Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: x8TM2hjVeBrtVpX63i4fKsMTNP7GdoXaJyjQJPRWI9M=
Subject key identifier: B7:77:47:33:05:BD:9A:6E:05:AE:6B:B8:6D:9B:F6:A6:D1:C9:52:FF
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 01964C6B98076F8687629AE2DCA1EA8BB2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 148C
Signing time: Sat 19 Apr 2025 05:00:41 +0000
Manifest this update: Sat 19 Apr 2025 05:00:41 +0000
Manifest next update: Sun 20 Apr 2025 05:00:41 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: n+5Y+lgpa5t+bQKjowzSPpy9zet8cnlN3lWU9pPX+Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:98:07:6f:86:87:62:9a:e2:dc:a1:ea:8b:b2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Apr 19 05:00:41 2025 GMT
Not After : Apr 20 05:00:41 2025 GMT
Subject: CN=b777473305bd9a6e05ae6bb86d9bf6a6d1c952ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:43:0d:b1:8f:12:64:e6:ad:b3:a3:b1:c8:
f3:cb:9f:36:60:5e:b8:ae:8d:47:c5:74:65:1a:94:
82:15:91:17:27:f9:78:78:91:33:c3:34:4f:c2:83:
af:1e:1b:88:fb:58:fe:1b:9e:9c:e5:e9:5d:21:8f:
da:03:23:a6:35:9a:f7:0e:ca:fd:1f:b1:7f:7e:31:
f5:e2:17:0d:62:98:23:38:7e:d7:18:20:d5:e2:cc:
11:71:34:7d:cf:3c:00:f1:e5:92:25:f4:90:61:d0:
25:2d:ec:7a:d6:0c:4a:8a:58:3b:5c:0b:40:ac:c0:
db:12:94:eb:ab:af:4d:33:14:f7:34:d1:4d:39:55:
78:42:a9:18:b4:52:3d:96:3e:86:95:8a:94:46:45:
8b:b9:f0:2a:c9:11:13:54:e9:0b:a8:c1:a4:7d:bf:
87:f8:1d:9d:48:84:aa:c2:65:dd:40:60:60:6c:8f:
4f:3e:79:ed:3a:5f:f4:0e:41:7a:87:07:75:c8:5d:
0f:8a:49:c7:5b:6f:19:1f:63:66:23:b5:27:66:0c:
43:ea:80:89:cc:12:0b:0f:9a:b3:b3:9e:fb:f7:02:
bb:37:97:0a:2e:46:8a:58:74:fa:1b:dd:74:d7:2f:
cc:fe:81:fd:a2:bf:84:25:2f:15:04:1d:7a:d0:23:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:47:33:05:BD:9A:6E:05:AE:6B:B8:6D:9B:F6:A6:D1:C9:52:FF
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9f:3e:c7:9f:c2:64:e0:9e:03:9d:6b:74:ed:2d:3e:82:72:
6d:92:3d:85:fb:51:3d:62:c5:54:7b:fb:bc:af:57:fe:26:7d:
04:c4:b9:78:2b:ce:13:48:07:02:be:34:cf:10:89:20:35:b0:
f7:5a:2b:26:bb:7c:0d:9f:ff:b0:87:2d:7e:7b:5d:96:8b:fe:
13:49:e1:e6:0f:a3:df:52:f7:6d:c7:ab:86:1c:9f:0e:d2:0f:
01:e7:48:74:96:7d:49:62:eb:7c:28:7a:ad:08:6c:1c:56:1c:
42:af:88:c0:e5:55:3d:c0:fc:28:88:83:39:cd:0a:b1:66:6f:
0f:c7:18:b8:24:ef:bf:c3:58:5b:6d:0d:06:b2:ce:53:29:a2:
fd:c9:cc:3f:9e:3c:2a:c6:40:5d:5d:fc:91:62:22:46:d1:b6:
8a:e4:1e:a7:fd:37:2b:b4:ac:1d:ed:bd:a7:50:b4:b4:19:65:
bf:b1:66:e2:de:59:25:a5:6f:f6:c9:fc:6f:84:72:cc:46:90:
bc:3c:df:eb:dd:fe:18:8b:17:e0:82:47:ce:83:15:2e:a6:a3:
4b:cc:78:f7:f9:93:d8:82:49:58:c6:31:56:05:28:ac:2b:09:
34:19:94:18:92:a6:7b:12:fa:b3:29:74:fc:87:32:b2:30:5a:
e9:92:6b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa5gHb4aHYpri3KHqi7LYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmI2ZDJhNWQ0MTMwNTYwZjYxNzk2M2Q5ZmJjOTM0NDJk
YzFjY2QwHhcNMjUwNDE5MDUwMDQxWhcNMjUwNDIwMDUwMDQxWjAzMTEwLwYDVQQD
EyhiNzc3NDczMzA1YmQ5YTZlMDVhZTZiYjg2ZDliZjZhNmQxYzk1MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM1DDbGPEmTmrbOjscjzy582YF64
ro1HxXRlGpSCFZEXJ/l4eJEzwzRPwoOvHhuI+1j+G56c5eldIY/aAyOmNZr3Dsr9
H7F/fjH14hcNYpgjOH7XGCDV4swRcTR9zzwA8eWSJfSQYdAlLex61gxKilg7XAtA
rMDbEpTrq69NMxT3NNFNOVV4QqkYtFI9lj6GlYqURkWLufAqyRETVOkLqMGkfb+H
+B2dSISqwmXdQGBgbI9PPnntOl/0DkF6hwd1yF0PiknHW28ZH2NmI7UnZgxD6oCJ
zBILD5qzs5779wK7N5cKLkaKWHT6G9101y/M/oH9or+EJS8VBB160CPG+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd3RzMFvZpuBa5ruG2b9qbRyVL/MB8GA1UdIwQY
MBaAFEsrbSpdQTBWD2F5Y9n7yTRC3BzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMt
YzU3NDE1ODUwMmM4LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMtYzU3NDE1ODUwMmM4
LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZ8+x5/C
ZOCeA51rdO0tPoJybZI9hftRPWLFVHv7vK9X/iZ9BMS5eCvOE0gHAr40zxCJIDWw
91orJrt8DZ//sIctfntdlov+E0nh5g+j31L3bcerhhyfDtIPAedIdJZ9SWLrfCh6
rQhsHFYcQq+IwOVVPcD8KIiDOc0KsWZvD8cYuCTvv8NYW20NBrLOUymi/cnMP548
KsZAXV38kWIiRtG2iuQep/03K7SsHe29p1C0tBllv7Fm4t5ZJaVv9sn8b4RyzEaQ
vDzf693+GIsX4IJHzoMVLqajS8x49/mT2IJJWMYxVgUorCsJNBmUGJKmexL6syl0
/IcysjBa6ZJrfA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:29 2025 by rpki-client