Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: YAryYLerr9YRaB/0wbMuuoZ26p6y1YbOn2nZRHqnXpU=
Subject key identifier: F6:BB:DC:DD:3A:04:97:E4:0D:D9:AE:58:2F:68:A8:BA:E2:67:AF:74
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 019681A2D18884D59F196B8A65057C769DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 04B7
Signing time: Tue 29 Apr 2025 13:00:53 +0000
Manifest this update: Tue 29 Apr 2025 13:00:53 +0000
Manifest next update: Wed 30 Apr 2025 13:00:53 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: 97DuI5VdtIA6AyYp3AMiS0+JNRd7nh9JwC16ligTBpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:d1:88:84:d5:9f:19:6b:8a:65:05:7c:76:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Apr 29 13:00:53 2025 GMT
Not After : Apr 30 13:00:53 2025 GMT
Subject: CN=f6bbdcdd3a0497e40dd9ae582f68a8bae267af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:02:5e:12:e9:c8:ac:2f:e3:88:64:a4:37:
b5:54:9a:0f:5b:c9:bb:b1:cd:d4:84:f7:87:3e:5f:
00:5f:32:6d:81:c0:4b:e1:c1:2c:35:48:f9:de:72:
85:6b:76:35:28:a7:fc:a8:5f:16:79:b5:47:ee:06:
9e:0d:3c:1e:34:a4:31:45:56:8e:83:1e:90:41:13:
a5:de:0c:7c:dc:45:98:87:f9:50:18:03:ab:30:5b:
46:76:33:eb:c4:d7:ea:2b:bd:d8:0f:97:e8:4c:4a:
24:a5:7e:28:df:bd:cd:42:cf:cf:8a:b6:17:ab:4a:
7a:ed:01:bb:e4:53:d2:79:1b:f1:1f:76:95:91:b2:
5c:59:5e:4d:fa:70:91:83:a7:21:c0:64:1e:0b:e9:
a7:9c:8c:be:17:2e:e8:52:54:33:95:d0:88:ca:7e:
0a:9c:0b:28:22:c2:3b:89:06:e9:d6:78:d7:32:b9:
d4:1f:b3:39:a1:c9:9c:ca:4c:4c:b5:fb:97:2f:ac:
c6:bb:fa:e7:14:71:98:9b:8c:2b:e4:e2:a5:cb:5e:
17:38:ce:a4:c4:6f:55:f8:e4:1a:77:1a:ce:3b:8b:
59:85:af:09:8e:70:24:10:dc:3a:d0:39:35:22:3a:
9d:f0:86:e7:7d:c7:f0:df:6f:91:1b:21:f3:35:d3:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:DC:DD:3A:04:97:E4:0D:D9:AE:58:2F:68:A8:BA:E2:67:AF:74
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:40:a1:18:3a:b8:2c:da:10:86:9a:5e:b0:fd:9a:9a:e1:7b:
59:1c:68:a6:6e:96:91:68:83:44:3d:a7:72:79:5a:4d:d4:0e:
b8:51:6e:0d:0a:f4:8d:f3:d5:e9:44:78:81:e4:a4:89:f1:eb:
38:d5:49:57:97:8f:16:34:e3:c3:b1:8e:42:b6:e7:21:cf:14:
9a:0b:b8:ed:fb:13:a6:c4:69:c3:43:08:06:13:d6:b1:d5:1a:
0d:cb:e5:19:1b:3d:4a:00:ec:2d:99:c2:2c:08:d7:4b:78:f6:
6a:18:7c:bd:0e:87:3b:e8:19:83:ae:35:86:9b:3e:d3:ae:c0:
d7:93:1f:81:61:6f:47:45:23:76:4f:fa:6c:43:d1:05:17:8d:
5e:8c:5a:e4:97:25:af:a1:26:a0:14:ee:ae:db:e1:61:c9:43:
04:7e:03:40:f7:a9:22:ee:fe:eb:7a:92:72:68:fc:fb:2c:e8:
07:49:5d:38:44:55:b8:48:e7:1a:ab:68:53:72:ec:d5:38:15:
9f:d8:da:7e:5a:db:be:e1:22:bc:14:ef:23:c5:3c:0b:88:76:
83:71:73:33:19:39:0a:1c:29:a6:7c:f4:6b:be:1b:09:9c:66:
25:78:ae:42:8d:9e:97:d4:a9:46:f1:bf:62:f8:3d:59:a9:33:
60:38:eb:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBotGIhNWfGWuKZQV8dp33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz
N2Q1ZWUwHhcNMjUwNDI5MTMwMDUzWhcNMjUwNDMwMTMwMDUzWjAzMTEwLwYDVQQD
EyhmNmJiZGNkZDNhMDQ5N2U0MGRkOWFlNTgyZjY4YThiYWUyNjdhZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RYCXhLpyKwv44hkpDe1VJoPW8m7
sc3UhPeHPl8AXzJtgcBL4cEsNUj53nKFa3Y1KKf8qF8WebVH7gaeDTweNKQxRVaO
gx6QQROl3gx83EWYh/lQGAOrMFtGdjPrxNfqK73YD5foTEokpX4o373NQs/PirYX
q0p67QG75FPSeRvxH3aVkbJcWV5N+nCRg6chwGQeC+mnnIy+Fy7oUlQzldCIyn4K
nAsoIsI7iQbp1njXMrnUH7M5ocmcykxMtfuXL6zGu/rnFHGYm4wr5OKly14XOM6k
xG9V+OQadxrOO4tZha8JjnAkENw60Dk1Ijqd8Ibnfcfw32+RGyHzNdOjMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPa73N06BJfkDdmuWC9oqLriZ690MB8GA1UdIwQY
MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt
ZTFhNDI5MzUyMGJlLzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl
LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0ChGDq4
LNoQhppesP2amuF7WRxopm6WkWiDRD2ncnlaTdQOuFFuDQr0jfPV6UR4geSkifHr
ONVJV5ePFjTjw7GOQrbnIc8Umgu47fsTpsRpw0MIBhPWsdUaDcvlGRs9SgDsLZnC
LAjXS3j2ahh8vQ6HO+gZg641hps+067A15MfgWFvR0Ujdk/6bEPRBReNXoxa5Jcl
r6EmoBTurtvhYclDBH4DQPepIu7+63qScmj8+yzoB0ldOERVuEjnGqtoU3Ls1TgV
n9jaflrbvuEivBTvI8U8C4h2g3FzMxk5Chwppnz0a74bCZxmJXiuQo2el9SpRvG/
Yvg9WakzYDjruA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:43:56 2025 by rpki-client