Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: KrIkMiFtMz/pTVCjFeUG22EqiEnJRx/56qBoJB/uO8Y=
Subject key identifier: F2:BF:BA:E4:54:05:81:B2:F3:56:96:B0:6B:AB:77:5A:C0:81:6D:C8
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 01958C97380EBDDD81310026DF0025564C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 23:01:15 +0000
Manifest this update: Wed 12 Mar 2025 23:01:15 +0000
Manifest next update: Thu 13 Mar 2025 23:01:15 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: Qv4OqLQT9O7+lcf6BdwfLpSDR+WGcrll7sU6LIp3g+A=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:38:0e:bd:dd:81:31:00:26:df:00:25:56:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Mar 12 23:01:15 2025 GMT
Not After : Mar 13 23:01:15 2025 GMT
Subject: CN=f2bfbae4540581b2f35696b06bab775ac0816dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:27:a0:0a:cf:ec:08:a0:62:d8:02:30:56:
3c:99:19:ba:ff:96:a8:a2:de:0a:3a:35:fc:d1:2e:
41:a6:69:a7:80:16:82:3e:72:8d:86:15:76:12:35:
73:0c:72:97:73:b8:2a:9c:2f:89:dc:68:85:b7:a1:
90:66:bf:8a:9e:9c:54:90:68:97:b0:2e:19:d4:01:
c3:30:cf:c5:28:94:9c:d7:61:31:89:10:dc:e3:42:
e1:24:69:f5:16:21:da:fe:16:0f:9b:3b:e6:65:42:
61:1b:b1:71:1a:1f:6c:af:9f:58:01:af:f3:e7:4d:
72:2c:d4:c0:ba:79:0c:e1:91:c5:7c:29:4c:5a:15:
16:67:e1:6f:27:a7:5c:93:17:5b:b7:df:ee:bb:4a:
fb:68:24:b9:20:32:01:f2:fd:73:25:29:d4:83:06:
88:cf:81:07:13:63:e2:b3:5e:03:a3:e8:ba:8c:d0:
7c:92:e5:8c:09:87:ba:c4:a2:68:e0:29:9f:91:41:
7f:ce:5e:df:18:38:6e:c1:19:4b:2d:d0:6e:78:55:
29:33:ea:ba:82:33:11:0a:e8:ca:75:5f:93:b9:b2:
b5:1d:b2:12:32:9b:ba:5e:dd:07:c1:86:c3:3f:1b:
cc:0f:5f:3f:a8:ba:20:c1:9c:6e:ba:de:06:9f:b1:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:BA:E4:54:05:81:B2:F3:56:96:B0:6B:AB:77:5A:C0:81:6D:C8
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:b7:28:53:e7:ec:15:68:52:af:59:b0:7e:e7:84:bd:db:
47:e5:53:2f:5a:64:d6:e0:2b:25:4e:14:54:08:0c:33:9b:49:
f0:87:09:b3:6a:c7:bc:80:23:25:46:8c:39:cd:b1:5b:6c:8c:
80:93:a0:d7:c4:4c:e7:10:66:ea:39:f4:c0:83:8e:54:4e:dc:
42:9f:de:d9:27:be:0f:9d:4c:fa:10:3b:4d:d8:9a:ec:41:d9:
42:1d:6b:22:c2:6d:50:5c:f9:42:30:f5:d7:b5:08:fb:f1:d3:
3b:cc:d3:2d:c1:de:18:8f:1d:5a:d3:5e:34:b7:55:ec:48:aa:
19:0f:86:1b:b3:36:fa:06:01:34:f2:9f:bf:d8:50:f3:19:71:
67:7a:e8:ea:1b:70:f0:91:16:b8:0b:e7:23:ff:a3:39:45:19:
85:97:bb:38:7d:12:ba:c4:57:ff:31:36:c2:62:5c:dd:20:17:
a6:3e:a5:40:f3:e8:b1:fb:a9:29:0e:43:53:91:63:15:65:36:
62:27:50:f1:cf:44:73:67:25:8b:41:51:f1:80:66:53:9c:41:
15:8c:e4:0e:71:80:d0:fd:c2:db:1d:7f:2c:6b:5b:1a:57:21:
8d:8d:a5:03:f9:af:1b:a1:61:0c:c6:62:b3:f5:1b:36:54:05:
6f:45:cb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMlzgOvd2BMQAm3wAlVkyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi
ODM5YTUwHhcNMjUwMzEyMjMwMTE1WhcNMjUwMzEzMjMwMTE1WjAzMTEwLwYDVQQD
EyhmMmJmYmFlNDU0MDU4MWIyZjM1Njk2YjA2YmFiNzc1YWMwODE2ZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WUnoArP7AigYtgCMFY8mRm6/5ao
ot4KOjX80S5BpmmngBaCPnKNhhV2EjVzDHKXc7gqnC+J3GiFt6GQZr+KnpxUkGiX
sC4Z1AHDMM/FKJSc12ExiRDc40LhJGn1FiHa/hYPmzvmZUJhG7FxGh9sr59YAa/z
501yLNTAunkM4ZHFfClMWhUWZ+FvJ6dckxdbt9/uu0r7aCS5IDIB8v1zJSnUgwaI
z4EHE2Pis14Do+i6jNB8kuWMCYe6xKJo4CmfkUF/zl7fGDhuwRlLLdBueFUpM+q6
gjMRCujKdV+TubK1HbISMpu6Xt0HwYbDPxvMD18/qLogwZxuut4Gn7FG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK/uuRUBYGy81aWsGurd1rAgW3IMB8GA1UdIwQY
MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt
ODBhN2ViYTZmOGU5LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5
LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEu3KFPn
7BVoUq9ZsH7nhL3bR+VTL1pk1uArJU4UVAgMM5tJ8IcJs2rHvIAjJUaMOc2xW2yM
gJOg18RM5xBm6jn0wIOOVE7cQp/e2Se+D51M+hA7Tdia7EHZQh1rIsJtUFz5QjD1
17UI+/HTO8zTLcHeGI8dWtNeNLdV7EiqGQ+GG7M2+gYBNPKfv9hQ8xlxZ3ro6htw
8JEWuAvnI/+jOUUZhZe7OH0SusRX/zE2wmJc3SAXpj6lQPPosfupKQ5DU5FjFWU2
YidQ8c9Ec2cli0FR8YBmU5xBFYzkDnGA0P3C2x1/LGtbGlchjY2lA/mvG6FhDMZi
s/UbNlQFb0XLig==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:38 2025 by rpki-client