Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: ItzIkFbQKME04W/21cFZqXb8mCLOsVZ6r3Nu1iXcXaM=
Subject key identifier: B9:66:E5:74:60:F8:A3:C8:96:37:0C:73:4B:DF:42:E6:BA:42:45:F4
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 01967EA156E12E80A46A0AD801D36D80C560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 23:00:24 +0000
Manifest this update: Mon 28 Apr 2025 23:00:24 +0000
Manifest next update: Tue 29 Apr 2025 23:00:24 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: 1keCLumwguX+/EB3Lhu5WGYwJlq6DVtX6Oom0+ubr8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:56:e1:2e:80:a4:6a:0a:d8:01:d3:6d:80:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Apr 28 23:00:24 2025 GMT
Not After : Apr 29 23:00:24 2025 GMT
Subject: CN=b966e57460f8a3c896370c734bdf42e6ba4245f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:28:db:7a:ce:40:46:7d:45:75:89:cc:27:
00:e3:56:4c:58:07:32:68:1f:b1:5f:d5:4b:db:7b:
a1:75:44:4d:95:67:ee:ec:ad:db:20:25:b2:3b:18:
64:4b:d5:8a:1e:3f:2b:76:87:e2:d5:de:d9:a5:c9:
0b:96:88:cf:39:80:6d:72:87:9c:23:72:78:fc:61:
ac:d6:01:8e:8c:8a:c4:6a:4e:e4:4f:29:55:5d:80:
e6:80:f3:d4:25:ce:94:31:a9:45:95:d2:2c:ec:59:
2a:47:9e:d4:1a:6e:d7:51:a6:51:5c:d3:d5:c2:84:
53:49:89:34:b7:b0:c3:4e:e8:7f:24:f8:22:09:bd:
46:1e:cb:68:6f:01:c3:04:c4:1a:0a:a8:93:35:3f:
ab:c8:c9:7e:d9:99:5e:70:a4:d5:e8:55:f3:c9:35:
50:f3:da:60:47:72:12:91:99:ea:16:2e:ab:3a:c9:
a4:7b:57:4f:7c:34:b2:91:4b:68:45:7f:1b:8c:85:
df:e9:02:bf:43:14:56:be:8b:4b:9c:61:7e:8b:01:
af:7e:96:6f:31:e3:db:c1:45:57:8e:39:4a:69:21:
b6:0e:05:a6:76:32:6d:d8:94:67:dd:6e:6a:42:13:
dd:98:34:b2:78:f3:27:d5:d2:99:03:46:8f:ad:41:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:E5:74:60:F8:A3:C8:96:37:0C:73:4B:DF:42:E6:BA:42:45:F4
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:a9:3b:82:33:12:a9:5e:8f:f7:96:72:02:08:89:0d:29:
e0:8c:dc:82:8f:1d:2b:79:50:f1:4b:b7:c9:ba:7f:fd:e3:97:
20:b7:58:40:69:a5:d4:60:7c:b9:db:69:b8:25:dd:f6:f0:bd:
c7:e4:c4:d6:5d:6e:c5:15:f8:23:28:b0:06:52:dd:97:4c:29:
f7:54:f9:e1:52:ae:fa:f7:cc:69:ee:39:94:25:09:60:cf:e4:
ef:a9:80:a3:4d:fb:42:f7:9e:dd:30:78:21:7d:e2:cc:61:97:
dc:f4:7e:cd:1f:e5:b8:d7:91:d6:a7:df:1c:38:f6:7b:3b:e2:
2c:27:8b:62:00:53:08:39:a2:09:59:fd:f3:6e:22:7a:9c:58:
a9:38:f6:bc:35:e5:c5:dc:82:31:6b:a9:2b:05:b4:36:45:c0:
42:9f:d5:68:6f:88:39:32:da:3c:d3:42:49:1d:a8:31:b8:67:
6a:a3:e9:11:a4:97:e5:8b:37:7a:3a:be:5c:c6:ae:a3:04:3a:
19:25:46:de:10:66:21:75:97:e9:dd:7c:01:a6:53:db:9d:cc:
8c:fe:27:b7:68:a5:c1:45:27:66:fe:30:cc:e8:e6:3e:e9:c5:
d1:a0:c7:9e:c6:25:ad:3f:c4:06:fa:e2:c1:0d:be:2c:e7:39:
00:9a:4d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oVbhLoCkagrYAdNtgMVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZWE1MGExYzYyMDgyNzYyYWZkYTAwN2Q2ZmM4YjRiZGIw
NTc0OWYwHhcNMjUwNDI4MjMwMDI0WhcNMjUwNDI5MjMwMDI0WjAzMTEwLwYDVQQD
EyhiOTY2ZTU3NDYwZjhhM2M4OTYzNzBjNzM0YmRmNDJlNmJhNDI0NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z4o23rOQEZ9RXWJzCcA41ZMWAcy
aB+xX9VL23uhdURNlWfu7K3bICWyOxhkS9WKHj8rdofi1d7ZpckLlojPOYBtcoec
I3J4/GGs1gGOjIrEak7kTylVXYDmgPPUJc6UMalFldIs7FkqR57UGm7XUaZRXNPV
woRTSYk0t7DDTuh/JPgiCb1GHstobwHDBMQaCqiTNT+ryMl+2ZlecKTV6FXzyTVQ
89pgR3ISkZnqFi6rOsmke1dPfDSykUtoRX8bjIXf6QK/QxRWvotLnGF+iwGvfpZv
MePbwUVXjjlKaSG2DgWmdjJt2JRn3W5qQhPdmDSyePMn1dKZA0aPrUGfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlm5XRg+KPIljcMc0vfQua6QkX0MB8GA1UdIwQY
MBaAFEnqUKHGIIJ2Kv2gB9b8i0vbBXSfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAt
MjcyZGFiNWFmYTY2LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAtMjcyZGFiNWFmYTY2
LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu2pO4Iz
Eqlej/eWcgIIiQ0p4Izcgo8dK3lQ8Uu3ybp//eOXILdYQGml1GB8udtpuCXd9vC9
x+TE1l1uxRX4IyiwBlLdl0wp91T54VKu+vfMae45lCUJYM/k76mAo037Qvee3TB4
IX3izGGX3PR+zR/luNeR1qffHDj2ezviLCeLYgBTCDmiCVn9824iepxYqTj2vDXl
xdyCMWupKwW0NkXAQp/VaG+IOTLaPNNCSR2oMbhnaqPpEaSX5Ys3ejq+XMauowQ6
GSVG3hBmIXWX6d18AaZT253MjP4nt2ilwUUnZv4wzOjmPunF0aDHnsYlrT/EBvri
wQ2+LOc5AJpNGQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:53:55 2025 by rpki-client