Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: eXDtZfD/GKDEtf+09Ndk2mKcCZ2KRHJ4xoBImONCG6U=
Subject key identifier: 41:65:E5:FD:68:08:7B:2A:BF:3E:69:1F:A3:F7:92:27:9E:80:1A:E1
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01958EF36E30A8BEBB71DCF3142CD1F3AC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 0F89
Signing time: Thu 13 Mar 2025 10:01:12 +0000
Manifest this update: Thu 13 Mar 2025 10:01:12 +0000
Manifest next update: Fri 14 Mar 2025 10:01:12 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: uyT6cNIMBMVw6O1xntM0Q3ceUSxiQXnr9Qn8mE0n0ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:6e:30:a8:be:bb:71:dc:f3:14:2c:d1:f3:ac:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Mar 13 10:01:12 2025 GMT
Not After : Mar 14 10:01:12 2025 GMT
Subject: CN=4165e5fd68087b2abf3e691fa3f792279e801ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:b3:ba:ad:a7:6f:d1:3d:82:aa:0b:51:34:
85:74:23:91:a6:36:78:3a:a6:76:e8:8d:99:ee:54:
31:bc:7e:00:bd:f7:ac:a5:21:aa:fe:4c:eb:81:54:
7f:07:b1:52:5b:80:dd:f7:04:ea:31:31:58:e2:16:
79:67:e7:32:a4:4a:68:09:67:a2:f9:85:98:35:c2:
e0:24:b9:73:da:36:79:08:b7:52:90:ce:53:35:b6:
5e:c3:eb:89:76:f0:fa:68:a9:7b:e3:61:4a:5b:27:
fe:78:a7:ba:2f:f6:9d:2d:36:42:eb:1c:19:3a:b5:
b5:94:60:d6:89:18:5e:40:56:cd:e3:84:e3:0d:03:
2a:41:6d:14:30:66:fa:9e:ee:c8:c3:78:34:0c:d1:
fd:9e:ad:e1:9b:b1:ff:38:14:a2:ed:4b:b5:ad:bf:
47:90:38:62:4c:68:d4:38:fb:57:58:03:56:04:42:
a4:2f:2a:80:28:26:ce:f2:c7:6a:e3:3c:16:e6:f0:
dd:cc:64:7c:34:a5:1c:f4:18:dd:c7:01:4a:d4:69:
73:da:45:de:3e:04:82:6e:de:ea:b4:48:bf:6f:8b:
db:5e:6f:de:9d:e4:2f:a2:01:8b:d1:40:4d:49:5c:
ba:6f:d0:3e:6b:0c:52:95:dc:72:8d:9d:0c:77:f7:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:65:E5:FD:68:08:7B:2A:BF:3E:69:1F:A3:F7:92:27:9E:80:1A:E1
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c5:87:70:52:c7:ab:dd:dd:df:81:2b:d7:f5:a6:5c:44:6f:
6c:39:50:2d:c9:dc:61:60:38:b8:0f:cd:18:f8:22:8d:14:b7:
ee:c1:58:f7:3e:26:2b:54:19:96:46:a8:b8:3b:40:05:e2:c4:
ae:cc:df:bb:19:3c:97:d1:03:55:62:e6:8a:c6:49:ee:69:fe:
c0:ed:2b:8a:8e:49:7b:b8:82:cc:12:33:04:d1:2f:8a:30:bc:
6e:e9:69:f0:41:e2:b6:9b:55:fe:cf:23:a9:f0:07:d8:2d:4f:
56:ff:5c:f4:e7:01:f6:8b:06:db:55:72:da:f0:4e:d6:6a:55:
16:fc:f9:c8:36:16:2b:7c:17:ca:5c:b8:72:b6:27:6d:45:01:
9d:4d:1d:55:68:5f:53:88:a0:d9:cb:ae:99:6b:5b:17:f2:bd:
a5:a9:8d:79:f4:cd:4a:ad:1d:c6:09:4a:df:9c:b6:19:56:0c:
6c:ed:ef:82:10:ac:eb:6f:64:e5:fc:0b:8b:1f:8c:cc:de:1d:
07:6f:45:34:94:ad:63:05:40:4a:32:9d:cc:7c:5d:dd:0d:4d:
a9:2d:3c:d8:49:a8:fb:ea:1c:7f:ec:dd:2a:61:13:17:77:8d:
c3:9b:15:b6:de:cf:4e:6e:9f:0a:5b:1c:b4:04:72:0a:da:eb:
b7:a5:bd:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWO824wqL67cdzzFCzR86x8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjUwMzEzMTAwMTEyWhcNMjUwMzE0MTAwMTEyWjAzMTEwLwYDVQQD
Eyg0MTY1ZTVmZDY4MDg3YjJhYmYzZTY5MWZhM2Y3OTIyNzllODAxYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nyzuq2nb9E9gqoLUTSFdCORpjZ4
OqZ26I2Z7lQxvH4AvfespSGq/kzrgVR/B7FSW4Dd9wTqMTFY4hZ5Z+cypEpoCWei
+YWYNcLgJLlz2jZ5CLdSkM5TNbZew+uJdvD6aKl742FKWyf+eKe6L/adLTZC6xwZ
OrW1lGDWiRheQFbN44TjDQMqQW0UMGb6nu7Iw3g0DNH9nq3hm7H/OBSi7Uu1rb9H
kDhiTGjUOPtXWANWBEKkLyqAKCbO8sdq4zwW5vDdzGR8NKUc9BjdxwFK1Glz2kXe
PgSCbt7qtEi/b4vbXm/eneQvogGL0UBNSVy6b9A+awxSldxyjZ0Md/cYIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFl5f1oCHsqvz5pH6P3kieegBrhMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccWHcFLH
q93d34Er1/WmXERvbDlQLcncYWA4uA/NGPgijRS37sFY9z4mK1QZlkaouDtABeLE
rszfuxk8l9EDVWLmisZJ7mn+wO0rio5Je7iCzBIzBNEvijC8bulp8EHitptV/s8j
qfAH2C1PVv9c9OcB9osG21Vy2vBO1mpVFvz5yDYWK3wXyly4crYnbUUBnU0dVWhf
U4ig2cuumWtbF/K9pamNefTNSq0dxglK35y2GVYMbO3vghCs629k5fwLix+MzN4d
B29FNJStYwVASjKdzHxd3Q1NqS082Emo++ocf+zdKmETF3eNw5sVtt7PTm6fClsc
tARyCtrrt6W9/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:02 2025 by rpki-client