Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json)
Hash identifier: SLWzhMJlQmiVMUzHdWv8XDS3DupadJniZ/zyTXjVHQ0=
Subject key identifier: AB:8D:38:4B:10:ED:79:4A:89:D5:3F:CB:D5:E9:4D:9F:06:FC:73:E9
Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Certificate serial: 01965ACC078B09DB17108133DEE9C7397DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
Manifest number: 0856
Signing time: Tue 22 Apr 2025 00:00:42 +0000
Manifest this update: Tue 22 Apr 2025 00:00:42 +0000
Manifest next update: Wed 23 Apr 2025 00:00:42 +0000
Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=)
2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: BSNkfwJj90XZawoPhr8XK152aOksymdm2GEq93pxlaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cc:07:8b:09:db:17:10:81:33:de:e9:c7:39:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1
Validity
Not Before: Apr 22 00:00:42 2025 GMT
Not After : Apr 23 00:00:42 2025 GMT
Subject: CN=ab8d384b10ed794a89d53fcbd5e94d9f06fc73e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:93:af:81:56:af:f5:8e:74:88:6a:4a:85:
6c:17:e6:4a:cb:9c:19:3d:0a:93:2e:21:ad:db:47:
98:19:41:6b:0e:ec:d8:33:78:a9:d6:f7:5f:40:14:
56:5f:e9:30:19:d4:b0:b4:92:e5:9d:38:11:f7:1b:
62:81:94:68:2c:6d:92:88:10:6b:0d:f6:1d:0c:8a:
e4:6e:3c:a4:c6:a9:3e:c8:e7:82:00:63:a7:2b:11:
25:17:6d:4f:07:13:25:7a:62:e0:dc:a3:54:b9:44:
ee:e2:00:a3:22:fc:47:fb:63:c7:a3:85:85:8f:70:
4c:91:ad:03:7f:19:23:10:2e:44:75:f6:99:7b:77:
7e:3d:83:58:5e:bf:8e:63:da:da:d8:78:79:dd:37:
9b:ba:c6:37:e1:24:92:b2:38:23:ac:3b:1a:f2:28:
14:db:45:47:a2:09:a4:b4:90:6b:5a:39:00:d1:f7:
79:44:37:4a:08:a9:8b:fe:55:f0:f9:a3:11:81:66:
c9:c3:b5:6f:f3:8e:8f:e0:eb:95:76:6d:3d:1b:29:
02:32:b1:0d:f7:90:79:df:79:f1:9b:db:ba:96:d7:
8e:76:47:26:eb:af:e8:a4:b0:7a:d5:3c:af:1b:01:
2a:2c:7c:b0:4e:5d:bc:d6:f5:ec:f3:0d:33:01:b7:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:38:4B:10:ED:79:4A:89:D5:3F:CB:D5:E9:4D:9F:06:FC:73:E9
X509v3 Authority Key Identifier:
keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1f:5f:95:57:bc:6f:a5:73:b0:46:cf:b1:f2:4d:ff:44:21:
da:d8:ee:13:e0:a7:3c:ed:68:ce:97:c6:b8:5a:35:d2:cb:47:
3c:18:16:8d:b9:6b:42:48:d3:ca:8f:84:78:ab:a8:6a:01:1d:
8f:35:35:ce:62:41:76:ba:75:d0:b4:83:5c:a2:d0:ef:b8:d3:
93:21:7c:93:a4:a2:47:13:0f:d9:06:6b:2e:b6:ac:74:af:69:
35:8f:ac:69:41:3d:87:21:9d:ce:ec:26:09:f3:17:43:3a:c6:
9f:76:0a:82:76:a6:f0:dd:78:45:2d:d8:95:16:d3:d5:74:f6:
09:a0:2f:04:54:60:ca:fe:be:bf:55:ff:2d:d6:ce:84:a5:fb:
bf:d4:3b:b9:9a:94:84:dc:cd:e1:d1:91:dd:56:5e:89:91:24:
3b:60:d6:8c:c4:c5:9c:60:da:29:0c:7c:06:f5:7c:17:e6:a0:
c0:42:72:1f:07:1f:17:18:e3:6a:87:92:6e:c6:51:ba:8a:12:
f7:8f:8e:0b:7a:8a:52:2b:57:19:78:b6:97:3e:b8:09:b1:3e:
6f:df:f4:63:9d:e7:03:31:04:36:a8:d0:49:c4:0d:ef:96:b6:
d2:08:0c:79:9f:25:03:ae:ca:3b:82:f4:a4:f6:d5:ab:6e:d5:
39:1d:dc:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZazAeLCdsXEIEz3unHOX3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxN2ViZjQ0MWVlMTA4NTYzMWVlYjc3MTlhODk4MmRmZDgw
NTdiZTEwHhcNMjUwNDIyMDAwMDQyWhcNMjUwNDIzMDAwMDQyWjAzMTEwLwYDVQQD
EyhhYjhkMzg0YjEwZWQ3OTRhODlkNTNmY2JkNWU5NGQ5ZjA2ZmM3M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uuTr4FWr/WOdIhqSoVsF+ZKy5wZ
PQqTLiGt20eYGUFrDuzYM3ip1vdfQBRWX+kwGdSwtJLlnTgR9xtigZRoLG2SiBBr
DfYdDIrkbjykxqk+yOeCAGOnKxElF21PBxMlemLg3KNUuUTu4gCjIvxH+2PHo4WF
j3BMka0DfxkjEC5EdfaZe3d+PYNYXr+OY9ra2Hh53TebusY34SSSsjgjrDsa8igU
20VHogmktJBrWjkA0fd5RDdKCKmL/lXw+aMRgWbJw7Vv846P4OuVdm09GykCMrEN
95B533nxm9u6lteOdkcm66/opLB61TyvGwEqLHywTl281vXs8w0zAbeExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuNOEsQ7XlKidU/y9XpTZ8G/HPpMB8GA1UdIwQY
MBaAFLF+v0Qe4QhWMe63cZqJgt/YBXvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xOWFlMDUtMmZiMy00MjRlLWFlMjYt
MjIzMGRiZDVlZGJiLzEvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xOWFlMDUtMmZiMy00MjRlLWFlMjYtMjIzMGRiZDVlZGJi
LzEvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx9flVe8
b6VzsEbPsfJN/0Qh2tjuE+CnPO1ozpfGuFo10stHPBgWjblrQkjTyo+EeKuoagEd
jzU1zmJBdrp10LSDXKLQ77jTkyF8k6SiRxMP2QZrLrasdK9pNY+saUE9hyGdzuwm
CfMXQzrGn3YKgnam8N14RS3YlRbT1XT2CaAvBFRgyv6+v1X/LdbOhKX7v9Q7uZqU
hNzN4dGR3VZeiZEkO2DWjMTFnGDaKQx8BvV8F+agwEJyHwcfFxjjaoeSbsZRuooS
94+OC3qKUitXGXi2lz64CbE+b9/0Y53nAzEENqjQScQN75a20ggMeZ8lA67KO4L0
pPbVq27VOR3c0w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:16 2025 by rpki-client