Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: KxJchmhqVNkH+p05/yM0cLPP3hhnU1hkgUf7BmK82CA=
Subject key identifier: 36:FC:FD:DE:9B:BC:09:E4:37:1A:34:FF:3C:3F:30:02:DF:03:FD:30
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 01964CA297AC5E19C41BCD47B28929AF78ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 04D8
Signing time: Sat 19 Apr 2025 06:00:46 +0000
Manifest this update: Sat 19 Apr 2025 06:00:46 +0000
Manifest next update: Sun 20 Apr 2025 06:00:46 +0000
Files and hashes: 1: 2lzpTnWikk5WyPAHzu93iaXar3c.roa (hash: HljhXM+lqmgD41OyNTeAyYHbVlBeWswT04btlhRf0Vs=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: V5U3QZ7S9Vypf/PGgr7ZFJDv7msiDdPQi8Mz0pkJN/s=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:97:ac:5e:19:c4:1b:cd:47:b2:89:29:af:78:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Apr 19 06:00:46 2025 GMT
Not After : Apr 20 06:00:46 2025 GMT
Subject: CN=36fcfdde9bbc09e4371a34ff3c3f3002df03fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:4a:8e:2e:6c:8e:f2:77:d1:4c:f6:37:4b:
34:22:0f:cd:55:1a:cc:ae:05:e5:5c:03:a2:a9:6b:
ed:e7:ae:5f:79:42:d7:7c:f4:78:36:64:0b:43:bf:
40:9b:25:09:3d:1e:c5:39:ff:39:1d:ac:39:07:43:
ba:49:5d:a3:90:3c:8e:b1:6a:e7:59:dd:7c:18:a2:
75:ee:a2:31:55:32:e6:7b:df:23:04:d4:6b:1f:2d:
28:14:90:1e:2a:3a:61:78:ad:8d:97:f1:fe:58:83:
d7:d9:2e:e0:4a:1a:9b:e3:02:c4:25:57:cb:96:90:
99:5e:18:4d:c9:c4:77:db:9f:64:3d:22:45:81:b3:
1e:83:1f:a2:9f:d8:e8:4d:b7:42:8f:af:c6:f1:ee:
dd:ab:18:4d:3e:44:2f:42:4c:66:f0:af:dd:4b:37:
de:7d:30:4a:23:f7:33:c7:97:16:d4:bd:d3:e8:0c:
93:76:cd:bc:17:50:86:79:40:5d:5a:ae:62:62:05:
6b:1c:fb:b5:90:72:60:cf:3f:a3:8b:fc:af:26:38:
c4:3c:1b:9e:79:a3:8a:0a:36:1e:cc:38:c6:8b:6a:
0f:8e:0f:28:ba:e9:dd:fe:b6:d1:51:25:58:c1:28:
59:64:19:1a:f4:93:cd:ed:df:3c:58:a6:fe:2c:d0:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FC:FD:DE:9B:BC:09:E4:37:1A:34:FF:3C:3F:30:02:DF:03:FD:30
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:32:0f:2b:8b:d0:12:1b:48:80:f8:95:c0:dc:a0:15:dc:
45:5b:f7:cd:03:84:e3:f7:45:26:66:4c:d0:c3:82:b0:31:18:
f2:d0:06:7a:65:12:c1:56:30:0f:f4:da:a6:8e:64:d8:16:5c:
68:22:a0:66:f5:2d:4f:a6:be:14:4b:3f:60:c3:a3:2d:d9:9b:
f5:37:9f:7b:99:3e:ca:1e:7e:4b:b3:54:c5:e9:99:f9:2a:18:
7c:7d:0b:4f:05:2c:f9:10:dd:dc:95:96:d0:32:c6:ce:37:c3:
5c:f7:71:fa:1e:a4:bf:f0:44:70:e6:46:ed:af:02:b2:cd:f2:
35:5b:83:93:f4:e4:e7:58:84:d0:16:51:2c:cd:c0:61:8a:93:
02:ab:68:ca:2e:3c:24:0d:d1:0d:8b:73:71:35:91:a7:98:dd:
8c:f5:3a:c5:80:aa:50:5c:97:df:ac:04:48:01:3a:e9:e7:53:
44:df:ae:30:d5:d2:33:f6:7e:4a:36:fc:93:21:61:5f:77:72:
e7:ff:ec:b6:b4:86:3c:98:77:fa:26:14:18:77:e0:4f:93:20:
ca:c5:4c:2b:e7:90:3b:f5:0c:ee:43:46:99:a6:11:15:cb:01:
cb:d2:eb:91:ca:c5:01:6f:45:88:5f:f4:c8:68:7d:f8:5e:6e:
20:07:52:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMopesXhnEG81Hsokpr3jtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjUwNDE5MDYwMDQ2WhcNMjUwNDIwMDYwMDQ2WjAzMTEwLwYDVQQD
EygzNmZjZmRkZTliYmMwOWU0MzcxYTM0ZmYzYzNmMzAwMmRmMDNmZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuBKji5sjvJ30Uz2N0s0Ig/NVRrM
rgXlXAOiqWvt565feULXfPR4NmQLQ79AmyUJPR7FOf85Haw5B0O6SV2jkDyOsWrn
Wd18GKJ17qIxVTLme98jBNRrHy0oFJAeKjpheK2Nl/H+WIPX2S7gShqb4wLEJVfL
lpCZXhhNycR3259kPSJFgbMegx+in9joTbdCj6/G8e7dqxhNPkQvQkxm8K/dSzfe
fTBKI/czx5cW1L3T6AyTds28F1CGeUBdWq5iYgVrHPu1kHJgzz+ji/yvJjjEPBue
eaOKCjYezDjGi2oPjg8ouund/rbRUSVYwShZZBka9JPN7d88WKb+LNDULwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb8/d6bvAnkNxo0/zw/MALfA/0wMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc4yDyuL
0BIbSID4lcDcoBXcRVv3zQOE4/dFJmZM0MOCsDEY8tAGemUSwVYwD/Tapo5k2BZc
aCKgZvUtT6a+FEs/YMOjLdmb9Tefe5k+yh5+S7NUxemZ+SoYfH0LTwUs+RDd3JWW
0DLGzjfDXPdx+h6kv/BEcOZG7a8Css3yNVuDk/Tk51iE0BZRLM3AYYqTAqtoyi48
JA3RDYtzcTWRp5jdjPU6xYCqUFyX36wESAE66edTRN+uMNXSM/Z+Sjb8kyFhX3dy
5//strSGPJh3+iYUGHfgT5MgysVMK+eQO/UM7kNGmaYRFcsBy9LrkcrFAW9FiF/0
yGh9+F5uIAdSeg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:16:36 2025 by rpki-client