Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: pX52ndNFm0CukGX3n9RbBsQJIfcTdL09MRbRFFC5UqA=
Subject key identifier: 3C:63:80:47:17:FC:89:6D:3C:CC:52:BA:6E:D5:DF:6A:2F:21:40:B4
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 0196A4D323428D4FB4B0C57787EA0E867BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 01E0
Signing time: Tue 06 May 2025 09:00:22 +0000
Manifest this update: Tue 06 May 2025 09:00:22 +0000
Manifest next update: Wed 07 May 2025 09:00:22 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: LfuiROvIJ+oqipr6veVXiZ61M7tJeLDM3GAZe4yBGVc=)
3: qU7NS3z4dR2Yct7lYNkAomkkhy4.roa (hash: A8aF09Arb1zd931tk4sAEkJct2PD6hOi6RvyzXv8HWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:23:42:8d:4f:b4:b0:c5:77:87:ea:0e:86:7b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: May 6 09:00:22 2025 GMT
Not After : May 7 09:00:22 2025 GMT
Subject: CN=3c63804717fc896d3ccc52ba6ed5df6a2f2140b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:41:ba:4d:7f:e3:c8:ac:49:77:c5:39:bc:
49:cc:d4:ac:32:a8:7d:de:98:a5:b4:c7:25:d5:59:
9a:6b:be:17:9a:5a:b5:86:05:d2:76:21:b4:78:34:
eb:cb:f0:4a:c8:0d:92:70:81:2b:ec:ba:f4:1a:fc:
2d:d7:10:59:5e:db:fb:4b:fa:05:be:b6:00:46:21:
29:80:eb:b3:b0:ac:29:e5:2f:dc:f8:e3:7b:a1:70:
80:5c:7e:36:14:4b:a7:b5:57:1a:16:c0:72:0f:6a:
04:d4:91:b6:8a:0e:d3:a7:7f:ee:22:5d:57:fd:15:
2b:16:6c:22:9e:47:17:08:ab:9d:e1:81:9f:84:fa:
60:17:4b:e4:90:ae:18:0d:63:2e:5d:7f:c7:0c:76:
14:49:df:ea:95:db:2f:80:d8:bc:f5:98:40:e4:d5:
c0:43:03:ed:d2:f8:d1:88:6e:7b:7c:30:4c:da:dd:
ba:47:b9:a2:7c:d9:08:84:04:59:55:cc:98:d3:66:
df:88:a0:cf:07:61:63:a2:fa:bc:3e:5a:4a:1f:57:
be:fb:47:33:12:72:e1:de:81:1e:34:dd:82:85:50:
8a:02:81:b8:d7:c9:3c:dc:ee:32:ee:43:4e:7f:c6:
9f:83:37:3b:c1:a5:3c:3e:9e:3a:82:f6:d7:7d:02:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:80:47:17:FC:89:6D:3C:CC:52:BA:6E:D5:DF:6A:2F:21:40:B4
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:45:95:62:56:a7:9d:1d:63:5c:f4:41:4e:c7:b5:a1:35:db:
52:a5:c2:72:56:4e:0b:0d:a4:b4:59:19:2d:1b:18:51:1f:1a:
97:32:82:6b:21:6b:d2:2a:f2:74:01:a2:43:48:32:d2:d7:d9:
4f:ac:33:94:1c:72:94:df:2e:02:3c:23:93:47:9f:1a:91:aa:
d6:41:64:22:90:1a:e3:e3:6f:f6:0c:9d:fe:29:90:45:11:9b:
b2:7f:43:94:61:e1:b1:6c:de:1a:ec:00:6b:ae:01:69:52:12:
9f:20:c8:dc:20:60:27:93:0b:b5:c7:ab:dd:d8:48:64:c6:0a:
92:ba:31:42:d7:4b:67:6c:10:6f:5c:c0:64:18:f2:8a:85:d4:
2a:2a:8a:4d:41:91:d1:d1:c9:2f:5e:3a:e2:01:3b:6c:f4:b7:
17:18:de:43:98:51:04:77:d4:80:ab:d5:01:1d:8c:08:50:93:
c6:8e:d9:9b:2b:34:bf:36:6a:1b:f0:af:20:cc:0b:5e:a9:75:
ad:1f:03:b3:c2:d4:36:e6:8a:9c:67:3f:08:60:2d:e4:ba:f0:
96:60:9c:fa:59:1b:bc:61:75:72:34:0d:14:b1:ab:eb:61:1b:
1c:55:1c:f9:cd:1e:34:b5:dc:df:9b:f6:53:c1:91:34:dc:4d:
14:ee:dd:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZak0yNCjU+0sMV3h+oOhnvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl
NzAxZjMwHhcNMjUwNTA2MDkwMDIyWhcNMjUwNTA3MDkwMDIyWjAzMTEwLwYDVQQD
EygzYzYzODA0NzE3ZmM4OTZkM2NjYzUyYmE2ZWQ1ZGY2YTJmMjE0MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1lBuk1/48isSXfFObxJzNSsMqh9
3piltMcl1Vmaa74Xmlq1hgXSdiG0eDTry/BKyA2ScIEr7Lr0Gvwt1xBZXtv7S/oF
vrYARiEpgOuzsKwp5S/c+ON7oXCAXH42FEuntVcaFsByD2oE1JG2ig7Tp3/uIl1X
/RUrFmwinkcXCKud4YGfhPpgF0vkkK4YDWMuXX/HDHYUSd/qldsvgNi89ZhA5NXA
QwPt0vjRiG57fDBM2t26R7mifNkIhARZVcyY02bfiKDPB2Fjovq8PlpKH1e++0cz
EnLh3oEeNN2ChVCKAoG418k83O4y7kNOf8afgzc7waU8Pp46gvbXfQJPkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxjgEcX/IltPMxSum7V32ovIUC0MB8GA1UdIwQY
MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt
NjNmMTk3ZmIxYzk2LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2
LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEWVYlan
nR1jXPRBTse1oTXbUqXCclZOCw2ktFkZLRsYUR8alzKCayFr0irydAGiQ0gy0tfZ
T6wzlBxylN8uAjwjk0efGpGq1kFkIpAa4+Nv9gyd/imQRRGbsn9DlGHhsWzeGuwA
a64BaVISnyDI3CBgJ5MLtcer3dhIZMYKkroxQtdLZ2wQb1zAZBjyioXUKiqKTUGR
0dHJL1464gE7bPS3FxjeQ5hRBHfUgKvVAR2MCFCTxo7Zmys0vzZqG/CvIMwLXql1
rR8Ds8LUNuaKnGc/CGAt5LrwlmCc+lkbvGF1cjQNFLGr62EbHFUc+c0eNLXc35v2
U8GRNNxNFO7d/A==
-----END CERTIFICATE-----
Generated at Tue May 6 12:23:50 2025 by rpki-client