Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: jqAlSpXssne1edPl0/dl8ZCpb7GyRvwhlFebcF8E3qI=
Subject key identifier: 7D:85:07:55:EA:4A:A9:D7:35:E0:71:6E:7E:FD:A9:BC:FA:15:B0:65
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 01967CB3205416082E3F38FBD00B17A1A26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 0135
Signing time: Mon 28 Apr 2025 14:00:36 +0000
Manifest this update: Mon 28 Apr 2025 14:00:36 +0000
Manifest next update: Tue 29 Apr 2025 14:00:36 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: Gk3beo3YLAVMlBktasiSAR7daO0Br6374VL86OvKGew=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:20:54:16:08:2e:3f:38:fb:d0:0b:17:a1:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Apr 28 14:00:36 2025 GMT
Not After : Apr 29 14:00:36 2025 GMT
Subject: CN=7d850755ea4aa9d735e0716e7efda9bcfa15b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:8c:2e:ec:00:7d:2f:9c:2c:90:63:10:9c:
49:44:76:57:97:23:3e:c5:de:fe:9a:d0:ff:69:67:
d8:7b:72:53:6f:84:82:7e:a2:e9:47:51:b1:9f:ee:
72:11:d9:fe:1b:c1:c1:2d:4e:2d:86:d9:a9:c1:32:
1a:08:d2:59:3d:f2:b6:ab:2a:30:3c:10:1f:b4:6c:
c1:e3:05:22:9f:87:ea:2a:b1:d2:42:46:ef:1c:be:
1b:00:56:ad:f1:12:d5:12:9e:91:7b:2a:6e:dc:70:
1f:0d:e4:74:05:9a:d1:20:26:2c:42:72:bc:fe:50:
a1:ce:4d:d6:9e:05:67:29:20:18:f5:fa:4f:39:26:
1e:da:29:a4:45:74:73:d5:4b:44:aa:15:98:fe:03:
de:ba:05:4e:51:4b:6c:4e:ba:3a:0d:93:c1:f9:5b:
f0:e3:6a:78:de:8b:d0:d2:02:3c:0c:64:2b:ee:15:
2a:9b:55:1f:bc:4f:c1:cc:55:fb:ad:27:ff:de:1a:
e6:13:0f:34:92:39:a3:cb:77:b7:82:00:3f:90:03:
5c:44:8b:ff:5b:2b:2a:b0:54:c5:03:55:16:4f:d8:
dc:d4:ce:a0:b0:f5:af:e8:d7:3f:cc:fd:e5:40:19:
96:a7:e6:5d:94:f6:91:8a:fe:2e:66:0f:69:2f:7e:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:07:55:EA:4A:A9:D7:35:E0:71:6E:7E:FD:A9:BC:FA:15:B0:65
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fa:1d:fb:a0:3c:0e:75:0a:c8:91:93:d1:3c:6d:27:9c:99:
1d:51:68:fd:09:09:7b:80:d3:84:84:79:d2:a9:ea:c6:ad:1f:
76:a8:f6:7c:cf:a6:75:2e:2b:8d:10:c6:e5:08:5a:5b:4d:23:
3a:b7:93:12:8c:4f:e0:af:b9:a6:2f:fb:cb:ed:c5:64:f4:06:
e0:72:1c:9d:84:7a:45:a9:87:b7:63:99:3e:a1:49:11:98:ad:
7b:9e:52:b2:76:7f:d8:ac:2b:5d:88:67:fd:55:b1:54:4f:a0:
bd:6e:27:04:70:b4:95:6c:36:ba:79:46:7c:4d:b0:5b:be:5f:
09:54:ed:06:88:f8:be:5f:a4:a1:b9:57:0c:2d:b1:07:95:fc:
d2:09:2e:61:66:50:75:7b:54:ac:ae:8b:67:96:bc:c7:6b:76:
f9:e4:6e:d5:7e:6a:28:0c:8e:52:c2:86:f1:42:31:e9:f0:35:
b0:c7:eb:b7:03:13:7b:e1:7a:3b:82:ce:20:60:80:a6:20:34:
9a:fc:13:95:a3:fa:03:dd:3f:47:82:c7:83:0c:5a:62:af:d7:
3a:45:51:58:2e:5b:02:ab:38:77:dd:37:bb:41:70:0e:2c:7d:
e6:9e:9d:ea:d3:53:b1:62:37:ea:a5:25:a5:7b:e7:52:c0:45:
4f:4e:d2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8syBUFgguPzj70AsXoaJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh
YmVkNTUwHhcNMjUwNDI4MTQwMDM2WhcNMjUwNDI5MTQwMDM2WjAzMTEwLwYDVQQD
Eyg3ZDg1MDc1NWVhNGFhOWQ3MzVlMDcxNmU3ZWZkYTliY2ZhMTViMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYiMLuwAfS+cLJBjEJxJRHZXlyM+
xd7+mtD/aWfYe3JTb4SCfqLpR1Gxn+5yEdn+G8HBLU4thtmpwTIaCNJZPfK2qyow
PBAftGzB4wUin4fqKrHSQkbvHL4bAFat8RLVEp6Reypu3HAfDeR0BZrRICYsQnK8
/lChzk3WngVnKSAY9fpPOSYe2imkRXRz1UtEqhWY/gPeugVOUUtsTro6DZPB+Vvw
42p43ovQ0gI8DGQr7hUqm1UfvE/BzFX7rSf/3hrmEw80kjmjy3e3ggA/kANcRIv/
WysqsFTFA1UWT9jc1M6gsPWv6Nc/zP3lQBmWp+ZdlPaRiv4uZg9pL362rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2FB1XqSqnXNeBxbn79qbz6FbBlMB8GA1UdIwQY
MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt
ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4
LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/od+6A8
DnUKyJGT0TxtJ5yZHVFo/QkJe4DThIR50qnqxq0fdqj2fM+mdS4rjRDG5QhaW00j
OreTEoxP4K+5pi/7y+3FZPQG4HIcnYR6RamHt2OZPqFJEZite55SsnZ/2KwrXYhn
/VWxVE+gvW4nBHC0lWw2unlGfE2wW75fCVTtBoj4vl+koblXDC2xB5X80gkuYWZQ
dXtUrK6LZ5a8x2t2+eRu1X5qKAyOUsKG8UIx6fA1sMfrtwMTe+F6O4LOIGCApiA0
mvwTlaP6A90/R4LHgwxaYq/XOkVRWC5bAqs4d903u0FwDix95p6d6tNTsWI36qUl
pXvnUsBFT07SiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:10 2025 by rpki-client