Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: GiAzHP1iZtdgDc51aNV1G/FjDMhMH1sR/1bXAmBvad4=
Subject key identifier: CA:9E:14:FE:EB:47:44:2B:6E:1A:2B:43:17:7E:83:7C:8E:55:F9:B0
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019642FAA7B307526DEE243A2C626072D414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 09:00:45 +0000
Manifest this update: Thu 17 Apr 2025 09:00:45 +0000
Manifest next update: Fri 18 Apr 2025 09:00:45 +0000
Files and hashes: 1: 4KEPqzPMpSoYq_-etsWBx1UVT9A.roa (hash: Qyft6AJjQ5gcWAFAYWi3WKCXr3fTm1AuVg1MESeGi2E=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: MFr7+xTLWrLDq7sWZMCbfpUF4VXbp4V3C+CKBFTQi2s=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:a7:b3:07:52:6d:ee:24:3a:2c:62:60:72:d4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Apr 17 09:00:45 2025 GMT
Not After : Apr 18 09:00:45 2025 GMT
Subject: CN=ca9e14feeb47442b6e1a2b43177e837c8e55f9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:b2:2f:e1:20:a3:c2:01:df:fc:73:84:f4:
02:c0:ca:b4:99:e0:df:a5:e2:3c:b7:27:2d:1a:d9:
80:94:2e:66:c1:42:ba:40:09:32:18:1e:2a:15:9c:
87:a1:2c:a8:44:ef:73:20:3c:4a:10:19:48:50:0f:
a1:9c:25:34:be:d5:48:68:fd:2e:10:02:e2:0f:07:
c7:40:3e:cb:c3:0d:a7:db:30:29:f6:55:59:cb:a9:
1c:98:0f:73:1d:68:2e:dc:b8:4f:1d:c6:a8:d6:9d:
5a:10:70:12:e1:a9:ba:3d:06:ec:15:ab:84:03:5f:
aa:6c:23:ed:04:1b:f6:17:db:ff:83:bc:63:7b:0a:
57:9a:d3:81:45:e7:0b:53:49:8c:c0:63:d1:16:3f:
1f:df:f5:e8:43:bb:10:ca:9e:64:15:c8:f5:dd:f0:
a5:26:ed:56:1e:02:d6:63:aa:f6:20:7a:ac:f6:ba:
27:ec:01:03:e6:14:60:ec:46:be:e0:10:2f:ed:27:
65:e6:a2:a4:bb:cd:98:33:5a:1f:8f:28:2d:51:16:
3d:aa:e6:dd:1e:83:87:a5:96:14:24:93:72:46:db:
fd:53:3e:3c:7e:d0:4a:a6:27:57:e7:db:3a:d7:a9:
b0:03:20:bb:a1:5b:de:cd:c5:3d:b0:b1:7b:99:7e:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:14:FE:EB:47:44:2B:6E:1A:2B:43:17:7E:83:7C:8E:55:F9:B0
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d2:e5:32:43:a5:d4:ce:f1:78:95:d8:50:8b:d5:f6:13:61:
28:ca:94:36:d7:44:9a:c4:a3:d0:ec:17:1c:fa:f4:1a:fc:d0:
ac:95:f9:72:bf:37:f2:b0:f6:80:57:91:44:de:9a:2f:7d:72:
ad:4e:7e:39:32:27:bd:f4:b2:a5:ca:7c:ef:1b:4a:06:4f:5c:
32:45:75:e2:36:81:7b:f4:8c:c0:f6:00:f3:d3:a6:e7:fd:00:
63:6b:5d:9b:c5:83:37:f5:91:2b:1a:37:20:68:1c:91:c5:c2:
36:70:07:6a:08:58:d4:8a:4e:51:fc:bc:5c:4a:e6:b1:80:e7:
a4:98:47:b0:bd:09:9d:fe:5d:57:08:1a:8e:32:6c:4c:fd:db:
e4:62:0a:f6:72:8c:cc:30:bd:03:fb:93:e9:41:28:21:fa:6c:
b4:44:a0:28:0b:82:f8:eb:b0:e0:45:85:5f:db:89:e9:e1:2a:
19:7b:c0:3b:12:60:6e:2c:f3:22:ab:b3:a9:de:3e:05:a2:27:
a1:19:69:a4:b3:eb:0f:97:2e:7f:04:99:c3:4a:06:9c:d9:3f:
a4:49:01:7c:51:25:a3:ee:d4:74:51:31:e7:1a:83:10:96:13:
f2:d6:0d:75:8b:b2:58:d1:a8:77:f0:63:76:fa:ee:64:bb:55:
9f:58:e3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZC+qezB1Jt7iQ6LGJgctQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjUwNDE3MDkwMDQ1WhcNMjUwNDE4MDkwMDQ1WjAzMTEwLwYDVQQD
EyhjYTllMTRmZWViNDc0NDJiNmUxYTJiNDMxNzdlODM3YzhlNTVmOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XmyL+Ego8IB3/xzhPQCwMq0meDf
peI8tyctGtmAlC5mwUK6QAkyGB4qFZyHoSyoRO9zIDxKEBlIUA+hnCU0vtVIaP0u
EALiDwfHQD7Lww2n2zAp9lVZy6kcmA9zHWgu3LhPHcao1p1aEHAS4am6PQbsFauE
A1+qbCPtBBv2F9v/g7xjewpXmtOBRecLU0mMwGPRFj8f3/XoQ7sQyp5kFcj13fCl
Ju1WHgLWY6r2IHqs9ron7AED5hRg7Ea+4BAv7Sdl5qKku82YM1ofjygtURY9qubd
HoOHpZYUJJNyRtv9Uz48ftBKpidX59s616mwAyC7oVvezcU9sLF7mX4nsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqeFP7rR0QrbhorQxd+g3yOVfmwMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9LlMkOl
1M7xeJXYUIvV9hNhKMqUNtdEmsSj0OwXHPr0GvzQrJX5cr838rD2gFeRRN6aL31y
rU5+OTInvfSypcp87xtKBk9cMkV14jaBe/SMwPYA89Om5/0AY2tdm8WDN/WRKxo3
IGgckcXCNnAHaghY1IpOUfy8XErmsYDnpJhHsL0Jnf5dVwgajjJsTP3b5GIK9nKM
zDC9A/uT6UEoIfpstESgKAuC+Ouw4EWFX9uJ6eEqGXvAOxJgbizzIquzqd4+BaIn
oRlppLPrD5cufwSZw0oGnNk/pEkBfFElo+7UdFEx5xqDEJYT8tYNdYuyWNGod/Bj
dvruZLtVn1jjHQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:52:46 2025 by rpki-client