Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: Cl0Mo7ULAsmLPTzvaaPgiq2M26s7PDazpxj7se5Hkrk=
Subject key identifier: 5F:06:53:85:12:56:C7:A7:0A:D3:AF:4E:3A:8C:07:F8:8B:1B:55:B1
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 0196729D991F0C84E30FD90B6694C9454215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 15:00:53 +0000
Manifest this update: Sat 26 Apr 2025 15:00:53 +0000
Manifest next update: Sun 27 Apr 2025 15:00:53 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: RkibD6x/oRliREdd5xL4mBTucKrVm39BJZg+x5hCsW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:99:1f:0c:84:e3:0f:d9:0b:66:94:c9:45:42:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Apr 26 15:00:53 2025 GMT
Not After : Apr 27 15:00:53 2025 GMT
Subject: CN=5f0653851256c7a70ad3af4e3a8c07f88b1b55b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:46:b9:79:d4:e4:6d:db:85:8f:37:60:17:
68:ed:5c:2c:1f:39:79:a2:05:02:0c:35:25:59:7c:
bf:f9:ad:44:64:34:f9:56:74:d1:3e:00:81:75:0c:
bb:b4:fc:91:fc:17:e2:18:28:76:ea:cc:d6:a5:64:
56:d3:f0:f4:67:f7:48:67:bf:c3:54:c4:2d:76:f9:
2a:b7:07:d9:01:10:de:20:d8:60:b0:62:82:f7:b5:
7a:15:74:bc:55:75:89:39:42:23:8b:bc:00:55:12:
d8:79:a5:0e:22:f8:ab:79:c6:2a:62:3d:18:40:37:
0a:57:6e:d8:7c:3c:34:4e:12:b4:89:66:42:24:5a:
b6:d7:fd:ce:b4:4f:07:df:22:86:51:25:fe:64:6c:
f6:ca:53:69:8a:a1:95:a1:85:90:f2:8e:06:b3:c5:
02:cb:c8:2e:f7:c2:e7:28:2a:68:9b:7e:5b:d3:3c:
85:a7:f5:52:54:06:98:3a:95:47:59:7b:cd:a2:f0:
d5:e9:69:d0:d4:50:60:b4:47:34:21:3e:cc:34:48:
83:b5:a0:ee:18:7e:9d:38:34:fd:3b:02:65:9b:f3:
e5:ee:06:fe:75:40:f8:8e:83:33:0d:b4:66:09:a7:
16:e3:53:0a:ff:7e:f1:63:65:f2:c1:1f:88:33:6e:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:53:85:12:56:C7:A7:0A:D3:AF:4E:3A:8C:07:F8:8B:1B:55:B1
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:34:12:61:60:d4:13:09:86:b3:49:12:79:e3:96:54:f8:88:
3e:cb:05:46:21:22:58:3b:81:fa:cd:b9:ca:f0:4e:4d:80:cc:
1f:d6:cc:cf:63:65:22:25:a8:41:14:eb:c6:b9:6a:52:00:ce:
8a:46:79:2b:87:50:09:0d:25:fa:96:8d:41:18:02:16:8d:3d:
24:42:d1:be:f0:d9:02:e4:6e:0e:33:b9:0a:dd:7e:82:c6:73:
d1:60:8d:f9:56:f0:ae:55:7d:ae:ce:99:9d:52:b6:80:f8:9e:
39:03:13:15:41:0e:1d:dd:b2:c0:3a:ef:b0:bd:68:8f:8d:f8:
5c:f9:66:c8:29:7c:f4:fa:0b:38:f6:0f:7b:8c:e6:1d:a5:94:
9a:b7:e9:b7:d7:81:ae:fd:ed:37:46:28:c4:8f:15:04:d5:c4:
26:87:3a:b6:14:80:8a:29:a0:1e:db:43:85:1f:21:b7:47:cc:
e0:43:e4:e8:43:2f:58:0a:92:e1:a1:10:fa:a2:c6:98:35:64:
e2:93:2c:60:52:e2:59:54:8b:7c:6c:19:f5:a9:22:f1:bf:da:
89:8b:7e:c9:fe:97:c6:0b:58:54:db:f6:e7:d3:6f:ff:4b:0c:
88:86:a1:a9:43:a9:c8:7b:33:03:35:08:7b:96:1d:35:d7:42:
cd:1a:8f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynZkfDITjD9kLZpTJRUIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh
ZjgyOTAwHhcNMjUwNDI2MTUwMDUzWhcNMjUwNDI3MTUwMDUzWjAzMTEwLwYDVQQD
Eyg1ZjA2NTM4NTEyNTZjN2E3MGFkM2FmNGUzYThjMDdmODhiMWI1NWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncBGuXnU5G3bhY83YBdo7VwsHzl5
ogUCDDUlWXy/+a1EZDT5VnTRPgCBdQy7tPyR/BfiGCh26szWpWRW0/D0Z/dIZ7/D
VMQtdvkqtwfZARDeINhgsGKC97V6FXS8VXWJOUIji7wAVRLYeaUOIvirecYqYj0Y
QDcKV27YfDw0ThK0iWZCJFq21/3OtE8H3yKGUSX+ZGz2ylNpiqGVoYWQ8o4Gs8UC
y8gu98LnKCpom35b0zyFp/VSVAaYOpVHWXvNovDV6WnQ1FBgtEc0IT7MNEiDtaDu
GH6dODT9OwJlm/Pl7gb+dUD4joMzDbRmCacW41MK/37xY2XywR+IM24xIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8GU4USVsenCtOvTjqMB/iLG1WxMB8GA1UdIwQY
MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt
NDZiNDZmYzBlNDk2LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2
LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTQSYWDU
EwmGs0kSeeOWVPiIPssFRiEiWDuB+s25yvBOTYDMH9bMz2NlIiWoQRTrxrlqUgDO
ikZ5K4dQCQ0l+paNQRgCFo09JELRvvDZAuRuDjO5Ct1+gsZz0WCN+VbwrlV9rs6Z
nVK2gPieOQMTFUEOHd2ywDrvsL1oj434XPlmyCl89PoLOPYPe4zmHaWUmrfpt9eB
rv3tN0YoxI8VBNXEJoc6thSAiimgHttDhR8ht0fM4EPk6EMvWAqS4aEQ+qLGmDVk
4pMsYFLiWVSLfGwZ9aki8b/aiYt+yf6XxgtYVNv259Nv/0sMiIahqUOpyHszAzUI
e5YdNddCzRqPRg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:39 2025 by rpki-client