Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: Y6KHLwhnmKeJGXXcM33bzsv4+Q7ThewSsLV8/fZG+OU=
Subject key identifier: 9F:38:C5:7B:89:64:11:BE:40:5B:82:70:23:8F:1F:61:04:B1:4B:F6
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019682100CA1DA0A4CACCBE638238EE0B0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0995
Signing time: Tue 29 Apr 2025 15:00:11 +0000
Manifest this update: Tue 29 Apr 2025 15:00:11 +0000
Manifest next update: Wed 30 Apr 2025 15:00:11 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: LGCTfZDcJ4tvMNYOYVvK952oJkJ/uts7tVTJBTfPGaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:0c:a1:da:0a:4c:ac:cb:e6:38:23:8e:e0:b0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Apr 29 15:00:11 2025 GMT
Not After : Apr 30 15:00:11 2025 GMT
Subject: CN=9f38c57b896411be405b8270238f1f6104b14bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:d5:3d:c4:4b:95:38:f3:70:e8:89:ec:2d:
99:e0:1f:56:3a:fb:72:bf:99:08:6a:4e:71:60:7e:
e4:91:6e:ad:1e:ed:25:5b:52:24:21:97:dd:af:eb:
87:b3:bb:91:6c:3e:f6:d5:33:fe:12:e7:cf:1c:f8:
3e:9e:27:74:72:bd:7b:43:dd:d0:91:5a:42:aa:a3:
ca:b7:4e:60:f9:e0:b4:44:9c:25:e2:00:09:77:98:
d2:84:ee:da:12:a6:50:9e:2e:44:ba:0f:33:d2:f7:
68:53:14:a2:49:98:33:0b:57:29:f2:79:f9:da:8f:
e7:e5:32:47:03:93:88:42:02:b8:e1:0d:be:7e:85:
a5:a2:bb:fa:da:19:a9:51:93:30:12:7a:e5:96:94:
f9:0e:7b:5e:de:4f:b9:f2:20:3e:a7:11:f9:4f:4e:
48:8a:7b:56:7b:a7:1a:91:b2:5c:40:b2:e8:9e:b6:
50:cb:77:91:77:23:24:ad:9e:24:80:7c:25:0c:6e:
61:56:8b:2b:e7:a1:b2:21:46:f3:8a:b1:54:c3:5a:
aa:24:23:8f:12:30:b0:04:ba:f8:0f:b8:ad:cd:17:
00:ec:1d:f4:1d:28:5c:a4:cf:41:64:5e:7c:76:28:
38:59:40:d9:24:c0:7e:8f:9e:7b:5e:ab:7e:b8:4a:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:C5:7B:89:64:11:BE:40:5B:82:70:23:8F:1F:61:04:B1:4B:F6
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:d1:33:c5:fe:f2:5a:c0:9a:30:4f:ce:01:5d:b2:af:91:
78:f3:91:fa:2a:2d:43:ee:80:5a:c3:97:95:38:d6:7b:95:48:
c5:04:e7:81:89:0b:f8:ca:77:30:f5:c3:11:dc:44:e8:1b:39:
ca:f5:f5:f1:f3:08:9d:f4:1c:ca:7e:f4:9d:e3:fd:a0:39:ee:
4b:e8:27:9a:38:83:89:49:4a:79:50:30:c9:a7:7e:c4:63:6a:
f7:9d:dc:ba:41:be:ef:ba:66:b3:6a:5c:90:e0:03:cb:3b:b4:
ea:89:46:ab:27:a3:df:60:ac:4b:b0:86:f0:84:15:40:68:61:
06:53:db:c5:4a:0c:0b:c8:98:2b:fe:d7:e7:3b:70:f3:3b:dd:
e5:39:69:70:05:ae:3d:59:f1:7e:a3:41:6a:74:4d:4a:5a:dc:
2a:0d:46:2b:92:c1:da:2d:b6:3e:c1:17:9a:23:0c:86:7d:83:
10:91:97:07:9e:fd:15:cd:71:bb:3b:56:10:04:44:62:ce:db:
19:63:95:8f:6e:40:8f:ba:5e:56:21:53:ea:f5:a3:fe:30:09:
47:59:80:bb:46:29:83:59:bc:ad:0e:f6:a8:ee:96:1e:63:e9:
86:4d:e4:d7:c0:7d:35:9e:10:75:de:18:38:1f:cd:2f:37:0f:
ef:e1:b5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEAyh2gpMrMvmOCOO4LDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1
MzBiMzAwHhcNMjUwNDI5MTUwMDExWhcNMjUwNDMwMTUwMDExWjAzMTEwLwYDVQQD
Eyg5ZjM4YzU3Yjg5NjQxMWJlNDA1YjgyNzAyMzhmMWY2MTA0YjE0YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJrVPcRLlTjzcOiJ7C2Z4B9WOvty
v5kIak5xYH7kkW6tHu0lW1IkIZfdr+uHs7uRbD721TP+EufPHPg+nid0cr17Q93Q
kVpCqqPKt05g+eC0RJwl4gAJd5jShO7aEqZQni5Eug8z0vdoUxSiSZgzC1cp8nn5
2o/n5TJHA5OIQgK44Q2+foWlorv62hmpUZMwEnrllpT5Dnte3k+58iA+pxH5T05I
intWe6cakbJcQLLonrZQy3eRdyMkrZ4kgHwlDG5hVosr56GyIUbzirFUw1qqJCOP
EjCwBLr4D7itzRcA7B30HShcpM9BZF58dig4WUDZJMB+j557Xqt+uEoAcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ84xXuJZBG+QFuCcCOPH2EEsUv2MB8GA1UdIwQY
MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt
ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz
LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4bRM8X+
8lrAmjBPzgFdsq+RePOR+iotQ+6AWsOXlTjWe5VIxQTngYkL+Mp3MPXDEdxE6Bs5
yvX18fMInfQcyn70neP9oDnuS+gnmjiDiUlKeVAwyad+xGNq953cukG+77pms2pc
kOADyzu06olGqyej32CsS7CG8IQVQGhhBlPbxUoMC8iYK/7X5ztw8zvd5TlpcAWu
PVnxfqNBanRNSlrcKg1GK5LB2i22PsEXmiMMhn2DEJGXB579Fc1xuztWEAREYs7b
GWOVj25Aj7peViFT6vWj/jAJR1mAu0Ypg1m8rQ72qO6WHmPphk3k18B9NZ4Qdd4Y
OB/NLzcP7+G1/A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:23 2025 by rpki-client