Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: +Xo/J1OPyPV+MVmmqdHVxC9MYRg3pjZWI8Mv3VGk2M0=
Subject key identifier: CA:E1:A5:FC:C5:9D:BC:CB:FA:A8:EB:DF:B1:9F:C8:50:E4:8B:15:38
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 019679E960BD02A8B713777E17E1E486D9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0DA9
Signing time: Mon 28 Apr 2025 01:00:59 +0000
Manifest this update: Mon 28 Apr 2025 01:00:59 +0000
Manifest next update: Tue 29 Apr 2025 01:00:59 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: 9Alx4ge+QdssKMFU2BibR9cymugWBpdotEPHECflsxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:60:bd:02:a8:b7:13:77:7e:17:e1:e4:86:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Apr 28 01:00:59 2025 GMT
Not After : Apr 29 01:00:59 2025 GMT
Subject: CN=cae1a5fcc59dbccbfaa8ebdfb19fc850e48b1538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:37:59:fd:a9:5c:2d:b7:a4:93:dc:21:a2:
d3:d0:b8:15:cf:dd:2d:e6:a4:6f:a4:fd:a3:c0:48:
0e:3d:32:12:50:79:bc:65:f1:c7:f9:ee:09:33:09:
6b:37:f0:80:0f:ee:d1:f6:3a:9b:40:b1:8b:ce:9a:
f9:7e:9e:3f:55:8a:ef:1c:a0:a9:11:e9:1e:e2:77:
79:da:1f:bd:43:bc:5d:e5:96:00:6e:db:e5:8c:c8:
c3:43:68:c7:86:f0:d6:8b:55:78:31:7b:1d:e9:87:
0a:3b:43:73:17:85:90:76:c2:02:c6:1a:5a:43:1b:
db:8a:da:3b:ef:3f:33:25:89:69:65:d1:f5:bc:91:
87:95:fd:5b:ea:a4:0b:c9:7c:be:54:7f:33:eb:51:
47:aa:3d:d2:af:8a:65:38:63:1f:83:32:1c:63:de:
22:36:db:37:d5:1b:f8:85:8e:49:da:af:5c:27:3b:
a6:e6:bd:5e:8e:17:1d:41:13:3a:62:16:a6:63:35:
45:56:a9:04:c5:e2:ff:a7:cf:90:24:d1:4c:e0:cb:
51:47:24:8f:1d:fe:e2:08:3c:70:94:6c:cb:56:16:
2b:f8:1e:d2:54:48:ce:f1:36:b2:b4:4c:56:2a:61:
5e:89:6c:af:c3:19:8a:25:cc:c5:5c:8f:bf:8c:58:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:A5:FC:C5:9D:BC:CB:FA:A8:EB:DF:B1:9F:C8:50:E4:8B:15:38
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:46:4e:7a:94:a5:01:cb:18:ee:95:ab:0e:3c:f1:68:c3:59:
3e:2e:26:8a:96:47:5b:18:16:72:ba:60:ea:33:58:59:ba:65:
f7:d3:a7:e6:91:85:5c:2d:e9:6c:0c:87:66:ef:5c:72:17:a6:
20:60:0c:d6:23:50:87:8f:83:79:9a:8e:9f:e1:22:db:08:6f:
3f:5c:5c:43:af:f4:3f:22:32:1a:6e:e2:b2:0a:ff:89:59:bd:
7f:99:0d:90:7d:b2:cd:84:21:81:fe:b7:87:a0:86:d7:2b:3c:
a0:90:74:33:a5:66:e7:51:b9:81:4e:5f:8a:bb:83:81:43:39:
04:0b:50:cb:c6:67:e6:57:dc:6a:02:b2:39:31:6f:6d:ed:55:
b7:53:83:26:4e:5e:71:16:1c:ee:8b:31:27:c8:6c:da:ce:b1:
69:e8:bf:93:0f:1a:7c:b4:e0:2b:99:04:fe:7e:24:e8:6a:81:
ab:af:a2:bc:67:8c:bb:9a:45:75:f3:30:31:7f:12:2b:a8:c7:
ec:ea:a6:4a:ff:28:9c:91:7a:ab:4d:14:91:12:e7:0f:a9:20:
df:51:5d:bb:6b:3f:52:fa:ad:a1:4d:3e:d9:8e:a8:2e:d5:de:
22:97:c3:8a:d2:85:2b:72:e5:d8:25:a0:cc:d4:12:56:78:5f:
93:2f:1a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56WC9Aqi3E3d+F+Hkhtn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOGM0YTQzMDA4MzdjNGVhMTdhZDFlMzgyMWEwOWFkNTM3
NjQwODcwHhcNMjUwNDI4MDEwMDU5WhcNMjUwNDI5MDEwMDU5WjAzMTEwLwYDVQQD
EyhjYWUxYTVmY2M1OWRiY2NiZmFhOGViZGZiMTlmYzg1MGU0OGIxNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPw3Wf2pXC23pJPcIaLT0LgVz90t
5qRvpP2jwEgOPTISUHm8ZfHH+e4JMwlrN/CAD+7R9jqbQLGLzpr5fp4/VYrvHKCp
Eeke4nd52h+9Q7xd5ZYAbtvljMjDQ2jHhvDWi1V4MXsd6YcKO0NzF4WQdsICxhpa
Qxvbito77z8zJYlpZdH1vJGHlf1b6qQLyXy+VH8z61FHqj3Sr4plOGMfgzIcY94i
Nts31Rv4hY5J2q9cJzum5r1ejhcdQRM6YhamYzVFVqkExeL/p8+QJNFM4MtRRySP
Hf7iCDxwlGzLVhYr+B7SVEjO8TaytExWKmFeiWyvwxmKJczFXI+/jFiWrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrhpfzFnbzL+qjr37GfyFDkixU4MB8GA1UdIwQY
MBaAFLGMSkMAg3xOoXrR44IaCa1TdkCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2Mjgt
ZjA4YTBhZTkyYjhkLzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZjRlNGItMjAyNi00YmJiLTk2MjgtZjA4YTBhZTkyYjhk
LzEvc1l4S1F3Q0RmRTZoZXRIamdob0pyVk4yUUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0ZOepSl
AcsY7pWrDjzxaMNZPi4mipZHWxgWcrpg6jNYWbpl99On5pGFXC3pbAyHZu9cchem
IGAM1iNQh4+DeZqOn+Ei2whvP1xcQ6/0PyIyGm7isgr/iVm9f5kNkH2yzYQhgf63
h6CG1ys8oJB0M6Vm51G5gU5firuDgUM5BAtQy8Zn5lfcagKyOTFvbe1Vt1ODJk5e
cRYc7osxJ8hs2s6xaei/kw8afLTgK5kE/n4k6GqBq6+ivGeMu5pFdfMwMX8SK6jH
7OqmSv8onJF6q00UkRLnD6kg31Fdu2s/UvqtoU0+2Y6oLtXeIpfDitKFK3Ll2CWg
zNQSVnhfky8aeg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:42 2025 by rpki-client