Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: i4xkPflmQJlBmoXEg8yCKXuIJlBF3PnEofxv/u4XSM4=
Subject key identifier: 9D:6E:84:24:2D:1F:C5:2D:A4:10:19:16:4C:BF:7B:E9:BA:9A:1E:18
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01967F7D092B68F0097938610D4C84003353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 03:00:22 +0000
Manifest this update: Tue 29 Apr 2025 03:00:22 +0000
Manifest next update: Wed 30 Apr 2025 03:00:22 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: 4ymYnhyKyWHzL1cHMqubaCpUVviB9eLV9ZmwhkgDYKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:09:2b:68:f0:09:79:38:61:0d:4c:84:00:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Apr 29 03:00:22 2025 GMT
Not After : Apr 30 03:00:22 2025 GMT
Subject: CN=9d6e84242d1fc52da41019164cbf7be9ba9a1e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:ae:29:1a:b9:fb:f4:c1:f2:77:8e:83:59:
5d:f6:d1:6f:35:ca:b7:01:59:6c:d1:49:d5:e8:61:
74:4b:7f:40:5f:c1:d1:01:37:39:91:70:f4:dd:a8:
7b:2b:3c:23:af:b9:dd:27:d6:60:ba:65:fe:85:3e:
b8:42:88:93:de:45:16:70:d5:45:78:94:be:26:f1:
0c:48:72:42:8c:5f:07:e5:e8:bc:96:e0:36:33:b8:
db:bd:da:af:30:dd:0a:02:00:d2:f2:52:18:06:51:
51:aa:09:6e:a8:7c:d7:13:8c:13:9f:5d:d2:b2:8f:
4f:eb:80:4e:5c:62:02:41:cc:1b:ee:70:45:3a:23:
b7:02:ef:5b:1a:17:70:e9:cc:bf:03:58:7f:32:3a:
39:ef:df:01:3d:b4:10:03:0e:d8:d2:98:d4:8e:d4:
cb:f5:1c:d1:58:16:ea:91:d8:88:96:2a:26:a7:dc:
6c:8d:d4:0b:fe:10:5a:70:a5:2f:79:79:13:da:c0:
5d:c4:d4:d6:5d:48:7d:ca:43:52:1e:9d:e5:4f:68:
45:fe:04:33:c8:e3:77:33:e4:fd:8f:b7:fd:56:89:
07:7c:67:78:56:be:24:f1:a3:63:99:57:97:77:2f:
c5:61:d7:ff:0a:4a:95:b2:87:ce:0a:41:07:c0:ab:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6E:84:24:2D:1F:C5:2D:A4:10:19:16:4C:BF:7B:E9:BA:9A:1E:18
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:4d:9e:d1:14:f0:76:07:16:05:35:6d:8d:d5:e2:75:ee:
fb:76:4e:9d:e7:21:02:24:35:f8:15:5d:2f:02:7d:c3:5a:3d:
50:22:d2:ad:ef:88:3c:51:f7:e8:e3:8c:f4:e4:d8:31:13:66:
d7:96:ae:90:53:7b:6f:0f:48:81:a8:98:89:4c:21:47:09:f2:
e0:a5:e0:9f:f1:2d:8c:0e:7c:7e:5b:d5:59:ca:45:90:57:a9:
53:49:69:c2:82:e8:ea:ec:0f:c6:8a:b0:8e:b8:e6:89:d6:c0:
1a:9a:39:a0:6e:35:aa:66:b1:0c:1b:0f:3c:cb:93:e4:5f:04:
22:6e:90:4f:c3:07:49:96:de:24:35:1f:e0:69:e1:b8:e0:f8:
89:ca:76:05:7c:e7:47:c5:0b:cb:1b:e7:bc:dd:1e:12:2f:ef:
62:14:a4:4e:1a:78:69:7e:73:4d:be:85:75:49:c5:e0:35:04:
ae:c8:64:75:40:f9:c2:2b:fd:94:0d:f4:6d:03:f8:51:07:44:
bd:60:ed:a8:e6:2f:09:34:82:41:84:08:33:b2:10:52:bf:07:
11:58:09:72:22:d4:6d:0b:df:83:26:cd:40:8a:ac:0d:ab:c7:
86:17:8a:51:fd:53:c3:16:14:5f:4e:6e:87:f9:8d:e8:a9:79:
e5:c3:dc:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fQkraPAJeThhDUyEADNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjcxM2NmMjA1NTJkNmM1YzIzZjA5ZTdiMzc2Njk4NDZm
OWNhNTAwHhcNMjUwNDI5MDMwMDIyWhcNMjUwNDMwMDMwMDIyWjAzMTEwLwYDVQQD
Eyg5ZDZlODQyNDJkMWZjNTJkYTQxMDE5MTY0Y2JmN2JlOWJhOWExZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHuuKRq5+/TB8neOg1ld9tFvNcq3
AVls0UnV6GF0S39AX8HRATc5kXD03ah7Kzwjr7ndJ9ZgumX+hT64QoiT3kUWcNVF
eJS+JvEMSHJCjF8H5ei8luA2M7jbvdqvMN0KAgDS8lIYBlFRqgluqHzXE4wTn13S
so9P64BOXGICQcwb7nBFOiO3Au9bGhdw6cy/A1h/Mjo5798BPbQQAw7Y0pjUjtTL
9RzRWBbqkdiIliomp9xsjdQL/hBacKUveXkT2sBdxNTWXUh9ykNSHp3lT2hF/gQz
yON3M+T9j7f9VokHfGd4Vr4k8aNjmVeXdy/FYdf/CkqVsofOCkEHwKvkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1uhCQtH8UtpBAZFky/e+m6mh4YMB8GA1UdIwQY
MBaAFLH3E88gVS1sXCPwnns3ZphG+cpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYt
Njk0ZDc4YjMyZDIwLzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMWFmMjktN2YwOS00ZjljLWFjZDYtNjk0ZDc4YjMyZDIw
LzEvc2ZjVHp5QlZMV3hjSV9DZWV6ZG1tRWI1eWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXplNntEU
8HYHFgU1bY3V4nXu+3ZOnechAiQ1+BVdLwJ9w1o9UCLSre+IPFH36OOM9OTYMRNm
15aukFN7bw9IgaiYiUwhRwny4KXgn/EtjA58flvVWcpFkFepU0lpwoLo6uwPxoqw
jrjmidbAGpo5oG41qmaxDBsPPMuT5F8EIm6QT8MHSZbeJDUf4GnhuOD4icp2BXzn
R8ULyxvnvN0eEi/vYhSkThp4aX5zTb6FdUnF4DUErshkdUD5wiv9lA30bQP4UQdE
vWDtqOYvCTSCQYQIM7IQUr8HEVgJciLUbQvfgybNQIqsDavHhheKUf1TwxYUX05u
h/mN6Kl55cPcug==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:04 2025 by rpki-client