Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
File: S3CjpsSoVyUDdZizkT4hhp29040.mft (raw, json)
Hash identifier: a4QZZoJk00kQZBKwaw3h6Vt/pEB120B2vGVpFQhm4h4=
Subject key identifier: 06:D7:69:52:A1:C5:04:C6:61:30:D7:9F:64:6A:7B:96:65:79:95:8F
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01964669DADCC44EDFC822CF3F20D689EC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
Manifest number: 0954
Signing time: Fri 18 Apr 2025 01:01:04 +0000
Manifest this update: Fri 18 Apr 2025 01:01:04 +0000
Manifest next update: Sat 19 Apr 2025 01:01:04 +0000
Files and hashes: 1: 3jlhu43nFTAqKx4et3eHcMKKL3Y.roa (hash: BH64yszlx12crGfEJXHUgBhMmAPFBIBZrSlJaldUjes=)
2: S3CjpsSoVyUDdZizkT4hhp29040.crl (hash: usYCNFQBzhb7Rp2EcergKPQBd80MLzgTs/ixikZLH8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:69:da:dc:c4:4e:df:c8:22:cf:3f:20:d6:89:ec:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Apr 18 01:01:04 2025 GMT
Not After : Apr 19 01:01:04 2025 GMT
Subject: CN=06d76952a1c504c66130d79f646a7b966579958f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:74:f3:51:19:0e:50:aa:16:73:c5:fd:40:
45:38:7f:a3:d8:c6:ad:ec:79:16:10:f4:e3:ec:66:
ea:5a:76:28:ef:42:ed:5a:f0:b1:8c:3e:2f:c7:e1:
6e:15:1c:fe:d6:94:2e:0e:38:5c:7b:58:d0:24:af:
b3:83:0f:6d:4e:0d:31:d5:05:35:2d:92:79:ea:2d:
2d:0e:22:ba:19:b8:d3:4a:44:85:9f:85:6a:eb:af:
23:9c:4f:b0:26:86:7a:4b:3d:4a:36:e8:8d:4e:e7:
4b:96:44:2a:d7:2e:2c:8e:dc:dc:ce:1f:47:07:86:
0f:d1:9e:c8:22:1d:8f:54:1d:81:ef:48:dd:99:ed:
36:f8:c2:61:84:62:85:6a:a4:8e:3f:d4:fd:69:7b:
43:8d:12:aa:db:9f:43:e7:55:69:1e:0a:af:10:48:
10:a7:fa:a6:f3:fe:70:d7:74:3c:90:f2:2f:8b:f4:
4f:4a:9f:62:b5:88:f9:1e:bf:5e:59:e0:75:c5:64:
9a:2f:96:0b:df:a0:2c:d9:53:b2:e1:df:c1:28:e0:
cc:f8:e9:f7:58:1f:45:9c:69:fe:c2:c3:36:97:96:
05:ea:23:f0:b4:29:3f:4b:45:56:ef:8e:ff:02:0a:
d8:d4:df:ea:c4:84:24:61:84:39:cd:de:5f:75:5f:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D7:69:52:A1:C5:04:C6:61:30:D7:9F:64:6A:7B:96:65:79:95:8F
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:18:4d:b4:9b:f3:ad:97:fc:f0:93:78:af:88:66:19:84:79:
57:19:ab:85:eb:14:af:8d:b1:eb:28:43:34:bd:a6:63:aa:2f:
52:60:15:37:1e:a2:6e:23:09:5e:1f:bd:b6:24:26:ae:f9:cd:
a7:a0:25:7d:3a:7d:96:07:da:be:44:ff:7f:ee:90:74:42:9a:
ec:70:78:70:45:fb:7c:bf:7b:bf:4c:c7:31:13:3f:17:38:19:
8c:b7:3e:df:1a:e5:14:ec:c3:20:0d:77:13:a1:96:ff:da:94:
8d:f1:d7:6e:6d:fc:b7:30:38:31:89:72:ec:6c:ec:28:a3:61:
b4:9d:73:39:cd:7f:4c:0c:71:92:b0:a1:c7:d1:57:b4:44:68:
e2:cf:a2:1d:59:33:0c:cd:7a:b2:db:06:bb:8f:dc:10:5b:29:
6c:cb:fa:98:4b:82:d0:62:35:1d:31:3b:43:2e:ab:6b:da:f0:
17:50:84:69:c8:4b:61:85:2b:35:43:26:40:5e:0f:bd:90:8d:
2f:a6:f6:05:67:46:a1:08:c9:58:d5:7c:74:c9:cb:e5:e2:15:
6d:c9:e0:78:a5:65:02:56:d0:d1:c7:f0:31:8f:47:e3:c2:f4:
39:50:30:f5:78:f3:99:0a:77:a6:a6:cf:75:30:ab:74:59:1b:
ab:9e:a2:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGadrcxE7fyCLPPyDWiew3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBhM2E2YzRhODU3MjUwMzc1OThiMzkxM2UyMTg2OWRi
ZGQzOGQwHhcNMjUwNDE4MDEwMTA0WhcNMjUwNDE5MDEwMTA0WjAzMTEwLwYDVQQD
EygwNmQ3Njk1MmExYzUwNGM2NjEzMGQ3OWY2NDZhN2I5NjY1Nzk5NThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxZ081EZDlCqFnPF/UBFOH+j2Mat
7HkWEPTj7GbqWnYo70LtWvCxjD4vx+FuFRz+1pQuDjhce1jQJK+zgw9tTg0x1QU1
LZJ56i0tDiK6GbjTSkSFn4Vq668jnE+wJoZ6Sz1KNuiNTudLlkQq1y4sjtzczh9H
B4YP0Z7IIh2PVB2B70jdme02+MJhhGKFaqSOP9T9aXtDjRKq259D51VpHgqvEEgQ
p/qm8/5w13Q8kPIvi/RPSp9itYj5Hr9eWeB1xWSaL5YL36As2VOy4d/BKODM+On3
WB9FnGn+wsM2l5YF6iPwtCk/S0VW747/AgrY1N/qxIQkYYQ5zd5fdV9ZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbXaVKhxQTGYTDXn2Rqe5ZleZWPMB8GA1UdIwQY
MBaAFEtwo6bEqFclA3WYs5E+IYadvdONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUt
NDgyNWIyOWRkNTcyLzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUtNDgyNWIyOWRkNTcy
LzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRhNtJvz
rZf88JN4r4hmGYR5VxmrhesUr42x6yhDNL2mY6ovUmAVNx6ibiMJXh+9tiQmrvnN
p6AlfTp9lgfavkT/f+6QdEKa7HB4cEX7fL97v0zHMRM/FzgZjLc+3xrlFOzDIA13
E6GW/9qUjfHXbm38tzA4MYly7GzsKKNhtJ1zOc1/TAxxkrChx9FXtERo4s+iHVkz
DM16stsGu4/cEFspbMv6mEuC0GI1HTE7Qy6ra9rwF1CEachLYYUrNUMmQF4PvZCN
L6b2BWdGoQjJWNV8dMnL5eIVbcngeKVlAlbQ0cfwMY9H48L0OVAw9XjzmQp3pqbP
dTCrdFkbq56iAw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:06:35 2025 by rpki-client