Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft (raw, json)
Hash identifier: KDFNl3vQgf4ssk4EQPkkFgDMIe8lRmkDur5C+xGMPoc=
Subject key identifier: 99:13:0D:38:DB:F4:8E:01:AE:B9:C8:B5:85:76:D5:6C:4C:3D:4B:7A
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 019674FA319FAE52DA153213FDFFD20AF11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
Manifest number: 0BD7
Signing time: Sun 27 Apr 2025 02:01:15 +0000
Manifest this update: Sun 27 Apr 2025 02:01:15 +0000
Manifest next update: Mon 28 Apr 2025 02:01:15 +0000
Files and hashes: 1: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (hash: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=)
2: C7MhaPZbslU0VnJ9f8aWGwMPQ1s.roa (hash: N2sOMWlDByUi7A5K2JVccMDH9oIH2ZkyI/wL4WYAlVY=)
3: sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl (hash: XxYtr2DvvDV2tJ6fXh5Tsq8lP4vNFpzp9K0kRLRyrPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:31:9f:ae:52:da:15:32:13:fd:ff:d2:0a:f1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Apr 27 02:01:15 2025 GMT
Not After : Apr 28 02:01:15 2025 GMT
Subject: CN=99130d38dbf48e01aeb9c8b58576d56c4c3d4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:3a:17:52:70:56:13:fc:40:c2:0f:c1:fb:
c8:02:69:e0:4d:ac:3b:5c:1f:33:23:90:f1:eb:84:
ff:37:a0:bc:b1:ac:87:7e:ad:db:da:e0:4b:4a:12:
6c:60:a1:07:de:bd:2a:cf:80:f1:b6:20:20:98:91:
8a:56:c2:ed:0c:52:79:59:aa:a5:ef:3f:92:33:7d:
9b:0f:90:16:ae:fc:df:60:e6:3a:03:f7:06:42:7f:
40:f1:5f:ee:d5:c9:df:c8:30:4c:5a:8d:c7:e0:e6:
00:53:9d:2b:25:c7:bf:a9:03:87:d2:25:56:2e:5e:
c6:3b:b3:01:4b:01:5a:7f:e1:ae:e4:60:72:6a:55:
84:ee:fa:4a:d1:11:d6:5b:13:66:51:c8:03:96:1f:
3b:c2:c2:c1:26:db:31:c9:59:32:81:56:8b:15:6e:
ed:19:0c:9f:db:aa:d5:24:7f:53:a2:c0:8d:f7:7b:
98:31:98:d4:c1:78:e8:70:19:7c:61:ee:01:46:d7:
9d:25:29:c3:9d:85:3b:ed:08:63:d2:20:a9:92:ef:
79:1c:c1:9b:c9:d8:a0:d6:f6:6a:62:c3:b7:ef:2c:
58:10:a3:d2:cd:e3:8b:97:36:47:3e:a5:8e:ae:51:
c1:43:eb:a5:4b:fb:42:8d:d2:ed:c5:81:25:00:ad:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:13:0D:38:DB:F4:8E:01:AE:B9:C8:B5:85:76:D5:6C:4C:3D:4B:7A
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7c:7d:6a:ff:ff:d1:19:de:97:88:e0:9f:3f:ab:e7:26:45:
86:74:42:11:cc:88:39:c2:68:77:a9:a5:8a:74:1f:c0:94:20:
31:2a:e4:1e:27:bb:92:1a:1d:e6:d0:22:51:b3:c3:27:18:a6:
7f:a6:20:e2:87:84:a3:2a:61:6e:f0:13:d9:5b:64:78:72:45:
a9:6b:28:77:8e:e8:c5:c5:e6:85:f4:f9:c1:33:a8:5a:ea:cb:
b8:36:90:33:f3:72:7b:dc:22:12:6a:bb:fa:d3:3b:72:7f:74:
35:1c:de:93:d3:62:a4:cd:79:9a:10:bf:55:20:16:b4:36:6a:
69:14:3a:fc:8c:cd:2f:e0:22:65:4b:a1:1d:a5:f1:c5:71:45:
30:bc:13:36:76:25:15:7c:22:8d:17:b8:f7:ca:94:98:ba:f3:
fb:0b:fb:65:12:ac:e7:41:b9:53:c5:34:a0:7d:fa:5d:79:13:
f1:fa:6a:5a:a0:74:56:bf:fd:aa:55:a1:84:06:c5:d7:ef:0f:
c0:85:15:3d:01:a1:5a:28:83:1c:ee:20:2d:fd:f2:ab:d1:8d:
65:eb:45:c5:29:a7:16:44:e1:79:30:7c:41:e6:e9:1f:2a:aa:
05:1f:7e:34:14:c4:6b:aa:95:48:ba:51:33:8b:d1:13:a1:d6:
b9:a2:7b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+jGfrlLaFTIT/f/SCvEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2FiOTIyNTY1ZTJiM2UyY2M2M2Q0ODVhNTVkZDRmYzQx
ZDM1N2UwHhcNMjUwNDI3MDIwMTE1WhcNMjUwNDI4MDIwMTE1WjAzMTEwLwYDVQQD
Eyg5OTEzMGQzOGRiZjQ4ZTAxYWViOWM4YjU4NTc2ZDU2YzRjM2Q0YjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl86F1JwVhP8QMIPwfvIAmngTaw7
XB8zI5Dx64T/N6C8sayHfq3b2uBLShJsYKEH3r0qz4DxtiAgmJGKVsLtDFJ5Waql
7z+SM32bD5AWrvzfYOY6A/cGQn9A8V/u1cnfyDBMWo3H4OYAU50rJce/qQOH0iVW
Ll7GO7MBSwFaf+Gu5GByalWE7vpK0RHWWxNmUcgDlh87wsLBJtsxyVkygVaLFW7t
GQyf26rVJH9TosCN93uYMZjUwXjocBl8Ye4BRtedJSnDnYU77Qhj0iCpku95HMGb
ydig1vZqYsO37yxYEKPSzeOLlzZHPqWOrlHBQ+ulS/tCjdLtxYElAK1mQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkTDTjb9I4BrrnItYV21WxMPUt6MB8GA1UdIwQY
MBaAFLB6uSJWXis+LMY9SFpV3U/EHTV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUt
MTNiY2M3NTIxMTlhLzEvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82ZDU5ZDktOWRhZi00ZmNiLThkMDUtMTNiY2M3NTIxMTlh
LzEvc0hxNUlsWmVLejRzeGoxSVdsWGRUOFFkTlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXx9av//
0Rnel4jgnz+r5yZFhnRCEcyIOcJod6mlinQfwJQgMSrkHie7khod5tAiUbPDJxim
f6Yg4oeEoyphbvAT2VtkeHJFqWsod47oxcXmhfT5wTOoWurLuDaQM/Nye9wiEmq7
+tM7cn90NRzek9NipM15mhC/VSAWtDZqaRQ6/IzNL+AiZUuhHaXxxXFFMLwTNnYl
FXwijRe498qUmLrz+wv7ZRKs50G5U8U0oH36XXkT8fpqWqB0Vr/9qlWhhAbF1+8P
wIUVPQGhWiiDHO4gLf3yq9GNZetFxSmnFkTheTB8QebpHyqqBR9+NBTEa6qVSLpR
M4vRE6HWuaJ7GQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:24:07 2025 by rpki-client