Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: EF0k4aOAocesQ+mBTuVSI0rQ7BISFt82uGwVeIaDocA=
Subject key identifier: 3C:8E:24:14:E6:8D:37:F3:70:DB:55:E8:3F:07:07:0F:DA:26:88:D0
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 01968736718F92CD54B9CF83CFDC8A946ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0C34
Signing time: Wed 30 Apr 2025 15:00:14 +0000
Manifest this update: Wed 30 Apr 2025 15:00:14 +0000
Manifest next update: Thu 01 May 2025 15:00:14 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: 9aGYdQiDKReEQ5VhuBFszpSRProKmg4vB34lYbotF4k=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:71:8f:92:cd:54:b9:cf:83:cf:dc:8a:94:6e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Apr 30 15:00:14 2025 GMT
Not After : May 1 15:00:14 2025 GMT
Subject: CN=3c8e2414e68d37f370db55e83f07070fda2688d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:92:91:1a:3d:80:77:09:76:32:d8:65:3f:
59:d3:bd:ae:ec:94:c7:a7:f6:10:8b:5f:79:7d:2d:
81:73:ab:0f:c5:ab:3e:82:7e:93:e8:6f:b7:8e:d0:
92:e6:57:ff:4c:13:48:da:e5:e5:1e:57:d2:89:1b:
5d:c8:ff:4e:ab:79:c4:c9:fb:65:20:44:12:4e:f1:
c2:20:12:92:62:c9:97:ad:b4:2a:6a:d4:02:74:a5:
94:0f:60:e3:5b:61:c3:1d:e1:45:3f:70:d9:46:cb:
24:87:7d:b8:75:8b:c5:c8:31:37:13:16:6c:29:56:
b1:7c:3a:f4:04:6d:29:2e:9c:f1:95:89:b4:c7:25:
3a:37:90:80:70:b3:24:61:3a:b7:a9:c6:5d:ed:88:
14:45:1e:8f:23:c8:41:b8:ec:84:61:1a:f4:2a:38:
e1:e2:ea:be:16:1b:42:85:19:8a:09:34:f5:0f:c5:
ef:3e:7f:be:0f:af:31:f4:69:e8:d5:a2:1e:ef:04:
20:1d:01:1d:48:3a:1c:1d:82:90:57:46:29:1b:64:
f9:ac:ca:1f:c2:fd:8f:67:6f:0e:78:ff:dc:9c:ad:
83:a9:15:09:36:23:45:14:5e:6c:07:5a:62:7e:f2:
ed:77:60:d5:12:d2:e2:0e:02:df:9a:24:d4:08:07:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:24:14:E6:8D:37:F3:70:DB:55:E8:3F:07:07:0F:DA:26:88:D0
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fe:59:7f:40:c8:76:01:b1:1f:4b:bf:56:9b:31:39:f2:d8:
f6:61:3d:5c:e1:f2:cf:f5:e3:a7:fc:88:db:b2:bd:1b:26:5f:
77:1e:75:95:8d:cd:62:4c:b4:67:3f:ce:25:fa:b3:41:3b:a0:
26:43:51:86:44:8a:8a:3f:a8:b0:b8:d0:24:ae:74:2f:5e:e0:
c3:c3:b0:7e:29:79:82:62:ea:04:e5:e3:82:02:6c:eb:31:df:
9b:74:c3:03:e5:75:be:d2:c8:05:6c:b4:90:4a:91:10:99:7e:
75:98:42:8d:4f:83:5f:d7:a6:92:2b:e3:44:38:00:73:c1:0b:
9c:30:b2:47:b0:8a:8f:2f:4f:60:1f:ec:27:1b:d0:1f:dc:2b:
0a:18:9b:89:37:43:50:fa:1e:b0:b7:0f:95:5e:4e:9f:31:14:
99:94:ac:73:a4:ad:60:96:f7:05:e9:ae:c8:e0:a1:94:be:9d:
eb:cd:1d:65:ae:80:c5:8c:04:47:e9:2c:31:d8:c0:cc:55:99:
56:b4:fb:4c:24:20:c0:51:4e:36:4f:ba:b0:32:b4:dd:97:40:
6a:3c:a2:47:ba:27:07:e7:8e:1a:da:59:13:d0:35:0a:ed:1a:
62:db:19:79:4b:08:44:8e:6d:71:ac:90:8b:ff:00:63:a0:99:
fe:3d:79:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNnGPks1Uuc+Dz9yKlG7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjUwNDMwMTUwMDE0WhcNMjUwNTAxMTUwMDE0WjAzMTEwLwYDVQQD
EygzYzhlMjQxNGU2OGQzN2YzNzBkYjU1ZTgzZjA3MDcwZmRhMjY4OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppOSkRo9gHcJdjLYZT9Z072u7JTH
p/YQi195fS2Bc6sPxas+gn6T6G+3jtCS5lf/TBNI2uXlHlfSiRtdyP9Oq3nEyftl
IEQSTvHCIBKSYsmXrbQqatQCdKWUD2DjW2HDHeFFP3DZRsskh324dYvFyDE3ExZs
KVaxfDr0BG0pLpzxlYm0xyU6N5CAcLMkYTq3qcZd7YgURR6PI8hBuOyEYRr0Kjjh
4uq+FhtChRmKCTT1D8XvPn++D68x9Gno1aIe7wQgHQEdSDocHYKQV0YpG2T5rMof
wv2PZ28OeP/cnK2DqRUJNiNFFF5sB1pifvLtd2DVEtLiDgLfmiTUCAfjUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyOJBTmjTfzcNtV6D8HBw/aJojQMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf5Zf0DI
dgGxH0u/VpsxOfLY9mE9XOHyz/Xjp/yI27K9GyZfdx51lY3NYky0Zz/OJfqzQTug
JkNRhkSKij+osLjQJK50L17gw8Owfil5gmLqBOXjggJs6zHfm3TDA+V1vtLIBWy0
kEqREJl+dZhCjU+DX9emkivjRDgAc8ELnDCyR7CKjy9PYB/sJxvQH9wrChibiTdD
UPoesLcPlV5OnzEUmZSsc6StYJb3BemuyOChlL6d680dZa6AxYwER+ksMdjAzFWZ
VrT7TCQgwFFONk+6sDK03ZdAajyiR7onB+eOGtpZE9A1Cu0aYtsZeUsIRI5tcayQ
i/8AY6CZ/j15xA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:09:50 2025 by rpki-client