Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File: sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier: Ns2axWJkbHZ4NMvmt+NWAApIY6rgfaPmF7cUpl/blkU=
Subject key identifier: 24:90:CF:90:FA:C5:9E:A2:B1:C2:0D:20:64:18:8C:11:B8:40:FB:DF
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial: 01967FEB065E0C94C75B4742F2FA841888DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number: 0A6D
Signing time: Tue 29 Apr 2025 05:00:30 +0000
Manifest this update: Tue 29 Apr 2025 05:00:30 +0000
Manifest next update: Wed 30 Apr 2025 05:00:30 +0000
Files and hashes: 1: lAlkLc1CavmRfvnNM-ldOwGYoR8.roa (hash: 0wroejPoBcULff3nhQGRj0gl288xNtfnDJXaFr+mf24=)
2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: 2SEXQRa2DKbZ3xVBWCdsdjmzOpY8QIL8Hk/sEnMbTdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:06:5e:0c:94:c7:5b:47:42:f2:fa:84:18:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Validity
Not Before: Apr 29 05:00:30 2025 GMT
Not After : Apr 30 05:00:30 2025 GMT
Subject: CN=2490cf90fac59ea2b1c20d2064188c11b840fbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:2c:95:ae:4a:f9:be:69:71:fd:be:7d:5a:
51:c1:9c:89:67:87:9d:3f:5e:e7:e0:0e:13:f4:ed:
c8:8f:a4:90:1b:7d:ff:c6:d0:5f:07:0a:70:0f:1f:
96:94:d6:8c:58:b2:9b:eb:aa:aa:72:51:c4:da:0a:
d8:34:72:ee:d6:aa:3e:34:2a:b6:35:3c:48:c7:5c:
84:b1:71:eb:48:b0:4a:08:f9:38:1a:80:14:49:ba:
b1:1e:15:0a:c5:bc:39:b0:77:20:b5:26:96:b9:dd:
5f:47:34:70:e8:d3:6b:aa:b3:fa:da:77:11:4c:d9:
dd:1b:11:ab:e0:95:bc:81:5d:3b:44:93:85:c7:48:
76:47:1d:49:b8:05:35:44:54:e8:b0:a7:ce:46:1f:
03:75:06:2b:b9:7f:88:91:71:4d:16:6a:9a:cd:98:
f2:48:73:af:a5:2e:b4:c4:fa:34:1c:72:d2:21:a7:
a5:4a:ca:ba:fa:cc:57:35:02:e8:4e:a0:41:fa:b9:
f7:15:67:f5:4a:f3:a7:59:e8:e9:4a:74:18:81:58:
0c:89:b3:d5:af:31:3d:a9:5c:43:6c:32:a6:85:5b:
13:f7:c9:41:1b:bb:92:6b:1d:3c:53:9c:0c:70:ee:
de:cc:74:95:d7:91:46:41:1d:a9:b0:3b:92:65:dc:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:CF:90:FA:C5:9E:A2:B1:C2:0D:20:64:18:8C:11:B8:40:FB:DF
X509v3 Authority Key Identifier:
keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:20:60:ce:f5:b2:fc:19:05:01:5e:5c:4d:d6:ae:cc:cc:
9d:99:aa:92:15:82:f9:6b:3e:ff:ab:83:a8:56:ce:2e:5e:05:
07:32:36:90:b3:c2:2e:2b:4e:80:51:5c:5e:ef:bf:f1:ad:df:
7f:12:7a:64:b8:0a:38:ed:dd:47:fa:db:9f:67:ab:96:6e:2b:
f7:d2:ce:e9:57:35:d6:d3:46:58:b8:b0:a2:b6:1a:fc:80:c3:
7a:19:3b:16:75:ed:bb:0d:39:ad:90:41:a0:73:ac:1c:bb:0b:
42:7e:7a:78:cb:d4:8e:c0:37:07:4c:21:53:a6:d4:b6:2d:95:
98:71:86:c2:be:60:23:85:f2:8d:cf:15:58:a2:e9:23:7a:26:
73:79:2e:bb:79:7f:1d:4c:87:a2:80:e3:98:82:ef:48:a0:ff:
89:29:5e:b4:f7:ea:bf:9a:5e:c8:61:c1:4f:22:aa:4f:68:e9:
50:44:08:35:d2:72:94:2f:c9:dc:95:61:e6:e0:db:78:a0:c8:
9b:0e:30:ce:fb:1e:0e:e8:39:32:6e:b3:4a:d5:5f:2e:dd:83:
aa:a9:18:80:76:f3:17:65:3a:2a:f2:d3:f2:0c:89:e8:7e:02:
8a:a8:d6:fe:29:45:76:8d:e8:df:14:09:b2:08:68:ec:e6:34:
33:0f:61:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6wZeDJTHW0dC8vqEGIjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzc5OGQzZDViNjA5NmNkMzllNTg5MjVhMjhhMTdkZmI2
MWNlNzUwHhcNMjUwNDI5MDUwMDMwWhcNMjUwNDMwMDUwMDMwWjAzMTEwLwYDVQQD
EygyNDkwY2Y5MGZhYzU5ZWEyYjFjMjBkMjA2NDE4OGMxMWI4NDBmYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNssla5K+b5pcf2+fVpRwZyJZ4ed
P17n4A4T9O3Ij6SQG33/xtBfBwpwDx+WlNaMWLKb66qqclHE2grYNHLu1qo+NCq2
NTxIx1yEsXHrSLBKCPk4GoAUSbqxHhUKxbw5sHcgtSaWud1fRzRw6NNrqrP62ncR
TNndGxGr4JW8gV07RJOFx0h2Rx1JuAU1RFTosKfORh8DdQYruX+IkXFNFmqazZjy
SHOvpS60xPo0HHLSIaelSsq6+sxXNQLoTqBB+rn3FWf1SvOnWejpSnQYgVgMibPV
rzE9qVxDbDKmhVsT98lBG7uSax08U5wMcO7ezHSV15FGQR2psDuSZdznFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSQz5D6xZ6iscINIGQYjBG4QPvfMB8GA1UdIwQY
MBaAFLDHmNPVtgls055YkloooX37Yc51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01lWTA5VzJDV3pUbmxpU1dpaWhmZnRoem5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82NWUwMDYtYzc2Mi00YzdkLTk2ZmYt
ZjlmMzExOGUxOTg1LzEvc01lWTA5VzJDV3pUbmxpU1dpaWhmZnRoem5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82NWUwMDYtYzc2Mi00YzdkLTk2ZmYtZjlmMzExOGUxOTg1
LzEvc01lWTA5VzJDV3pUbmxpU1dpaWhmZnRoem5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6QgYM71
svwZBQFeXE3WrszMnZmqkhWC+Ws+/6uDqFbOLl4FBzI2kLPCLitOgFFcXu+/8a3f
fxJ6ZLgKOO3dR/rbn2erlm4r99LO6Vc11tNGWLiworYa/IDDehk7FnXtuw05rZBB
oHOsHLsLQn56eMvUjsA3B0whU6bUti2VmHGGwr5gI4Xyjc8VWKLpI3omc3kuu3l/
HUyHooDjmILvSKD/iSletPfqv5peyGHBTyKqT2jpUEQINdJylC/J3JVh5uDbeKDI
mw4wzvseDug5Mm6zStVfLt2DqqkYgHbzF2U6KvLT8gyJ6H4CiqjW/ilFdo3o3xQJ
sgho7OY0Mw9hjQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:54:58 2025 by rpki-client