Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: dJ+GC8r4NU7qGjz45ZVjlMR7Hb178aaEZRTJVJOTa80=
Subject key identifier: A8:B5:06:6A:6F:72:B0:D0:53:F4:BC:5B:6E:F0:CC:AE:73:05:61:F9
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 019643D6F6D034EC512E9F2EA9E2D14333DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0497
Signing time: Thu 17 Apr 2025 13:01:23 +0000
Manifest this update: Thu 17 Apr 2025 13:01:23 +0000
Manifest next update: Fri 18 Apr 2025 13:01:23 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: VwkE0WvQFH8IqVPzcg7grr9K8pxvv/VpO/a/sOp983I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:f6:d0:34:ec:51:2e:9f:2e:a9:e2:d1:43:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Apr 17 13:01:23 2025 GMT
Not After : Apr 18 13:01:23 2025 GMT
Subject: CN=a8b5066a6f72b0d053f4bc5b6ef0ccae730561f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:b5:e0:34:f6:a4:4b:12:57:6d:69:96:fb:
34:5b:59:5b:d8:ed:e5:ab:4f:a7:7f:89:52:0f:5f:
32:1a:0f:44:54:a7:b3:92:84:18:de:6c:f1:8b:1e:
6e:56:17:17:45:be:1f:c8:d5:52:d6:0b:8f:1b:4d:
f0:0f:b1:a9:1d:b8:71:73:e2:24:9d:ec:34:78:ba:
7d:db:58:5f:31:9b:fa:05:a6:1c:e3:4c:e1:96:32:
33:c6:c1:be:6d:63:ac:9f:96:9b:44:3d:ba:3f:c2:
0c:a9:da:1c:2e:f8:db:71:42:c2:a0:a1:bf:02:75:
a5:7a:0d:ac:23:43:7f:6e:b7:14:7b:94:70:e4:b8:
62:b5:93:21:d3:fb:44:aa:e3:e6:ab:12:73:5b:af:
96:cd:30:34:ca:a0:58:e1:26:c5:0b:de:79:49:6f:
62:b1:c4:d0:04:a1:1c:91:ce:14:87:5a:3e:d7:db:
6e:5b:27:fe:98:03:8a:78:7b:aa:7a:dd:fe:c6:ab:
a0:89:5a:64:ad:c7:65:60:a0:a2:b5:cf:4f:52:76:
37:4b:a9:33:15:3f:25:be:b2:f4:f0:71:d6:e3:04:
bf:05:d6:2b:5a:f4:a6:4a:c6:09:9b:f8:3f:bd:b7:
3c:78:8b:3a:1f:bf:db:10:54:63:92:ea:56:95:08:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B5:06:6A:6F:72:B0:D0:53:F4:BC:5B:6E:F0:CC:AE:73:05:61:F9
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cd:8a:67:bb:fb:f7:80:c8:db:41:cc:b4:54:72:02:47:43:
d0:f6:19:99:4e:c1:ce:51:e5:52:f1:23:ce:b4:a2:b2:65:c0:
bb:72:d1:5a:2d:2d:bd:c4:56:8a:7d:75:26:fb:cc:7b:67:59:
4b:5a:35:fc:5f:38:8a:10:b9:1c:62:2f:a6:87:c5:e6:8c:04:
c3:6c:a0:f0:d6:93:e9:e0:e0:47:4a:9b:63:91:17:6f:15:7d:
7b:a0:4f:15:dd:d7:4b:82:63:e2:fe:54:38:48:91:1f:e7:48:
82:91:d9:63:ce:0c:ab:9b:b5:a7:05:cc:35:4d:af:83:e9:18:
62:f1:86:e0:3c:92:db:ec:62:da:d7:3f:85:f7:14:d1:b6:94:
1f:a6:56:9c:b6:2f:5e:99:3b:c0:be:05:fb:ec:ca:50:76:5e:
06:f7:a0:21:2d:25:47:f5:1e:c8:ad:1f:e2:0c:08:01:69:92:
b2:47:29:97:38:5b:5e:d8:28:22:db:10:17:ef:3c:c5:ac:9c:
6c:f5:1b:1d:f3:7f:ff:a7:2d:26:ab:73:d3:a8:61:9e:6a:a8:
63:fc:14:d1:3b:d8:d7:15:56:1b:75:37:a0:f1:0f:94:30:a0:
05:ec:6d:e0:03:06:2d:25:8e:a4:fd:b5:37:4f:db:36:ce:13:
07:5c:22:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1vbQNOxRLp8uqeLRQzPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz
N2Q1ZWUwHhcNMjUwNDE3MTMwMTIzWhcNMjUwNDE4MTMwMTIzWjAzMTEwLwYDVQQD
EyhhOGI1MDY2YTZmNzJiMGQwNTNmNGJjNWI2ZWYwY2NhZTczMDU2MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zu14DT2pEsSV21plvs0W1lb2O3l
q0+nf4lSD18yGg9EVKezkoQY3mzxix5uVhcXRb4fyNVS1guPG03wD7GpHbhxc+Ik
new0eLp921hfMZv6BaYc40zhljIzxsG+bWOsn5abRD26P8IMqdocLvjbcULCoKG/
AnWleg2sI0N/brcUe5Rw5LhitZMh0/tEquPmqxJzW6+WzTA0yqBY4SbFC955SW9i
scTQBKEckc4Uh1o+19tuWyf+mAOKeHuqet3+xqugiVpkrcdlYKCitc9PUnY3S6kz
FT8lvrL08HHW4wS/BdYrWvSmSsYJm/g/vbc8eIs6H7/bEFRjkupWlQjNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi1BmpvcrDQU/S8W27wzK5zBWH5MB8GA1UdIwQY
MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt
ZTFhNDI5MzUyMGJlLzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl
LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS82KZ7v7
94DI20HMtFRyAkdD0PYZmU7BzlHlUvEjzrSismXAu3LRWi0tvcRWin11JvvMe2dZ
S1o1/F84ihC5HGIvpofF5owEw2yg8NaT6eDgR0qbY5EXbxV9e6BPFd3XS4Jj4v5U
OEiRH+dIgpHZY84Mq5u1pwXMNU2vg+kYYvGG4DyS2+xi2tc/hfcU0baUH6ZWnLYv
Xpk7wL4F++zKUHZeBvegIS0lR/UeyK0f4gwIAWmSskcplzhbXtgoItsQF+88xayc
bPUbHfN//6ctJqtz06hhnmqoY/wU0TvY1xVWG3U3oPEPlDCgBext4AMGLSWOpP21
N0/bNs4TB1wiVg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:55:28 2025 by rpki-client