Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: /XvndAdyeat0IvfThQMwoSZS3sCp9kyTQ9PeGYOCvmA=
Subject key identifier: 69:4C:ED:F1:48:D8:67:E8:D0:42:47:6D:CC:B4:95:FE:06:86:18:20
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 0196372D8803D913CF6DDF49723A772B40C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 12ED
Signing time: Tue 15 Apr 2025 02:00:52 +0000
Manifest this update: Tue 15 Apr 2025 02:00:52 +0000
Manifest next update: Wed 16 Apr 2025 02:00:52 +0000
Files and hashes: 1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: HrtjPEawIeNH3tL8whiE24OqxarUThxo6Gp7v7k4fZg=)
2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=)
3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=)
4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=)
5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:2d:88:03:d9:13:cf:6d:df:49:72:3a:77:2b:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Apr 15 02:00:52 2025 GMT
Not After : Apr 16 02:00:52 2025 GMT
Subject: CN=694cedf148d867e8d042476dccb495fe06861820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:86:2d:42:12:67:6c:c3:32:6a:00:29:34:
8d:a8:fa:a4:71:cf:b6:aa:9f:ee:32:f3:52:bf:b9:
b4:73:c4:32:53:41:a6:d3:55:ca:d5:dd:e4:72:6d:
ec:2f:fc:84:38:20:c4:34:b9:b4:51:81:af:3c:cc:
35:0f:a0:9c:b2:90:61:bc:64:e6:a5:6e:50:44:35:
4a:4b:50:39:02:e8:4f:a1:be:eb:47:d5:19:17:86:
2f:b3:73:fe:0b:6d:eb:77:27:b1:0b:16:33:98:b0:
a6:13:c4:4b:a4:a2:7c:1e:29:2f:db:89:57:5d:af:
a1:ec:fe:61:86:43:c9:f3:e3:c1:46:94:ca:0e:6c:
97:0c:a5:a6:7c:77:4b:fd:1f:20:9c:41:cc:b1:14:
3e:9c:2a:b9:f9:f5:9d:dd:97:36:ae:15:3d:ac:37:
4d:32:30:7d:bf:15:76:b1:31:f8:a1:95:ac:3d:9c:
06:ec:50:98:84:5f:44:ea:eb:e1:3f:99:1f:20:1f:
55:77:2c:ba:84:a0:a1:01:7f:26:f6:e0:4c:dc:b2:
7a:93:a0:77:d4:32:6f:8d:54:70:40:30:f4:d4:ef:
97:91:5f:77:37:36:aa:5d:0f:44:1e:63:43:f3:74:
92:b3:6b:1d:6b:85:2c:66:28:ba:78:1c:8d:c6:08:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:ED:F1:48:D8:67:E8:D0:42:47:6D:CC:B4:95:FE:06:86:18:20
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6f:a5:02:b6:6f:f7:37:a0:c8:19:13:93:a8:d4:62:bb:a0:
d6:a7:8d:b5:e7:50:07:f7:e2:4e:18:78:0c:17:28:15:6b:b4:
ad:98:93:fa:1b:2a:a9:e4:de:5e:5e:a2:c9:4f:9d:ed:68:78:
c9:26:4a:38:1d:13:49:b7:a0:ff:2d:f1:5f:93:83:1a:64:16:
da:79:d3:e3:6c:00:f9:6a:28:e8:7e:ee:b9:6d:2f:d1:5a:4a:
62:6f:e2:3c:6d:56:49:a4:0b:51:75:63:d4:5b:04:00:2c:09:
28:78:6c:44:fd:2e:d3:13:a9:99:ca:43:e4:a9:b9:b2:32:e6:
8f:d9:27:4d:c0:21:02:24:b2:8c:84:47:0f:53:60:09:4d:68:
3d:c2:38:6f:9f:20:7f:65:8b:5b:31:9c:e6:52:5a:31:8d:91:
77:de:98:0e:ab:43:0f:9b:ab:72:fe:17:bc:e7:46:3c:bb:e8:
4c:b9:30:1e:31:22:38:08:8f:a2:70:a6:27:9c:d4:ab:7f:92:
c5:db:94:18:06:56:e8:9c:89:75:a1:dd:c2:ea:f6:67:a9:04:
27:82:dc:ea:ec:1b:5d:e2:ab:9c:35:c6:38:e1:9c:99:28:c0:
8c:28:f2:6a:c4:70:78:10:9e:2b:77:ed:93:a2:c3:5b:46:ca:
ca:72:72:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY3LYgD2RPPbd9Jcjp3K0DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi
MDY5MTEwHhcNMjUwNDE1MDIwMDUyWhcNMjUwNDE2MDIwMDUyWjAzMTEwLwYDVQQD
Eyg2OTRjZWRmMTQ4ZDg2N2U4ZDA0MjQ3NmRjY2I0OTVmZTA2ODYxODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6iGLUISZ2zDMmoAKTSNqPqkcc+2
qp/uMvNSv7m0c8QyU0Gm01XK1d3kcm3sL/yEOCDENLm0UYGvPMw1D6CcspBhvGTm
pW5QRDVKS1A5AuhPob7rR9UZF4Yvs3P+C23rdyexCxYzmLCmE8RLpKJ8Hikv24lX
Xa+h7P5hhkPJ8+PBRpTKDmyXDKWmfHdL/R8gnEHMsRQ+nCq5+fWd3Zc2rhU9rDdN
MjB9vxV2sTH4oZWsPZwG7FCYhF9E6uvhP5kfIB9Vdyy6hKChAX8m9uBM3LJ6k6B3
1DJvjVRwQDD01O+XkV93NzaqXQ9EHmND83SSs2sda4UsZii6eByNxgh43QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlM7fFI2Gfo0EJHbcy0lf4GhhggMB8GA1UdIwQY
MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt
ZWU4MTBiODNhZGNkLzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk
LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG+lArZv
9zegyBkTk6jUYrug1qeNtedQB/fiThh4DBcoFWu0rZiT+hsqqeTeXl6iyU+d7Wh4
ySZKOB0TSbeg/y3xX5ODGmQW2nnT42wA+Woo6H7uuW0v0VpKYm/iPG1WSaQLUXVj
1FsEACwJKHhsRP0u0xOpmcpD5Km5sjLmj9knTcAhAiSyjIRHD1NgCU1oPcI4b58g
f2WLWzGc5lJaMY2Rd96YDqtDD5urcv4XvOdGPLvoTLkwHjEiOAiPonCmJ5zUq3+S
xduUGAZW6JyJdaHdwur2Z6kEJ4Lc6uwbXeKrnDXGOOGcmSjAjCjyasRweBCeK3ft
k6LDW0bKynJyhQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 10:15:08 2025 by rpki-client