Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
File: SScSTZgDp95UiDFko3bqcuPGPq8.mft (raw, json)
Hash identifier: PPBzMKiNUGoENSFXSxQZ8BHQv3CDQ9hxgvrJJwf8U1U=
Subject key identifier: B5:40:09:AD:8C:C4:8B:73:31:12:2F:A9:DF:59:61:29:F1:56:20:76
Authority key identifier: 49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
Certificate issuer: /CN=4927124d9803a7de54883164a376ea72e3c63eaf
Certificate serial: 01968C5D1028423262DF017E460F4E6AEBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
Manifest number: 151E
Signing time: Thu 01 May 2025 15:00:31 +0000
Manifest this update: Thu 01 May 2025 15:00:31 +0000
Manifest next update: Fri 02 May 2025 15:00:31 +0000
Files and hashes: 1: 6-IQUKyeOlnZ0n7k-mpTFfKu5nA.roa (hash: uwqOWT1eD0xXX0n+hN5F7B5Z9MhYA/dYHW/YSlQ6tT8=)
2: OJmLUcdGyKqyreRJA04sZVowZg0.roa (hash: ZPcGNQNPGXt7sqvYIqkF3ZoSuhuiF050QsXqHbGtgGo=)
3: SScSTZgDp95UiDFko3bqcuPGPq8.crl (hash: /ePqk6QNGDt1xlNBcg4+giB4HbehKkBMpmlnQ9RqGiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:5d:10:28:42:32:62:df:01:7e:46:0f:4e:6a:eb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4927124d9803a7de54883164a376ea72e3c63eaf
Validity
Not Before: May 1 15:00:31 2025 GMT
Not After : May 2 15:00:31 2025 GMT
Subject: CN=b54009ad8cc48b7331122fa9df596129f1562076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:bb:1b:fc:32:b6:15:db:40:44:d1:40:7a:
35:63:3a:b7:d5:5e:7a:e4:d2:e9:48:6a:c3:8c:4c:
c7:1b:eb:89:db:25:47:da:62:82:b6:cb:c7:45:1d:
52:db:5a:61:de:07:77:34:b3:d3:44:79:dd:6d:0b:
71:5e:52:d4:e4:e4:c8:2e:01:32:29:1b:d0:4d:af:
c0:93:7a:99:af:b3:32:c9:1d:5b:c3:55:78:a2:01:
ad:f1:91:62:d6:80:ca:98:0a:8e:e0:83:a7:f1:c3:
4a:d4:88:c5:92:60:31:2c:29:c6:77:1a:a2:cf:a7:
45:43:e8:1f:3d:61:7f:4e:a1:d0:63:78:1e:4b:d2:
f4:29:72:fb:1d:56:c4:e3:10:74:1f:35:15:cf:cc:
9e:af:a2:ea:9f:b3:73:1a:98:d6:ea:8b:3c:d7:03:
33:2a:af:29:a3:20:e4:7b:29:30:7a:98:9d:38:47:
1c:ae:92:ae:bb:8b:a8:7e:79:89:07:ab:52:ae:be:
80:ad:d9:33:8b:10:77:92:c8:45:d1:2e:5e:24:e1:
0b:c4:28:f4:80:72:59:f4:58:f6:32:86:e5:68:28:
fa:94:c4:86:e0:7c:c6:63:45:8b:31:01:23:f1:b7:
cb:8b:8f:7d:f0:51:b9:42:8f:2e:14:09:fa:ca:68:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:09:AD:8C:C4:8B:73:31:12:2F:A9:DF:59:61:29:F1:56:20:76
X509v3 Authority Key Identifier:
keyid:49:27:12:4D:98:03:A7:DE:54:88:31:64:A3:76:EA:72:E3:C6:3E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SScSTZgDp95UiDFko3bqcuPGPq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3e2c38-f96f-40df-aeac-f0150c81acf5/1/SScSTZgDp95UiDFko3bqcuPGPq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:fb:48:ca:58:d5:ed:f7:83:b5:35:cc:be:da:b5:48:88:
a7:b7:c4:d4:10:48:39:e3:f9:ae:4b:af:d0:b8:79:45:ec:3a:
a5:33:ce:b3:7f:4c:5d:e2:fb:5f:3d:11:13:e0:19:4e:c0:ad:
e2:d0:49:02:a0:de:59:e8:a8:49:6d:57:ef:b5:b9:1d:0d:b4:
16:46:ba:37:d1:44:e5:f0:8e:19:b7:b1:b4:25:b4:c5:36:d7:
a8:b5:31:eb:83:42:cd:26:7a:a1:7a:e1:8f:28:bf:e5:37:27:
c5:d5:13:7b:da:6b:ec:0c:ad:e0:2f:8c:07:e8:1d:a8:0c:e1:
98:a6:f3:08:b4:e1:dd:91:6e:21:e6:4d:e4:93:fb:51:b0:62:
3c:64:52:49:7a:d9:72:94:a8:5c:ec:19:55:93:4d:af:1f:1e:
01:80:34:11:e0:c5:9d:4e:8c:bf:50:a9:48:26:78:ec:09:e3:
4c:a5:f4:25:ee:4e:bd:6a:b0:c7:55:22:4a:d5:c3:6d:09:64:
ea:43:d5:6f:2c:ac:40:4b:ee:b0:7d:b1:d8:9b:ef:58:e6:6c:
97:9c:3b:36:ab:06:9f:98:50:c4:fb:2f:51:14:73:d6:ef:30:
b4:96:70:93:5e:90:f8:98:f5:9f:85:9b:05:38:07:e2:b2:43:
2e:f7:7b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMXRAoQjJi3wF+Rg9Oauv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjcxMjRkOTgwM2E3ZGU1NDg4MzE2NGEzNzZlYTcyZTNj
NjNlYWYwHhcNMjUwNTAxMTUwMDMxWhcNMjUwNTAyMTUwMDMxWjAzMTEwLwYDVQQD
EyhiNTQwMDlhZDhjYzQ4YjczMzExMjJmYTlkZjU5NjEyOWYxNTYyMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEy7G/wythXbQETRQHo1Yzq31V56
5NLpSGrDjEzHG+uJ2yVH2mKCtsvHRR1S21ph3gd3NLPTRHndbQtxXlLU5OTILgEy
KRvQTa/Ak3qZr7MyyR1bw1V4ogGt8ZFi1oDKmAqO4IOn8cNK1IjFkmAxLCnGdxqi
z6dFQ+gfPWF/TqHQY3geS9L0KXL7HVbE4xB0HzUVz8yer6Lqn7NzGpjW6os81wMz
Kq8poyDkeykwepidOEccrpKuu4uofnmJB6tSrr6ArdkzixB3kshF0S5eJOELxCj0
gHJZ9Fj2MoblaCj6lMSG4HzGY0WLMQEj8bfLi4998FG5Qo8uFAn6ymhAiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVACa2MxItzMRIvqd9ZYSnxViB2MB8GA1UdIwQY
MBaAFEknEk2YA6feVIgxZKN26nLjxj6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMt
ZjAxNTBjODFhY2Y1LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zZTJjMzgtZjk2Zi00MGRmLWFlYWMtZjAxNTBjODFhY2Y1
LzEvU1NjU1RaZ0RwOTVVaURGa28zYnFjdVBHUHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9/7SMpY
1e33g7U1zL7atUiIp7fE1BBIOeP5rkuv0Lh5Rew6pTPOs39MXeL7Xz0RE+AZTsCt
4tBJAqDeWeioSW1X77W5HQ20Fka6N9FE5fCOGbextCW0xTbXqLUx64NCzSZ6oXrh
jyi/5TcnxdUTe9pr7Ayt4C+MB+gdqAzhmKbzCLTh3ZFuIeZN5JP7UbBiPGRSSXrZ
cpSoXOwZVZNNrx8eAYA0EeDFnU6Mv1CpSCZ47AnjTKX0Je5OvWqwx1UiStXDbQlk
6kPVbyysQEvusH2x2JvvWOZsl5w7NqsGn5hQxPsvURRz1u8wtJZwk16Q+Jj1n4Wb
BTgH4rJDLvd73w==
-----END CERTIFICATE-----
Generated at Thu May 1 18:26:29 2025 by rpki-client