Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: +wMoRVwbukhD2XcRBItH+bdpY9D9MYOKaoTueQ9ZZ5Y=
Subject key identifier: B3:E2:CF:0C:D0:04:49:59:34:AF:BB:26:70:9B:B3:D5:88:FC:C4:49
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 01968436003F114297BA391C77A4FEDAE7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 01:00:53 +0000
Manifest this update: Wed 30 Apr 2025 01:00:53 +0000
Manifest next update: Thu 01 May 2025 01:00:53 +0000
Files and hashes: 1: NxzgzrcAsHWy0jDkGocEc3A82GY.roa (hash: 49MMg/vk9brRgJNoRcoYkHau0scqC/ahxGjMTh7J3YU=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: JcHthrWGT1Svw0L4XBjyUEPB/Z5Mi1L0Nwrs1Jpn4OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:36:00:3f:11:42:97:ba:39:1c:77:a4:fe:da:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Apr 30 01:00:53 2025 GMT
Not After : May 1 01:00:53 2025 GMT
Subject: CN=b3e2cf0cd004495934afbb26709bb3d588fcc449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:f4:c8:73:f2:eb:5a:4f:24:63:ff:75:6d:
61:ad:b1:39:ac:df:b7:f6:aa:41:27:03:2e:3c:d2:
87:d8:49:3f:df:6f:e6:b4:ca:8a:10:a4:87:80:eb:
32:7e:41:8e:8a:1a:0a:40:27:1c:f3:d1:d0:dc:e7:
0a:f5:cd:f1:b3:41:61:5e:82:79:fe:2d:58:4a:10:
77:2f:15:90:f7:ce:c2:db:90:7b:93:a8:7e:d9:8f:
c9:00:e2:bd:10:09:4d:54:89:45:db:ca:47:91:3b:
0e:e5:b2:ab:42:ad:59:21:6c:76:f7:65:d3:8e:c7:
d1:66:f9:c0:e8:08:32:79:2a:18:cd:3f:35:c7:0e:
ce:54:64:3b:50:34:23:e5:f6:64:99:03:47:76:cd:
62:97:3a:82:21:47:6e:4e:38:6a:f1:e6:8b:b1:a8:
7f:6d:69:4e:e1:99:24:c6:a4:da:ab:43:6e:8b:37:
ed:ea:15:07:f5:22:0e:cb:a0:04:0a:44:79:02:16:
25:ab:d2:dc:98:77:0e:af:dc:92:29:09:68:0d:b9:
ec:f4:3e:3c:ce:9f:f4:23:64:26:21:78:60:3d:65:
96:b2:59:65:b7:1b:98:43:80:2c:52:73:81:46:04:
a6:96:03:e8:61:0b:f2:b2:af:f9:3e:91:56:af:dc:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:CF:0C:D0:04:49:59:34:AF:BB:26:70:9B:B3:D5:88:FC:C4:49
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:01:eb:1b:59:ec:ba:cf:70:7c:b0:15:68:8c:72:34:0d:
7d:e3:1f:4b:b9:6d:bb:4e:84:b2:fd:e7:2f:81:92:65:2f:a3:
f9:fa:fd:95:59:98:3b:ca:5b:27:7b:e7:34:38:fe:11:61:7c:
f9:61:23:3d:b4:7a:76:eb:b7:a8:f3:be:27:e8:85:7d:5a:5d:
71:f3:8b:16:1a:58:a1:32:f4:ae:93:2e:74:34:c9:0e:51:f7:
30:19:af:2c:70:52:b2:4e:f7:60:8c:74:4f:ba:7b:7c:f8:bd:
9f:eb:5b:6d:25:05:1c:26:d7:41:d7:cc:96:cb:85:20:52:be:
e5:7f:41:03:d0:11:b1:43:33:bb:06:58:03:31:b5:a6:c0:92:
81:5a:1e:8f:57:aa:be:50:39:50:23:ef:7b:0c:f3:b6:d6:ce:
c3:74:01:d5:45:45:36:a4:2c:55:74:e8:0d:aa:e5:5b:92:40:
29:73:28:02:da:5d:a1:38:03:90:53:7f:4e:2e:90:78:7a:42:
a9:cc:a9:3c:a2:91:65:b8:bc:24:3c:e1:f8:ab:ba:09:c5:3b:
2b:05:86:e3:23:e3:40:8a:e6:a6:b6:ac:a4:f0:89:af:a1:36:
a7:38:46:4d:ce:99:3e:0b:13:ba:df:17:8b:d0:8f:de:2d:eb:
57:ce:6f:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENgA/EUKXujkcd6T+2ufcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMTEwMjIxODdlMzM5NWExNTI0ZmExYTc1NDFlYTc5MzI4
NWFmYzIwHhcNMjUwNDMwMDEwMDUzWhcNMjUwNTAxMDEwMDUzWjAzMTEwLwYDVQQD
EyhiM2UyY2YwY2QwMDQ0OTU5MzRhZmJiMjY3MDliYjNkNTg4ZmNjNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xL0yHPy61pPJGP/dW1hrbE5rN+3
9qpBJwMuPNKH2Ek/32/mtMqKEKSHgOsyfkGOihoKQCcc89HQ3OcK9c3xs0FhXoJ5
/i1YShB3LxWQ987C25B7k6h+2Y/JAOK9EAlNVIlF28pHkTsO5bKrQq1ZIWx292XT
jsfRZvnA6AgyeSoYzT81xw7OVGQ7UDQj5fZkmQNHds1ilzqCIUduTjhq8eaLsah/
bWlO4ZkkxqTaq0Nuizft6hUH9SIOy6AECkR5AhYlq9LcmHcOr9ySKQloDbns9D48
zp/0I2QmIXhgPWWWsllltxuYQ4AsUnOBRgSmlgPoYQvysq/5PpFWr9wYDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPizwzQBElZNK+7JnCbs9WI/MRJMB8GA1UdIwQY
MBaAFLARAiGH4zlaFST6GnVB6nkyha/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAt
NTMzNGU2YjhjNWZlLzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOGJiZDItMTM2MS00MWEzLTkwZjAtNTMzNGU2YjhjNWZl
LzEvc0JFQ0lZZmpPVm9WSlBvYWRVSHFlVEtGcjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRsB6xtZ
7LrPcHywFWiMcjQNfeMfS7ltu06Esv3nL4GSZS+j+fr9lVmYO8pbJ3vnNDj+EWF8
+WEjPbR6duu3qPO+J+iFfVpdcfOLFhpYoTL0rpMudDTJDlH3MBmvLHBSsk73YIx0
T7p7fPi9n+tbbSUFHCbXQdfMlsuFIFK+5X9BA9ARsUMzuwZYAzG1psCSgVoej1eq
vlA5UCPvewzzttbOw3QB1UVFNqQsVXToDarlW5JAKXMoAtpdoTgDkFN/Ti6QeHpC
qcypPKKRZbi8JDzh+Ku6CcU7KwWG4yPjQIrmpraspPCJr6E2pzhGTc6ZPgsTut8X
i9CP3i3rV85vLA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:39:46 2025 by rpki-client