Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File: SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier: bRIlw4OwLvFBw/OXhJZqvhwNWALIJO6HXxk+XAIJxVQ=
Subject key identifier: 7D:8E:1E:A8:9D:2F:F3:E2:59:C1:CF:3C:01:E5:91:95:90:19:1F:E4
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 01968623CBF665A7DADF6D5867D54946CE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number: 1228
Signing time: Wed 30 Apr 2025 10:00:14 +0000
Manifest this update: Wed 30 Apr 2025 10:00:14 +0000
Manifest next update: Thu 01 May 2025 10:00:14 +0000
Files and hashes: 1: B8HrelUy9bYGyo-udBZpXQ76dPg.roa (hash: 1JcwupsyhEziaGEtjnyo+5LdSyy6jIrto6vLWzkI9l8=)
2: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: eybBvCJqkrFQXcuLA2fJZokzejq6f6U8K404lO07xv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:23:cb:f6:65:a7:da:df:6d:58:67:d5:49:46:ce:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Apr 30 10:00:14 2025 GMT
Not After : May 1 10:00:14 2025 GMT
Subject: CN=7d8e1ea89d2ff3e259c1cf3c01e5919590191fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:0b:72:68:d4:2f:24:03:3c:fe:71:53:2c:
5a:05:08:e8:87:0d:ad:55:f9:5c:35:92:ac:bb:81:
6e:8f:12:49:0c:d3:df:f1:ae:bc:48:6f:69:b4:22:
c1:bc:90:33:e1:8a:c1:d3:ae:21:ef:51:c1:fc:cc:
0c:74:c5:b9:69:d2:da:2a:63:f9:af:01:ff:bc:2e:
75:9b:aa:b3:2a:e0:ac:03:e7:9e:2a:ec:60:08:b2:
53:4f:66:98:db:c1:5e:a4:09:6f:03:83:29:9e:f6:
2a:0c:4b:3c:ba:7b:3c:16:39:55:33:86:eb:04:03:
d1:bd:b0:38:51:76:64:f8:16:45:ad:6e:7f:d0:ad:
a6:2f:09:ac:cd:d0:2c:f7:67:22:69:b0:f7:47:d3:
39:65:1d:f3:19:62:5d:bb:66:7a:d1:d2:5c:65:15:
0e:26:ad:c4:f0:dd:10:a7:fb:82:dc:72:09:a7:2a:
f0:e3:4c:fa:c0:b0:e1:f9:ba:73:ea:c4:2a:b5:21:
ec:0d:22:d5:7c:30:2f:eb:89:8d:22:41:c6:18:d7:
c1:b8:2d:40:24:d9:6b:84:0a:03:3b:da:f7:b4:97:
50:5f:37:b1:e9:16:fe:57:a7:34:7c:e0:be:eb:a3:
1c:b1:5f:d5:98:bb:08:ef:dd:fc:47:20:7f:e1:bd:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:1E:A8:9D:2F:F3:E2:59:C1:CF:3C:01:E5:91:95:90:19:1F:E4
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:08:56:0e:e9:4a:ed:16:66:b7:1d:d0:8b:70:84:d6:1c:c0:
f3:50:3e:7c:ca:7c:d3:58:75:61:68:e1:a2:17:b3:58:34:94:
fb:6a:41:b6:52:b5:36:44:df:52:0f:87:db:c1:c6:80:bf:52:
2a:37:9e:da:81:c8:f6:cb:8f:e2:6a:9f:65:a2:e4:26:55:4e:
da:60:99:1a:2f:6d:25:2a:b7:6b:e8:10:26:40:4c:85:fe:f4:
31:79:24:f3:88:a5:00:65:07:4c:32:35:d0:05:90:5d:4f:27:
4d:a9:e1:4c:e6:7d:f0:2a:ce:06:0c:88:54:57:0a:6e:fd:6c:
64:f8:ad:e2:61:c4:3d:1c:4d:6a:dc:12:11:aa:26:87:e8:94:
e6:b5:85:c4:de:b0:b0:8b:57:e6:6d:73:75:53:21:3d:21:9c:
1f:97:92:c1:93:50:63:bc:e5:c7:2a:db:2b:43:60:32:a9:ed:
62:78:39:79:7e:97:9e:35:97:5f:5f:71:ac:cd:09:c6:2c:26:
4f:f0:0f:35:31:0e:34:24:e6:e3:98:3a:37:66:96:ee:f4:90:
65:d1:1e:ed:f9:c5:59:71:ed:f3:95:b8:b1:d4:c9:6b:b6:a2:
09:a0:f9:c7:f0:4c:f2:6b:2b:73:c1:6e:35:7c:04:2a:d6:c3:
7a:12:8f:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaGI8v2Zafa321YZ9VJRs4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy
MjcxM2IwHhcNMjUwNDMwMTAwMDE0WhcNMjUwNTAxMTAwMDE0WjAzMTEwLwYDVQQD
Eyg3ZDhlMWVhODlkMmZmM2UyNTljMWNmM2MwMWU1OTE5NTkwMTkxZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE0LcmjULyQDPP5xUyxaBQjohw2t
VflcNZKsu4FujxJJDNPf8a68SG9ptCLBvJAz4YrB064h71HB/MwMdMW5adLaKmP5
rwH/vC51m6qzKuCsA+eeKuxgCLJTT2aY28FepAlvA4MpnvYqDEs8uns8FjlVM4br
BAPRvbA4UXZk+BZFrW5/0K2mLwmszdAs92ciabD3R9M5ZR3zGWJdu2Z60dJcZRUO
Jq3E8N0Qp/uC3HIJpyrw40z6wLDh+bpz6sQqtSHsDSLVfDAv64mNIkHGGNfBuC1A
JNlrhAoDO9r3tJdQXzex6Rb+V6c0fOC+66McsV/VmLsI7938RyB/4b2pzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2OHqidL/PiWcHPPAHlkZWQGR/kMB8GA1UdIwQY
MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt
ZTE4ZTdiMmFjNTM2LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2
LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAhWDulK
7RZmtx3Qi3CE1hzA81A+fMp801h1YWjhohezWDSU+2pBtlK1NkTfUg+H28HGgL9S
Kjee2oHI9suP4mqfZaLkJlVO2mCZGi9tJSq3a+gQJkBMhf70MXkk84ilAGUHTDI1
0AWQXU8nTanhTOZ98CrOBgyIVFcKbv1sZPit4mHEPRxNatwSEaomh+iU5rWFxN6w
sItX5m1zdVMhPSGcH5eSwZNQY7zlxyrbK0NgMqntYng5eX6XnjWXX19xrM0Jxiwm
T/APNTEONCTm45g6N2aW7vSQZdEe7fnFWXHt85W4sdTJa7aiCaD5x/BM8msrc8Fu
NXwEKtbDehKPLA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:55:15 2025 by rpki-client