Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: ekVsyB/aM7GaQnJCwo0HjWTxolhZKMeL2oVNZ9OjDcw=
Subject key identifier: F0:17:68:BF:2F:22:8B:D5:1E:3C:38:08:EC:2C:0F:8C:D3:30:B1:6C
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 019651C8E9910113BF23E607FBE09C6E1F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 1508
Signing time: Sun 20 Apr 2025 06:00:43 +0000
Manifest this update: Sun 20 Apr 2025 06:00:43 +0000
Manifest next update: Mon 21 Apr 2025 06:00:43 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: PnCg4j3CLRksG2EwEs0HsAGPyybYaJ2fPlK9YKA3MPk=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:e9:91:01:13:bf:23:e6:07:fb:e0:9c:6e:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Apr 20 06:00:43 2025 GMT
Not After : Apr 21 06:00:43 2025 GMT
Subject: CN=f01768bf2f228bd51e3c3808ec2c0f8cd330b16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:51:ab:04:42:df:c1:ac:81:97:a8:b0:09:
00:82:33:ad:8e:85:b8:79:4b:4c:41:85:46:d3:95:
35:5e:52:9c:8f:26:b6:24:6d:1d:0c:08:8a:f4:2b:
92:75:c7:2d:25:7a:21:e3:2e:92:45:2d:62:a8:e9:
49:22:ad:c7:3f:12:7e:b7:63:f0:b3:f0:e2:6a:e6:
78:22:46:6d:d4:a5:8e:2e:f2:e2:f5:7b:c6:4b:7d:
4e:0d:7c:b8:eb:0a:02:83:35:b6:9a:03:d9:1d:9a:
dc:51:74:5f:85:1f:22:89:eb:4b:e7:a6:ef:e4:d6:
e4:20:d7:62:97:60:c7:fd:89:93:b3:b4:ee:06:8e:
f3:c6:8f:18:0c:dc:ed:b5:22:96:3a:45:2f:f3:7b:
6a:7a:41:ae:28:e0:3e:ba:c6:5d:dd:a3:80:e6:fe:
03:8c:33:f5:b9:bf:df:a5:0e:62:9c:7a:0a:31:8b:
fc:dd:ca:6a:d1:81:7e:c8:09:ad:fc:75:05:03:68:
89:8e:9b:0b:b4:88:00:3c:75:c0:ff:f6:08:05:4c:
d5:fa:7b:39:95:8a:c0:53:66:80:a5:69:33:de:3e:
4f:43:a1:c2:e3:22:7d:27:f0:e8:01:b7:6c:77:1d:
5a:ae:83:93:ac:12:97:de:77:90:13:30:05:22:f5:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:17:68:BF:2F:22:8B:D5:1E:3C:38:08:EC:2C:0F:8C:D3:30:B1:6C
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:95:20:6c:06:ad:5b:ab:d4:fd:0f:3e:03:ba:35:1c:90:55:
b6:fa:9e:3e:79:6c:23:f7:54:13:37:cb:61:64:7b:d0:70:85:
97:8a:53:bb:0a:32:96:31:20:26:33:5e:3d:8a:e0:59:8e:32:
19:08:3e:28:de:fd:17:17:b6:83:b0:30:1a:1a:51:07:ff:ab:
29:d4:33:1e:ae:02:87:7c:4c:fa:6b:04:77:d5:45:b6:b6:b5:
84:ff:f7:e8:54:83:5d:2b:71:10:40:ff:c8:f3:9c:be:0c:81:
c2:7d:62:22:b2:2f:b8:9f:d1:59:fa:99:fe:13:2b:08:e4:75:
2c:90:cb:96:5f:0f:a8:a9:7c:56:19:9f:2a:07:09:43:7d:30:
8a:1a:b2:b0:b0:4e:0e:0a:f2:30:2a:e9:5c:36:c9:70:18:45:
2c:d2:5c:aa:eb:c5:6c:3e:c9:f0:8a:b9:58:eb:b8:84:11:3c:
9b:56:68:91:57:dd:e0:91:9d:0d:1b:fb:f8:37:34:f1:1a:03:
e6:0e:70:76:4d:a4:60:42:66:d4:d3:36:db:f2:3e:17:c5:18:
c9:68:c9:0a:0e:53:12:65:96:76:05:cc:2e:a4:10:6d:39:ea:
23:e9:4d:ff:37:77:e0:ca:08:84:b5:34:2d:3d:0f:44:29:76:
4e:ba:1e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyOmRARO/I+YH++Ccbh8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTc3MjViMGE2MDVkNGRkY2M0NjRiNzBkY2IzYTE2MmE1
ZjA1NWIwHhcNMjUwNDIwMDYwMDQzWhcNMjUwNDIxMDYwMDQzWjAzMTEwLwYDVQQD
EyhmMDE3NjhiZjJmMjI4YmQ1MWUzYzM4MDhlYzJjMGY4Y2QzMzBiMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw71RqwRC38GsgZeosAkAgjOtjoW4
eUtMQYVG05U1XlKcjya2JG0dDAiK9CuSdcctJXoh4y6SRS1iqOlJIq3HPxJ+t2Pw
s/DiauZ4IkZt1KWOLvLi9XvGS31ODXy46woCgzW2mgPZHZrcUXRfhR8iietL56bv
5NbkINdil2DH/YmTs7TuBo7zxo8YDNzttSKWOkUv83tqekGuKOA+usZd3aOA5v4D
jDP1ub/fpQ5inHoKMYv83cpq0YF+yAmt/HUFA2iJjpsLtIgAPHXA//YIBUzV+ns5
lYrAU2aApWkz3j5PQ6HC4yJ9J/DoAbdsdx1aroOTrBKX3neQEzAFIvVCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAXaL8vIovVHjw4COwsD4zTMLFsMB8GA1UdIwQY
MBaAFEtXclsKYF1N3MRktw3LOhYqXwVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgt
OGFmNTZlNzMzNjAwLzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgtOGFmNTZlNzMzNjAw
LzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpUgbAat
W6vU/Q8+A7o1HJBVtvqePnlsI/dUEzfLYWR70HCFl4pTuwoyljEgJjNePYrgWY4y
GQg+KN79Fxe2g7AwGhpRB/+rKdQzHq4Ch3xM+msEd9VFtra1hP/36FSDXStxEED/
yPOcvgyBwn1iIrIvuJ/RWfqZ/hMrCOR1LJDLll8PqKl8VhmfKgcJQ30wihqysLBO
DgryMCrpXDbJcBhFLNJcquvFbD7J8Iq5WOu4hBE8m1ZokVfd4JGdDRv7+Dc08RoD
5g5wdk2kYEJm1NM22/I+F8UYyWjJCg5TEmWWdgXMLqQQbTnqI+lN/zd34MoIhLU0
LT0PRCl2TroeNw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:08:58 2025 by rpki-client