Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: iRxYMerQU/JTCmyOh+fpyMPbkEPjjRDzAPeQLVURw+k=
Subject key identifier: 64:06:8A:4C:62:6E:67:6E:58:90:C5:22:D9:74:A0:C6:57:76:AA:5B
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019677FB901BB57A139FF2CF2EFDF783454A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:01:37 +0000
Manifest this update: Sun 27 Apr 2025 16:01:37 +0000
Manifest next update: Mon 28 Apr 2025 16:01:37 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: ayQ1H/LuvDpOZgHt/vS/1QytVI/Ww8+tcpSqBbHmvJI=)
2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:90:1b:b5:7a:13:9f:f2:cf:2e:fd:f7:83:45:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Apr 27 16:01:37 2025 GMT
Not After : Apr 28 16:01:37 2025 GMT
Subject: CN=64068a4c626e676e5890c522d974a0c65776aa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:96:c3:67:d2:4a:be:e6:3a:46:ba:5b:8f:
54:60:01:65:e7:40:83:9d:30:d3:03:1d:89:21:83:
52:23:fa:34:7b:54:75:23:c5:f8:56:8a:e8:64:0b:
c3:29:1b:f1:cb:18:a3:d6:91:5c:4d:59:fe:34:cb:
fb:a0:82:a5:ab:8f:af:43:ec:d4:80:a2:0f:12:30:
d9:e9:50:25:31:d5:b2:b0:03:aa:74:e0:ce:e1:e1:
18:2b:e8:00:30:5d:e4:34:78:33:1f:92:dc:71:28:
89:d0:8d:49:fe:4f:81:a6:a3:29:cb:f8:a1:d7:ad:
02:73:61:4b:c0:53:27:ad:d6:5c:fc:90:9e:79:74:
29:29:07:3c:ae:1c:2d:9a:7a:82:e4:1a:e7:e9:71:
f9:ce:2b:2a:04:2d:cf:6c:b3:e8:9f:ff:60:f9:10:
1f:6c:cb:ac:39:fa:10:68:53:2f:c5:82:b7:8f:9b:
db:86:65:1f:0a:ca:62:af:0c:77:8c:c7:13:f5:11:
f1:e2:b1:33:15:81:5c:c0:34:2f:ed:92:fb:68:c8:
a4:05:a6:92:46:7b:c5:b3:0c:08:d9:53:3d:b2:ba:
36:fd:b4:ea:63:bb:56:f9:f6:f4:38:a3:6d:5c:b5:
61:45:36:5b:11:74:ae:b0:0e:a1:8f:6f:92:15:a9:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:8A:4C:62:6E:67:6E:58:90:C5:22:D9:74:A0:C6:57:76:AA:5B
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1e:68:4f:b2:62:fc:c2:82:30:41:37:b6:66:b5:93:78:c1:
11:a7:4b:58:2c:d7:cc:9d:a7:4d:4f:aa:02:b3:5c:aa:a5:20:
f8:81:8d:7a:7f:f9:f0:83:19:ae:2c:0b:b4:19:87:34:ae:d2:
a6:37:eb:b3:cd:78:24:27:6b:40:85:e6:ff:92:ab:53:72:99:
bd:d4:f4:da:77:49:9d:bd:9f:75:89:3e:f7:5c:90:0f:29:7e:
5e:2c:92:82:db:40:dc:36:53:18:cb:fc:05:e5:e7:fd:4b:11:
33:d1:b4:b9:fa:43:30:db:a5:0d:6b:be:4b:f4:c3:9c:36:f7:
af:9a:22:b5:93:06:f8:33:c5:d1:31:0a:bd:36:4f:d8:f2:1d:
5e:1f:b0:c4:14:69:72:59:86:0e:a7:40:08:e8:70:a4:c3:5a:
e0:4f:40:f3:b4:d2:d9:d3:62:bb:bd:a7:42:43:d4:39:89:14:
c5:21:84:de:13:cc:24:2c:81:4a:f7:31:f6:b3:f9:02:a4:06:
62:99:07:7b:84:21:9e:a4:d3:04:aa:74:d1:4b:e2:7d:c5:f3:
05:87:11:3b:14:39:87:ef:89:69:c8:92:a1:82:59:c6:bd:73:
5b:4c:00:1e:42:fb:b8:16:fd:9a:c8:55:78:87:bc:71:02:64:
63:d3:81:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+5AbtXoTn/LPLv33g0VKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYWM5ZDI2ZjdhMDViNGQ5MjUyNDk4MDU3YTM4MTRhY2Fm
N2QxYWUwHhcNMjUwNDI3MTYwMTM3WhcNMjUwNDI4MTYwMTM3WjAzMTEwLwYDVQQD
Eyg2NDA2OGE0YzYyNmU2NzZlNTg5MGM1MjJkOTc0YTBjNjU3NzZhYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdKWw2fSSr7mOka6W49UYAFl50CD
nTDTAx2JIYNSI/o0e1R1I8X4VoroZAvDKRvxyxij1pFcTVn+NMv7oIKlq4+vQ+zU
gKIPEjDZ6VAlMdWysAOqdODO4eEYK+gAMF3kNHgzH5LccSiJ0I1J/k+BpqMpy/ih
160Cc2FLwFMnrdZc/JCeeXQpKQc8rhwtmnqC5Brn6XH5zisqBC3PbLPon/9g+RAf
bMusOfoQaFMvxYK3j5vbhmUfCspirwx3jMcT9RHx4rEzFYFcwDQv7ZL7aMikBaaS
RnvFswwI2VM9sro2/bTqY7tW+fb0OKNtXLVhRTZbEXSusA6hj2+SFanPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQGikxibmduWJDFItl0oMZXdqpbMB8GA1UdIwQY
MBaAFEusnSb3oFtNklJJgFejgUrK99GuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMt
YmRiNjQ5Mjk5ODNmLzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMtYmRiNjQ5Mjk5ODNm
LzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR5oT7Ji
/MKCMEE3tma1k3jBEadLWCzXzJ2nTU+qArNcqqUg+IGNen/58IMZriwLtBmHNK7S
pjfrs814JCdrQIXm/5KrU3KZvdT02ndJnb2fdYk+91yQDyl+XiySgttA3DZTGMv8
BeXn/UsRM9G0ufpDMNulDWu+S/TDnDb3r5oitZMG+DPF0TEKvTZP2PIdXh+wxBRp
clmGDqdACOhwpMNa4E9A87TS2dNiu72nQkPUOYkUxSGE3hPMJCyBSvcx9rP5AqQG
YpkHe4QhnqTTBKp00UvifcXzBYcROxQ5h++JaciSoYJZxr1zW0wAHkL7uBb9mshV
eIe8cQJkY9OBZA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:03 2025 by rpki-client