Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: xyUOJRzvGV5jcTZkk4DJKPNC9bV/GrU2F9ygFzZ7s2s=
Subject key identifier: CE:99:3E:07:D0:B8:21:57:5E:57:DC:4A:8E:2F:99:84:5C:FA:A0:70
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 01967A1FB14D37F685055DFAB36CC73A7ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 02E1
Signing time: Mon 28 Apr 2025 02:00:19 +0000
Manifest this update: Mon 28 Apr 2025 02:00:19 +0000
Manifest next update: Tue 29 Apr 2025 02:00:19 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: iu8VfVvuNQuMAc8+gnuU3GXr5KGGA+Nfg+qRx8BzLjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:b1:4d:37:f6:85:05:5d:fa:b3:6c:c7:3a:7a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Apr 28 02:00:19 2025 GMT
Not After : Apr 29 02:00:19 2025 GMT
Subject: CN=ce993e07d0b821575e57dc4a8e2f99845cfaa070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:af:1d:6a:29:38:5a:cc:f1:eb:f9:64:a2:
c4:e0:c0:d7:a9:06:2b:ac:ea:8e:1d:63:cd:8b:64:
09:6c:76:85:3c:f8:05:bf:d8:c2:d1:9b:eb:2d:02:
68:ef:0b:9a:cc:e5:f6:bb:39:9f:6b:92:7f:48:ef:
29:70:c4:49:97:fb:7a:f6:57:b8:1b:ed:69:8f:c3:
04:47:1d:4e:e0:f9:4a:47:d0:2f:27:b0:60:df:b7:
8b:2a:29:ec:f2:49:e9:4c:22:2a:98:db:26:29:a9:
6f:94:77:62:aa:82:22:7e:8b:04:a5:c4:0b:1f:b1:
df:70:5e:3a:a4:9a:34:ac:01:ab:5d:8d:75:04:45:
e5:aa:5f:04:55:f1:bd:dc:9a:93:06:3c:fb:3a:b1:
17:a1:62:72:71:ee:cd:b3:86:48:f2:ff:75:0a:a3:
24:4c:41:32:5f:49:a2:c2:09:fa:b1:03:5a:81:bb:
63:07:ea:ed:b2:93:f5:27:78:65:18:78:a1:dc:c1:
90:a7:ea:7e:b9:b7:7c:a0:ec:5e:95:73:3d:c0:a8:
95:04:ad:32:25:ca:f6:40:6f:47:25:19:d5:2b:80:
11:5c:80:e0:98:e8:ad:4d:cf:2f:2d:56:41:f3:33:
69:e3:08:84:7b:e2:80:e9:f4:61:36:63:f0:b9:99:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:3E:07:D0:B8:21:57:5E:57:DC:4A:8E:2F:99:84:5C:FA:A0:70
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:eb:4f:25:c7:a9:5a:47:85:e0:3a:fa:9b:5d:26:71:60:44:
41:78:8f:07:2d:e5:d5:fb:7f:5f:f1:62:ee:ab:9c:e9:a6:39:
af:09:6b:36:4a:b5:39:e5:10:4f:d5:16:17:49:c1:28:bb:a6:
de:84:91:fe:74:fe:c5:b8:e6:8f:1d:e3:a7:2c:f4:28:96:9e:
c0:f0:5c:8b:63:b1:5f:27:0e:a4:97:69:9b:66:fd:1d:71:15:
67:5c:39:81:58:6d:93:21:1e:0d:2c:a4:39:0f:73:a6:12:f2:
13:ae:a0:62:d6:be:b7:0b:f4:c1:e1:4f:ee:3b:70:dd:e8:19:
ad:a0:3c:91:57:5e:bc:33:05:62:f4:c9:7c:74:5d:b5:e3:11:
96:14:fa:e8:d9:31:08:3a:28:09:61:2e:e1:3c:63:2d:4b:46:
b1:97:5d:e4:24:c9:f5:74:b7:a9:6d:2a:ea:e0:da:de:92:a3:
50:40:76:f9:f7:c8:3e:ca:73:f8:2a:85:cb:3c:56:8a:39:1c:
e5:ec:92:f5:9b:55:81:37:15:d2:6b:a0:e3:2e:9d:72:61:bb:
db:1f:dc:f1:f1:53:20:f6:b6:f6:17:d1:b1:4c:18:55:d2:84:
04:3a:e4:0c:78:a7:6a:66:db:bc:e9:24:8d:8e:5a:a8:cf:e0:
ea:8f:05:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6H7FNN/aFBV36s2zHOnq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw
YWI2MzkwHhcNMjUwNDI4MDIwMDE5WhcNMjUwNDI5MDIwMDE5WjAzMTEwLwYDVQQD
EyhjZTk5M2UwN2QwYjgyMTU3NWU1N2RjNGE4ZTJmOTk4NDVjZmFhMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweCvHWopOFrM8ev5ZKLE4MDXqQYr
rOqOHWPNi2QJbHaFPPgFv9jC0ZvrLQJo7wuazOX2uzmfa5J/SO8pcMRJl/t69le4
G+1pj8MERx1O4PlKR9AvJ7Bg37eLKins8knpTCIqmNsmKalvlHdiqoIifosEpcQL
H7HfcF46pJo0rAGrXY11BEXlql8EVfG93JqTBjz7OrEXoWJyce7Ns4ZI8v91CqMk
TEEyX0miwgn6sQNagbtjB+rtspP1J3hlGHih3MGQp+p+ubd8oOxelXM9wKiVBK0y
Jcr2QG9HJRnVK4ARXIDgmOitTc8vLVZB8zNp4wiEe+KA6fRhNmPwuZnJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6ZPgfQuCFXXlfcSo4vmYRc+qBwMB8GA1UdIwQY
MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt
ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz
LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+tPJcep
WkeF4Dr6m10mcWBEQXiPBy3l1ft/X/Fi7quc6aY5rwlrNkq1OeUQT9UWF0nBKLum
3oSR/nT+xbjmjx3jpyz0KJaewPBci2OxXycOpJdpm2b9HXEVZ1w5gVhtkyEeDSyk
OQ9zphLyE66gYta+twv0weFP7jtw3egZraA8kVdevDMFYvTJfHRdteMRlhT66Nkx
CDooCWEu4TxjLUtGsZdd5CTJ9XS3qW0q6uDa3pKjUEB2+ffIPspz+CqFyzxWijkc
5eyS9ZtVgTcV0mug4y6dcmG72x/c8fFTIPa29hfRsUwYVdKEBDrkDHinambbvOkk
jY5aqM/g6o8FOw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:03:14 2025 by rpki-client