Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.mft (raw, json)
Hash identifier: 9mE8DCVSCIxlYoyPjneHljbRJT7kOqe3dNfyYiG8NnI=
Subject key identifier: E4:FD:27:C9:E7:6F:39:0F:C6:AE:FC:E0:E4:E2:82:CC:ED:17:6E:7E
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 01964A4658ABEEE42DD554AC918AFCE1A017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
Manifest number: 08EC
Signing time: Fri 18 Apr 2025 19:00:46 +0000
Manifest this update: Fri 18 Apr 2025 19:00:46 +0000
Manifest next update: Sat 19 Apr 2025 19:00:46 +0000
Files and hashes: 1: diUYpUKMIXz1gLgZaNSVSKV18U8.roa (hash: 2LacqRpLn+KwsMEDop6qn6ZSkweQldM8ZPPhx+K/olo=)
2: sIrODrPi30n9u3dyZxb7Zed3eWQ.crl (hash: 9ZU93RJGFMD815EWnypIDuNb5TwD8B6J98CMDAWUydo=)
3: ypDy4xS2R6Ye6aWBkCNFAdcm0wI.roa (hash: hjIAAkji2+ZqYHRNKyPRkJEyLfHtgHEfz/xpi/TOXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:58:ab:ee:e4:2d:d5:54:ac:91:8a:fc:e1:a0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Apr 18 19:00:46 2025 GMT
Not After : Apr 19 19:00:46 2025 GMT
Subject: CN=e4fd27c9e76f390fc6aefce0e4e282cced176e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:cd:0e:a8:7b:fd:d0:89:1e:9e:05:10:97:
3c:f5:a0:ef:bd:1c:fe:04:b5:b9:3f:49:71:1d:39:
4f:6d:1e:88:f3:8a:9e:3c:fa:27:ed:58:4e:60:82:
ca:aa:c9:ff:a0:f2:29:59:a6:77:f8:88:63:16:a0:
b6:06:ff:24:b6:ba:6e:50:90:b4:6d:1f:e2:4e:5b:
26:27:6b:ea:c4:85:fc:9b:74:9e:7c:d0:7d:1c:43:
41:5e:23:b2:e5:5d:47:11:40:33:73:49:45:4e:81:
4e:e0:a2:73:6b:44:68:a5:2e:26:e7:d6:57:6b:51:
9c:2b:79:91:9e:f0:e0:6b:b8:28:46:10:aa:4b:fe:
d1:a5:ad:d1:5a:6c:40:d7:ac:b6:9a:d3:2f:84:54:
5c:52:5b:9e:3b:fd:1e:e5:bc:97:05:9b:b2:78:d7:
b5:b3:d2:ae:dd:f0:b0:5f:5a:d0:e9:7e:d2:c6:40:
99:d7:39:b9:d5:76:c5:39:98:ee:ef:7e:e9:82:42:
53:5e:90:ca:9f:7f:1d:a4:4f:a8:e7:d8:bf:e8:41:
9e:32:91:44:68:a2:46:a4:f3:c9:e2:61:b5:6b:d0:
a5:72:a1:a7:9d:4c:11:8d:d8:8f:0d:4a:86:c7:e8:
0e:ec:b3:66:33:36:fc:4d:6e:97:99:82:f6:f3:d6:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FD:27:C9:E7:6F:39:0F:C6:AE:FC:E0:E4:E2:82:CC:ED:17:6E:7E
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:25:9e:6a:6f:df:6c:32:6a:1f:9c:bc:b3:1b:39:bd:ed:33:
33:d8:34:b7:b3:28:40:89:7f:fe:da:8e:a0:96:5a:18:c4:62:
df:41:27:54:9f:10:79:5a:77:43:77:dd:7c:34:c3:43:cc:95:
62:59:a0:47:81:68:dc:93:53:ad:f2:f7:82:b0:d4:b4:02:52:
03:fd:f0:82:3d:a2:ce:14:f6:9a:79:f5:ff:c0:37:ad:8f:b4:
7e:b4:59:08:c6:c7:d8:81:ef:a3:82:9e:b4:9d:60:23:64:f1:
37:96:22:51:ae:78:31:13:b8:22:c5:02:2c:39:d8:3b:be:a6:
14:0e:f9:97:8a:00:1a:ec:f6:18:f7:95:61:88:aa:73:fd:83:
d2:03:d5:0a:75:4b:06:a3:c0:e0:89:af:0a:b7:19:c0:01:70:
d3:56:f9:0e:cc:fc:b1:f2:84:1d:a0:f5:47:f7:7e:d6:cd:30:
f2:56:62:f3:9f:79:62:29:a0:cf:68:30:09:0d:3c:a4:c0:5c:
21:2c:82:6c:9c:aa:eb:c5:61:ed:19:17:0b:4f:30:ba:dd:6b:
3c:8b:2b:bf:be:38:01:8b:d9:ab:86:7d:30:77:42:97:74:41:
dc:44:90:7f:45:55:8e:7c:c0:8a:2b:ff:95:ef:5d:88:2f:f2:
db:18:87:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRlir7uQt1VSskYr84aAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOGFjZTBlYjNlMmRmNDlmZGJiNzc3MjY3MTZmYjY1ZTc3
Nzc5NjQwHhcNMjUwNDE4MTkwMDQ2WhcNMjUwNDE5MTkwMDQ2WjAzMTEwLwYDVQQD
EyhlNGZkMjdjOWU3NmYzOTBmYzZhZWZjZTBlNGUyODJjY2VkMTc2ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAturNDqh7/dCJHp4FEJc89aDvvRz+
BLW5P0lxHTlPbR6I84qePPon7VhOYILKqsn/oPIpWaZ3+IhjFqC2Bv8ktrpuUJC0
bR/iTlsmJ2vqxIX8m3SefNB9HENBXiOy5V1HEUAzc0lFToFO4KJza0RopS4m59ZX
a1GcK3mRnvDga7goRhCqS/7Rpa3RWmxA16y2mtMvhFRcUlueO/0e5byXBZuyeNe1
s9Ku3fCwX1rQ6X7SxkCZ1zm51XbFOZju737pgkJTXpDKn38dpE+o59i/6EGeMpFE
aKJGpPPJ4mG1a9ClcqGnnUwRjdiPDUqGx+gO7LNmMzb8TW6XmYL289Y1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT9J8nnbzkPxq784OTigsztF25+MB8GA1UdIwQY
MBaAFLCKzg6z4t9J/bt3cmcW+2Xnd3lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0lyT0RyUGkzMG45dTNkeVp4YjdaZWQzZVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80NTM3ZGQtNzhiNi00NjdlLTkxNGQt
ODY1YjRjZmJkNGNkLzEvc0lyT0RyUGkzMG45dTNkeVp4YjdaZWQzZVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80NTM3ZGQtNzhiNi00NjdlLTkxNGQtODY1YjRjZmJkNGNk
LzEvc0lyT0RyUGkzMG45dTNkeVp4YjdaZWQzZVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCWeam/f
bDJqH5y8sxs5ve0zM9g0t7MoQIl//tqOoJZaGMRi30EnVJ8QeVp3Q3fdfDTDQ8yV
YlmgR4Fo3JNTrfL3grDUtAJSA/3wgj2izhT2mnn1/8A3rY+0frRZCMbH2IHvo4Ke
tJ1gI2TxN5YiUa54MRO4IsUCLDnYO76mFA75l4oAGuz2GPeVYYiqc/2D0gPVCnVL
BqPA4ImvCrcZwAFw01b5Dsz8sfKEHaD1R/d+1s0w8lZi8595Yimgz2gwCQ08pMBc
ISyCbJyq68Vh7RkXC08wut1rPIsrv744AYvZq4Z9MHdCl3RB3ESQf0VVjnzAiiv/
le9diC/y2xiHXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:02 2025 by rpki-client