Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: yEgZL18Qu4Nrd3vGIAIa7y5H9NeaHCYKSELEQb2/QXM=
Subject key identifier: 4A:C0:C3:D6:85:D5:ED:15:16:5C:EC:77:58:98:70:EF:AB:D5:6C:A6
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 019757C8141B110848EA2A50BF02FB97AD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0CA0
Signing time: Tue 10 Jun 2025 03:00:19 +0000
Manifest this update: Tue 10 Jun 2025 03:00:19 +0000
Manifest next update: Wed 11 Jun 2025 03:00:19 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: v2QOaR+EbN+LDS1Zwir+sSwVTg84RSOMPpp+dOL6DoI=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:14:1b:11:08:48:ea:2a:50:bf:02:fb:97:ad:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jun 10 03:00:19 2025 GMT
Not After : Jun 11 03:00:19 2025 GMT
Subject: CN=4ac0c3d685d5ed15165cec77589870efabd56ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:68:9f:a7:3f:d2:eb:87:23:da:d6:75:27:
cd:88:f0:af:9d:45:80:c6:1e:75:79:35:4b:f6:8c:
74:36:4a:d1:7b:29:38:57:31:05:64:ec:70:f6:26:
20:ad:14:59:ba:c9:02:46:f5:17:6b:a5:f2:6e:b7:
55:63:73:5a:ab:3f:76:df:97:1e:81:a1:21:53:bc:
37:d2:8a:e9:f0:63:b8:79:4d:0f:24:3d:37:55:11:
04:44:14:4d:6d:bd:29:9a:1b:82:ea:9c:40:ef:4c:
eb:22:e3:d5:f8:4b:0e:7e:dc:57:c0:e9:78:ce:13:
4b:de:07:42:dc:33:4d:cc:80:51:e2:25:05:6e:5a:
73:dc:c7:b6:30:04:1d:40:31:88:40:1e:2d:2a:7b:
eb:9a:4e:fa:73:f3:a8:ea:b0:db:46:2b:b4:25:0a:
da:fa:7f:94:f7:77:63:1a:1a:dd:71:d8:76:b6:06:
0e:5b:09:1a:95:31:d1:81:00:98:55:df:13:67:ff:
79:47:1f:ce:04:02:17:27:62:86:f1:24:da:b6:91:
54:41:54:0d:72:8e:f1:67:59:b3:57:cc:14:be:c6:
72:c0:6a:52:fd:77:72:ba:df:f7:a0:39:e0:1c:68:
6f:7c:73:70:c1:2f:69:12:87:2b:9f:72:d1:d3:a2:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C0:C3:D6:85:D5:ED:15:16:5C:EC:77:58:98:70:EF:AB:D5:6C:A6
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:40:80:0c:9c:f7:7c:6d:bc:86:0a:23:61:36:82:c6:e4:
5e:c1:87:53:69:49:b3:a3:6d:48:ca:61:b8:91:d1:e1:02:86:
95:2a:94:ef:a7:7c:cb:e0:8b:59:d8:a6:46:7e:0e:ec:dd:42:
b8:a1:30:4f:2d:4c:cd:48:3e:2b:35:7e:4b:47:63:57:70:63:
cc:8a:29:41:79:1d:df:f0:ad:cc:e0:e3:7d:bc:7e:7d:2c:aa:
0c:72:11:0b:ea:3c:a9:8e:c2:34:ed:be:1a:01:53:0e:fc:84:
8e:ff:51:42:1f:f6:91:0b:31:5c:f8:8a:d5:92:22:11:85:9d:
f6:a9:49:8d:a5:a3:32:34:9f:a0:81:1e:b7:48:53:dc:23:e2:
8e:83:b8:73:0d:6b:7f:6c:76:41:f0:23:01:a1:bf:ec:ae:09:
06:d5:22:80:34:c8:0b:6d:a3:5f:07:68:86:92:4f:f0:15:21:
6b:33:cf:b1:83:5e:cc:df:d3:37:c9:bd:c1:82:e6:c4:67:d5:
99:2f:af:b9:10:1e:84:2c:bb:68:50:31:47:da:5e:b7:f9:ea:
84:e2:81:f3:eb:9d:99:4d:2f:a9:a6:b7:50:cc:2a:80:89:79:
50:be:70:8f:ef:04:37:41:3d:3c:b6:e0:8d:1c:15:02:a8:c9:
6e:64:72:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXyBQbEQhI6ipQvwL7l60HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjUwNjEwMDMwMDE5WhcNMjUwNjExMDMwMDE5WjAzMTEwLwYDVQQD
Eyg0YWMwYzNkNjg1ZDVlZDE1MTY1Y2VjNzc1ODk4NzBlZmFiZDU2Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nlon6c/0uuHI9rWdSfNiPCvnUWA
xh51eTVL9ox0NkrReyk4VzEFZOxw9iYgrRRZuskCRvUXa6XybrdVY3Naqz9235ce
gaEhU7w30orp8GO4eU0PJD03VREERBRNbb0pmhuC6pxA70zrIuPV+EsOftxXwOl4
zhNL3gdC3DNNzIBR4iUFblpz3Me2MAQdQDGIQB4tKnvrmk76c/Oo6rDbRiu0JQra
+n+U93djGhrdcdh2tgYOWwkalTHRgQCYVd8TZ/95Rx/OBAIXJ2KG8STatpFUQVQN
co7xZ1mzV8wUvsZywGpS/Xdyut/3oDngHGhvfHNwwS9pEocrn3LR06LFcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErAw9aF1e0VFlzsd1iYcO+r1WymMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqxAgAyc
93xtvIYKI2E2gsbkXsGHU2lJs6NtSMphuJHR4QKGlSqU76d8y+CLWdimRn4O7N1C
uKEwTy1MzUg+KzV+S0djV3BjzIopQXkd3/CtzODjfbx+fSyqDHIRC+o8qY7CNO2+
GgFTDvyEjv9RQh/2kQsxXPiK1ZIiEYWd9qlJjaWjMjSfoIEet0hT3CPijoO4cw1r
f2x2QfAjAaG/7K4JBtUigDTIC22jXwdohpJP8BUhazPPsYNezN/TN8m9wYLmxGfV
mS+vuRAehCy7aFAxR9pet/nqhOKB8+udmU0vqaa3UMwqgIl5UL5wj+8EN0E9PLbg
jRwVAqjJbmRyjw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:15:54 2025 by rpki-client