Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: uwDMZZCHZwzLS9nsgbDbsOLl+GO23CuG92CRJnSTwF0=
Subject key identifier: C1:70:35:C8:04:87:AB:BB:DD:C2:E3:73:58:4D:FD:09:2F:5C:17:E5
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 019684DA996A7CF9FB819D13306F3D91FBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 04:00:40 +0000
Manifest this update: Wed 30 Apr 2025 04:00:40 +0000
Manifest next update: Thu 01 May 2025 04:00:40 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: edkJSJ+dc1ic+TJLJtH5fPCTqmquTXTJJLLKOMoW+RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:99:6a:7c:f9:fb:81:9d:13:30:6f:3d:91:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Apr 30 04:00:40 2025 GMT
Not After : May 1 04:00:40 2025 GMT
Subject: CN=c17035c80487abbbddc2e373584dfd092f5c17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:14:1c:1c:dc:d5:2e:f2:80:06:fa:53:c3:aa:
46:55:6d:b1:db:c6:1e:83:65:e3:13:a2:63:68:ed:
1d:36:b8:7f:70:53:8f:1f:f8:fd:79:43:1d:4c:0a:
52:46:58:82:0e:9c:a0:0c:8b:be:f1:71:cd:58:6b:
dd:0b:5d:e6:a6:e7:cf:cf:50:a7:fd:33:47:37:a3:
91:09:b3:b0:05:ef:5b:4b:ea:9f:bd:3f:cd:00:77:
2e:9c:f6:15:0f:01:36:27:ea:08:f9:c6:09:98:72:
34:00:d0:66:93:6b:66:29:ce:d1:33:00:05:4b:15:
71:49:9f:1b:d6:c4:cd:75:39:ea:23:40:dc:85:6f:
3c:60:2e:48:b2:72:ff:e1:61:fe:d2:61:74:4a:e6:
42:ed:33:32:25:09:25:ae:25:cc:15:19:24:19:8b:
b3:8a:a7:a2:1b:96:44:f5:13:cf:4f:2f:97:85:91:
17:d4:19:ac:9d:6a:1e:2f:5f:31:ce:27:6d:52:28:
f2:06:c0:96:2c:2e:f1:fe:0c:8c:80:d5:0d:6b:1f:
51:dd:37:df:dc:02:89:7f:af:29:d6:3e:f4:6f:6b:
8a:dc:71:af:a0:61:f3:61:d0:2f:1e:5e:6a:34:7f:
8d:fd:eb:b1:b1:2c:d5:0d:05:94:3a:f6:66:6e:4d:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:70:35:C8:04:87:AB:BB:DD:C2:E3:73:58:4D:FD:09:2F:5C:17:E5
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:67:5c:81:01:a3:a3:4f:32:3b:97:80:66:e7:e9:9b:a7:
f6:eb:29:21:b5:8f:79:45:1b:93:4d:b5:c8:39:7b:7f:c5:43:
d9:17:55:0e:64:0e:34:fa:5d:a2:19:41:67:e3:8b:36:05:d8:
70:33:a9:fd:9b:a0:b8:5e:9c:fb:d9:d3:0b:d6:42:43:a8:f8:
71:f0:2c:e1:31:2b:14:fc:86:30:27:9a:4f:3e:9a:b0:69:b4:
65:1d:bf:61:02:5a:09:f6:41:b7:f7:ab:9c:80:74:9e:41:70:
d0:a5:95:d5:a4:4b:4e:e9:01:c5:94:a6:89:37:61:59:99:6c:
62:dd:10:29:94:6a:6c:66:e8:62:ad:f6:ec:68:0c:c9:05:7d:
04:56:f7:b7:e2:50:9a:ef:4c:8a:03:04:0a:c6:61:7d:04:dd:
e8:a8:a1:77:73:c6:d1:38:c5:c1:d6:a6:70:51:27:74:d8:c7:
7c:6a:e4:0a:f1:1a:ee:2b:ed:8c:9e:4d:3c:a7:f1:5b:4c:9c:
4b:1a:ae:ff:ae:5c:af:ea:92:7e:d8:72:d0:5e:d1:45:ab:bf:
5d:da:55:92:0e:35:3e:23:0e:fb:be:21:3a:75:82:3e:74:eb:
1f:49:c7:bf:8b:cd:52:54:2b:40:bb:ad:57:24:14:05:24:60:
e6:eb:3a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2plqfPn7gZ0TMG89kfvaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZmVkYjUwMDk1MjZmMGM2YmFkNDIzZjAwY2RhMDhhMDkz
M2I3OGIwHhcNMjUwNDMwMDQwMDQwWhcNMjUwNTAxMDQwMDQwWjAzMTEwLwYDVQQD
EyhjMTcwMzVjODA0ODdhYmJiZGRjMmUzNzM1ODRkZmQwOTJmNWMxN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xQcHNzVLvKABvpTw6pGVW2x28Ye
g2XjE6JjaO0dNrh/cFOPH/j9eUMdTApSRliCDpygDIu+8XHNWGvdC13mpufPz1Cn
/TNHN6ORCbOwBe9bS+qfvT/NAHcunPYVDwE2J+oI+cYJmHI0ANBmk2tmKc7RMwAF
SxVxSZ8b1sTNdTnqI0DchW88YC5IsnL/4WH+0mF0SuZC7TMyJQklriXMFRkkGYuz
iqeiG5ZE9RPPTy+XhZEX1BmsnWoeL18xzidtUijyBsCWLC7x/gyMgNUNax9R3Tff
3AKJf68p1j70b2uK3HGvoGHzYdAvHl5qNH+N/euxsSzVDQWUOvZmbk1l7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFwNcgEh6u73cLjc1hN/QkvXBflMB8GA1UdIwQY
MBaAFLP+21AJUm8Ma61CPwDNoIoJM7eLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYt
YWQwOTUzZjdmZDQ5LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNWNlZGMtYmY2MS00Y2JjLWFiMzYtYWQwOTUzZjdmZDQ5
LzEvc183YlVBbFNid3hyclVJX0FNMmdpZ2t6dDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr9nXIEB
o6NPMjuXgGbn6Zun9uspIbWPeUUbk021yDl7f8VD2RdVDmQONPpdohlBZ+OLNgXY
cDOp/ZuguF6c+9nTC9ZCQ6j4cfAs4TErFPyGMCeaTz6asGm0ZR2/YQJaCfZBt/er
nIB0nkFw0KWV1aRLTukBxZSmiTdhWZlsYt0QKZRqbGboYq327GgMyQV9BFb3t+JQ
mu9MigMECsZhfQTd6Kihd3PG0TjFwdamcFEndNjHfGrkCvEa7ivtjJ5NPKfxW0yc
Sxqu/65cr+qSfthy0F7RRau/XdpVkg41PiMO+74hOnWCPnTrH0nHv4vNUlQrQLut
VyQUBSRg5us63Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:24 2025 by rpki-client