtM9NEU7kO1QZsBBhwwElQ8Xp/R/Y
AcG2bDEByRGh095lhLlp0L2DNylur+CyZKMf97NX+hkxql/Oan9pScFBJKRdxyg3
vr2GFTQQ9Sn8j73pDOZK2vfPaYTdjOLvM6DCLuZKf4ENw8wrsr/7W/uJFYurJ9DW
B3pj6sBi97l/sCz9Oq9WaBGTlfSf0G/sr5xGldMV9WWmZL3zC1scEqTffQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeJ9vxy/De4Yz214Pz/XxlYs3s2MB8GA1UdIwQY
MBaAFLHYAmZ5gJRN9NoqtLCOnTSyCo0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQt
Y2JlYzQzZmQ5MmExLzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mMTUzZTctMDdkOS00YjgxLWFhZWQtY2JlYzQzZmQ5MmEx
LzEvc2RnQ1pubUFsRTMwMmlxMHNJNmROTElLalJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxfK3/3S
u9yFSquTL5y3ncdzmciAGqq4dMi5Ca6B4/MNoZ+WukTX4mz3Hy5so+QrC11fZRZK
VgJxC5gIsDo3Ftkm9rAx3PhtDBmTEhZlGCcHMx9evRzRnDsHaO1tluJS5QxabBwj
Ah/Dp9y0zHP22tyIu8EOif7NIwxcwtfe09A2DULlEJYyqnyfiUOKvot3QcphQxAz
2pk6YyhKKD9lEwiofHU63X+6NrRRlnIlvQDI/mnyFOeEVVjOsIGzGPRF/MrXQWA+
ENAZ7QGKyXg642hGHapyBdGH8u/czVHJS7k0xqcQiGxxih5urXShZgwQr783jjkC
4ZRmgtH7QVo3Iw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:34:50 2025 by rpki-client