Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: fvo/FEY0k2Q3/zyMSiMc5uhoWgwV+TZlCRxoKB321bs=
Subject key identifier: 12:05:00:C5:F8:B6:0E:8F:35:F4:C4:0F:82:EA:94:7E:82:6C:32:63
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019659148406524FD928229B586C1CDA8EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 16:00:38 +0000
Manifest this update: Mon 21 Apr 2025 16:00:38 +0000
Manifest next update: Tue 22 Apr 2025 16:00:38 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: BiW5Gwr1Fgbwv2KZPArExBElpqyXQ7jFWt09xNyvztk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:84:06:52:4f:d9:28:22:9b:58:6c:1c:da:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Apr 21 16:00:38 2025 GMT
Not After : Apr 22 16:00:38 2025 GMT
Subject: CN=120500c5f8b60e8f35f4c40f82ea947e826c3263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:d4:2d:d3:e2:b4:d0:ca:94:77:c7:55:de:
49:89:4f:60:9c:00:8d:ae:69:cd:1e:78:87:98:84:
c2:aa:d5:de:ef:21:7f:a3:79:f2:2f:5c:ad:d7:54:
0d:55:bb:29:e6:1e:30:62:4e:ea:38:98:6d:bc:c1:
1b:96:06:32:65:2f:2b:c5:0f:58:ee:2e:12:6f:fc:
d9:dd:cc:04:b2:5d:69:43:52:b1:70:fa:7a:c7:01:
66:4f:63:0b:71:00:17:e5:a1:6e:c6:b3:24:ff:27:
4d:98:3c:7f:b8:62:ab:10:ed:69:df:b6:30:78:ca:
a0:d5:08:26:b0:d9:81:ee:f9:8c:83:c9:b4:88:2d:
bc:4f:58:93:00:59:0d:49:a3:e5:a8:44:d4:69:13:
d5:45:b9:69:7d:c7:2d:94:28:97:29:e4:15:73:3e:
60:40:9a:aa:91:1b:b4:c3:ef:e6:9b:94:c7:be:2e:
b0:7c:ec:24:08:7e:14:4b:02:3c:ce:54:4c:b3:36:
38:1e:e4:20:a1:dc:02:2c:ad:8d:5d:2a:2f:19:7d:
7a:cc:82:bf:21:cf:1f:8e:30:5f:05:a3:a1:1b:f5:
ab:9c:7f:5f:69:49:24:42:2d:62:a2:7b:62:76:0a:
e3:19:e8:22:9d:f0:c1:8d:30:2f:9f:3e:38:8f:9a:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:05:00:C5:F8:B6:0E:8F:35:F4:C4:0F:82:EA:94:7E:82:6C:32:63
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:48:5e:15:01:5a:a9:a6:74:8c:42:90:ea:aa:a9:b0:20:a2:
6c:6c:99:1e:f2:3f:6b:4a:a3:ba:78:5d:b0:21:d0:d6:17:7c:
90:0b:ac:1c:79:45:62:9e:bb:9d:ec:07:99:a1:ed:a1:c5:56:
bb:61:f6:41:9e:e3:5f:13:45:fb:47:28:07:cb:cd:6b:72:ff:
5b:50:b1:a1:88:42:c0:9f:d9:cc:0a:cf:1f:4f:76:fb:55:34:
16:5d:54:27:a5:d6:51:f9:21:84:f8:57:81:c2:06:84:5c:6d:
60:66:f8:ea:8f:1f:e1:98:ab:57:6f:7d:8f:62:4e:6d:52:c7:
97:d6:22:fc:2a:f7:e9:b9:cc:4e:86:85:6c:49:f9:be:c5:6b:
17:6b:14:a2:30:75:d3:a7:81:e4:d2:98:97:e8:84:07:ba:d0:
b2:5e:ef:78:0b:73:2e:61:49:aa:1b:dd:51:53:07:9a:20:f4:
2c:81:f7:fc:ee:e8:c3:a1:81:12:b7:08:f7:6c:cc:9b:38:ea:
4d:51:8e:95:de:0b:aa:da:67:95:3b:b0:2d:18:bc:94:ac:1a:
50:57:05:f2:44:05:6f:78:2d:85:f9:e7:7c:45:f6:c3:76:1e:
0d:a7:c8:bb:76:d6:fb:39:e0:4f:78:20:74:e4:d6:df:79:e9:
1e:48:01:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFIQGUk/ZKCKbWGwc2o7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk
Y2I2MzIwHhcNMjUwNDIxMTYwMDM4WhcNMjUwNDIyMTYwMDM4WjAzMTEwLwYDVQQD
EygxMjA1MDBjNWY4YjYwZThmMzVmNGM0MGY4MmVhOTQ3ZTgyNmMzMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+/ULdPitNDKlHfHVd5JiU9gnACN
rmnNHniHmITCqtXe7yF/o3nyL1yt11QNVbsp5h4wYk7qOJhtvMEblgYyZS8rxQ9Y
7i4Sb/zZ3cwEsl1pQ1KxcPp6xwFmT2MLcQAX5aFuxrMk/ydNmDx/uGKrEO1p37Yw
eMqg1QgmsNmB7vmMg8m0iC28T1iTAFkNSaPlqETUaRPVRblpfcctlCiXKeQVcz5g
QJqqkRu0w+/mm5THvi6wfOwkCH4USwI8zlRMszY4HuQgodwCLK2NXSovGX16zIK/
Ic8fjjBfBaOhG/WrnH9faUkkQi1iontidgrjGeginfDBjTAvnz44j5oQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIFAMX4tg6PNfTED4LqlH6CbDJjMB8GA1UdIwQY
MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt
YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5
LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUheFQFa
qaZ0jEKQ6qqpsCCibGyZHvI/a0qjunhdsCHQ1hd8kAusHHlFYp67newHmaHtocVW
u2H2QZ7jXxNF+0coB8vNa3L/W1CxoYhCwJ/ZzArPH092+1U0Fl1UJ6XWUfkhhPhX
gcIGhFxtYGb46o8f4ZirV299j2JObVLHl9Yi/Cr36bnMToaFbEn5vsVrF2sUojB1
06eB5NKYl+iEB7rQsl7veAtzLmFJqhvdUVMHmiD0LIH3/O7ow6GBErcI92zMmzjq
TVGOld4LqtpnlTuwLRi8lKwaUFcF8kQFb3gthfnnfEX2w3YeDafIu3bW+zngT3gg
dOTW33npHkgBdA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:51:51 2025 by rpki-client