Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: 2yQ5EmxFoEmS1EUpN1mfHe07m0hcy/7riKhhJknRBe8=
Subject key identifier: 0D:2E:D3:3F:09:D3:C2:8C:8C:66:DD:94:5E:2F:1F:F3:C8:53:1D:5B
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019757C8B643A34CD97B112D29868295EA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 1315
Signing time: Tue 10 Jun 2025 03:01:00 +0000
Manifest this update: Tue 10 Jun 2025 03:01:00 +0000
Manifest next update: Wed 11 Jun 2025 03:01:00 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: TnojcusAvJfAr9Aplu7sYCGE8gSH+OCticwS7CN+HWQ=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:b6:43:a3:4c:d9:7b:11:2d:29:86:82:95:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jun 10 03:01:00 2025 GMT
Not After : Jun 11 03:01:00 2025 GMT
Subject: CN=0d2ed33f09d3c28c8c66dd945e2f1ff3c8531d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:07:4c:1c:f9:2e:b7:0a:a0:98:4c:e5:7b:
13:f6:79:a1:3d:b3:ef:42:85:fd:83:e9:16:8a:f9:
c9:0b:b6:e4:6a:91:18:c1:44:ec:77:7c:10:d1:0c:
4e:66:8d:9a:46:c7:6f:2a:74:e0:05:7e:27:87:d3:
cf:97:ff:9c:72:d0:d6:39:fb:0b:24:ec:6e:07:ea:
bd:f4:43:3b:58:73:90:f4:c4:d2:f5:22:1c:80:4d:
f1:af:75:e9:ea:a8:7d:b3:a5:b3:f0:88:a9:71:00:
d2:b1:69:16:49:d5:6e:b5:5b:46:63:78:20:6e:79:
71:bb:ab:0a:04:4b:d1:00:03:4f:3a:ad:06:2c:66:
fe:3b:a8:9a:42:aa:f3:e4:cf:78:7d:4a:95:c1:78:
c7:80:20:11:26:0c:d4:4f:03:cf:ed:85:14:c8:8a:
70:05:29:06:97:d3:23:24:f6:91:9d:74:3e:d6:e6:
40:42:36:7e:a0:2d:73:e5:18:f3:e0:a3:ae:81:19:
7e:ee:ba:8e:ef:94:3c:fa:b2:d2:b2:90:98:49:88:
1a:f2:88:5e:b3:17:bb:47:5b:ce:48:70:71:f8:10:
4a:0c:da:6b:e9:9f:c8:9b:63:04:a2:de:79:79:2b:
a3:e5:e7:4f:59:69:54:30:c9:8c:d8:a0:f5:fb:d7:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:D3:3F:09:D3:C2:8C:8C:66:DD:94:5E:2F:1F:F3:C8:53:1D:5B
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fa:23:80:1c:d3:d8:1f:5e:fc:51:ab:ec:3b:ec:6a:38:e8:
a1:67:37:a5:76:c8:27:d5:a6:4d:b6:3b:71:b7:21:ad:e5:47:
98:7a:11:6a:bb:4a:a9:af:01:70:5a:2a:03:ac:b7:d5:8a:8d:
96:53:c5:80:a0:c2:36:7f:86:d9:3b:da:1a:ce:a1:ad:7e:02:
bd:bd:00:80:00:c3:9d:14:ec:ca:3a:39:ab:02:cf:6e:21:45:
b5:88:98:4b:12:c4:b9:d6:f7:82:e0:a6:9b:a5:cc:76:24:d6:
91:ca:26:c1:a7:3c:d5:05:a8:c7:51:b4:57:e9:35:be:ae:ca:
6c:cd:82:77:f5:cc:66:b5:2c:ff:5e:e3:94:68:59:cf:18:d3:
77:28:12:36:11:d1:fb:68:cf:d6:1e:b3:60:12:32:9b:2e:01:
e2:ea:1a:68:9d:fa:3f:ca:7e:d7:6f:91:19:85:a4:f1:8b:e2:
1d:74:df:0b:d2:89:11:84:a0:07:5e:dd:1f:0c:54:63:ad:c7:
fd:f4:35:8c:ec:e6:7d:91:dc:71:6b:ac:5b:e8:78:70:ff:c4:
f8:ca:29:41:4e:87:41:98:27:2c:62:34:31:95:e8:39:eb:54:
5f:53:fd:63:52:27:92:7d:58:24:6a:be:92:cf:b3:d9:fb:1e:
04:87:e9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXyLZDo0zZexEtKYaCleoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz
NzI0OTYwHhcNMjUwNjEwMDMwMTAwWhcNMjUwNjExMDMwMTAwWjAzMTEwLwYDVQQD
EygwZDJlZDMzZjA5ZDNjMjhjOGM2NmRkOTQ1ZTJmMWZmM2M4NTMxZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEsHTBz5LrcKoJhM5XsT9nmhPbPv
QoX9g+kWivnJC7bkapEYwUTsd3wQ0QxOZo2aRsdvKnTgBX4nh9PPl/+cctDWOfsL
JOxuB+q99EM7WHOQ9MTS9SIcgE3xr3Xp6qh9s6Wz8IipcQDSsWkWSdVutVtGY3gg
bnlxu6sKBEvRAANPOq0GLGb+O6iaQqrz5M94fUqVwXjHgCARJgzUTwPP7YUUyIpw
BSkGl9MjJPaRnXQ+1uZAQjZ+oC1z5Rjz4KOugRl+7rqO75Q8+rLSspCYSYga8ohe
sxe7R1vOSHBx+BBKDNpr6Z/Im2MEot55eSuj5edPWWlUMMmM2KD1+9fv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0u0z8J08KMjGbdlF4vH/PIUx1bMB8GA1UdIwQY
MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt
OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl
LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPojgBzT
2B9e/FGr7DvsajjooWc3pXbIJ9WmTbY7cbchreVHmHoRartKqa8BcFoqA6y31YqN
llPFgKDCNn+G2TvaGs6hrX4Cvb0AgADDnRTsyjo5qwLPbiFFtYiYSxLEudb3guCm
m6XMdiTWkcomwac81QWox1G0V+k1vq7KbM2Cd/XMZrUs/17jlGhZzxjTdygSNhHR
+2jP1h6zYBIymy4B4uoaaJ36P8p+12+RGYWk8YviHXTfC9KJEYSgB17dHwxUY63H
/fQ1jOzmfZHccWusW+h4cP/E+MopQU6HQZgnLGI0MZXoOetUX1P9Y1Inkn1YJGq+
ks+z2fseBIfpcw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:03:34 2025 by rpki-client