Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: OrUAgTwIfJ2Z4pGdY2/aNgc8jzleZgXUJpRdkXUVYn8=
Subject key identifier: 5A:45:C9:08:D9:F5:27:2F:BE:36:C5:AD:47:7B:E0:E8:52:B6:7C:09
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019682B521F41E7392AA19047FAA74346F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 0E4E
Signing time: Tue 29 Apr 2025 18:00:30 +0000
Manifest this update: Tue 29 Apr 2025 18:00:30 +0000
Manifest next update: Wed 30 Apr 2025 18:00:30 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: jUJXeiV6jxCoqYfuVVCPkZtlOm7vakbwSzEsN4x5qPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:21:f4:1e:73:92:aa:19:04:7f:aa:74:34:6f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Apr 29 18:00:30 2025 GMT
Not After : Apr 30 18:00:30 2025 GMT
Subject: CN=5a45c908d9f5272fbe36c5ad477be0e852b67c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:a1:1e:85:3e:ce:70:2d:b6:36:e5:04:46:
ba:32:ea:42:c2:28:6f:e5:78:27:2d:3f:ce:dc:9e:
8b:33:33:f1:8f:27:38:93:e5:30:eb:b1:92:3d:dc:
d9:e5:72:92:f4:76:f3:d9:95:34:07:c6:99:21:4b:
a8:8d:85:0e:5b:9f:5e:dc:29:3e:72:4f:9e:43:10:
5a:bd:81:69:1d:d9:dc:dd:71:2c:e5:9a:91:41:c8:
c4:47:cb:47:8b:64:42:5c:36:b5:f5:36:14:75:cf:
0a:04:9d:c1:9a:1d:82:98:05:0c:8b:e9:25:66:24:
15:3f:c9:05:fd:fd:ba:5d:1c:3f:e0:70:dd:f4:74:
f4:4b:74:d1:61:b9:62:7b:63:d0:12:43:64:3a:49:
fb:dc:c4:34:9e:3f:f4:c5:84:fc:10:be:08:48:8c:
70:cd:e6:f6:b9:5c:03:f8:c3:15:86:df:8b:19:0f:
a0:49:23:c8:f4:aa:db:05:df:74:fc:df:6f:9c:dd:
1e:18:66:79:00:89:08:56:8d:31:71:b6:f2:bf:79:
8f:d9:6f:14:df:83:2b:a0:01:9e:a2:69:8c:2f:c8:
24:f9:7c:bb:a3:ea:31:7b:38:32:66:84:28:ae:c4:
39:be:05:ea:74:b0:6a:94:4c:a5:0c:e6:9f:58:42:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:C9:08:D9:F5:27:2F:BE:36:C5:AD:47:7B:E0:E8:52:B6:7C:09
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b6:52:cb:42:a1:23:4e:1e:50:4a:85:11:2a:66:9b:d3:ad:
ef:6e:bf:69:1a:e3:7c:8c:f4:7c:07:bf:5f:70:cf:c9:41:da:
cb:1e:c2:c7:f4:47:f5:a2:a2:f0:2e:5a:2f:14:99:e9:44:c4:
fb:cd:b6:a9:8d:c3:2e:fc:91:7f:bf:3b:1f:e0:5f:82:42:cd:
0a:c5:de:82:d6:4b:92:09:75:9e:72:21:0b:38:d1:85:d4:1a:
c5:49:5d:4f:45:dc:b6:8f:bc:32:f0:69:85:50:1c:52:85:43:
86:05:f2:60:89:00:37:4a:0c:59:27:8e:6f:3a:eb:d2:a7:c6:
d0:56:a2:49:81:26:43:17:a2:e3:f2:46:08:4b:ee:07:6a:04:
1e:2d:69:be:9f:ac:d9:5b:ee:ea:98:a7:4f:30:8f:ab:1b:43:
ce:39:4e:45:48:5e:ca:42:2b:9a:f8:d5:6c:58:57:1f:26:3c:
b7:9c:98:bf:db:b5:3f:f8:f8:c3:86:8b:1a:4d:da:84:26:cc:
1d:10:2f:34:ca:da:fc:99:23:62:4d:c1:50:3f:04:61:cb:eb:
2f:10:04:e6:26:23:70:5e:8c:1c:1a:e6:a4:5f:a0:64:48:88:
61:13:b0:f0:45:d8:7e:62:7f:9e:59:30:7d:cc:c1:6f:39:fe:
71:9e:bd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCtSH0HnOSqhkEf6p0NG9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzBjOGZkMDIwNWVjZjBlZjZiNTZlMDM3ZDU2MjliMTdi
Mjc1ZWUwHhcNMjUwNDI5MTgwMDMwWhcNMjUwNDMwMTgwMDMwWjAzMTEwLwYDVQQD
Eyg1YTQ1YzkwOGQ5ZjUyNzJmYmUzNmM1YWQ0NzdiZTBlODUyYjY3YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaahHoU+znAttjblBEa6MupCwihv
5XgnLT/O3J6LMzPxjyc4k+Uw67GSPdzZ5XKS9Hbz2ZU0B8aZIUuojYUOW59e3Ck+
ck+eQxBavYFpHdnc3XEs5ZqRQcjER8tHi2RCXDa19TYUdc8KBJ3Bmh2CmAUMi+kl
ZiQVP8kF/f26XRw/4HDd9HT0S3TRYblie2PQEkNkOkn73MQ0nj/0xYT8EL4ISIxw
zeb2uVwD+MMVht+LGQ+gSSPI9KrbBd90/N9vnN0eGGZ5AIkIVo0xcbbyv3mP2W8U
34MroAGeommML8gk+Xy7o+oxezgyZoQorsQ5vgXqdLBqlEylDOafWELvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpFyQjZ9ScvvjbFrUd74OhStnwJMB8GA1UdIwQY
MBaAFLIwyP0CBezw72tW4DfVYpsXsnXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAt
YzhiNWRmYzVhMTNmLzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTE3OTctNjE2Zi00OTczLWI3NDAtYzhiNWRmYzVhMTNm
LzEvc2pESV9RSUY3UER2YTFiZ045VmlteGV5ZGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLZSy0Kh
I04eUEqFESpmm9Ot726/aRrjfIz0fAe/X3DPyUHayx7Cx/RH9aKi8C5aLxSZ6UTE
+822qY3DLvyRf787H+BfgkLNCsXegtZLkgl1nnIhCzjRhdQaxUldT0Xcto+8MvBp
hVAcUoVDhgXyYIkAN0oMWSeObzrr0qfG0FaiSYEmQxei4/JGCEvuB2oEHi1pvp+s
2Vvu6pinTzCPqxtDzjlORUheykIrmvjVbFhXHyY8t5yYv9u1P/j4w4aLGk3ahCbM
HRAvNMra/JkjYk3BUD8EYcvrLxAE5iYjcF6MHBrmpF+gZEiIYROw8EXYfmJ/nlkw
fczBbzn+cZ69aA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:48 2025 by rpki-client