Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: dmIEUmWKqFMEyEz/+bLc58tBdTKK2eFV7eMDaC8Z4hs=
Subject key identifier: 8D:34:46:E6:E6:7C:BE:01:75:6E:45:36:79:FC:C4:D5:62:2F:BE:C2
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 0196892532D29D2967A85A433AA4BEF20E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 12AA
Signing time: Thu 01 May 2025 00:00:38 +0000
Manifest this update: Thu 01 May 2025 00:00:38 +0000
Manifest next update: Fri 02 May 2025 00:00:38 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: cOKIE+SySgCliqRzLLiI+GH41GFzce026Fw7irpyTK8=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:32:d2:9d:29:67:a8:5a:43:3a:a4:be:f2:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: May 1 00:00:38 2025 GMT
Not After : May 2 00:00:38 2025 GMT
Subject: CN=8d3446e6e67cbe01756e453679fcc4d5622fbec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:18:96:93:42:cb:fe:4f:46:8d:23:73:db:
0e:d1:90:a8:2d:13:1c:d4:6a:bf:51:d8:9d:ef:cf:
6f:a9:88:e8:11:69:6e:3e:94:ca:02:d9:12:dd:cc:
e4:8c:98:e6:bf:8e:51:01:e6:73:05:3a:30:91:df:
d1:4d:a4:9f:97:09:ff:e4:64:a4:a3:88:4c:df:4a:
fd:2a:cd:9c:50:ca:16:2b:fb:30:cb:4a:19:d9:74:
6a:79:c4:26:7a:d6:60:c5:10:ef:2b:8c:c7:2c:dc:
2c:75:70:a5:69:46:e5:a8:e2:a6:bf:54:3c:35:82:
54:88:ec:32:de:4d:3c:1c:c1:68:a8:29:30:a9:76:
32:32:d1:f4:b7:dc:13:73:01:22:47:47:04:88:35:
f5:5f:78:93:c1:7c:18:47:21:43:d6:ca:61:c3:25:
e0:a6:eb:06:be:c8:d7:d9:95:01:84:6d:e7:ef:5c:
e3:55:5f:b9:b9:dd:aa:bd:cb:ca:c5:ec:26:71:15:
8d:d0:e3:a9:24:15:b8:42:db:26:85:27:08:76:cd:
de:50:e0:4e:05:9c:f4:89:44:5d:09:01:59:e7:b0:
8a:47:64:0e:4d:43:a0:fa:c0:c9:f3:01:18:ca:40:
a2:89:78:8a:d0:81:68:b4:09:1d:97:f5:56:97:76:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:46:E6:E6:7C:BE:01:75:6E:45:36:79:FC:C4:D5:62:2F:BE:C2
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:50:b2:d1:1d:7a:ae:57:29:0e:78:03:87:bf:8d:d3:a6:
af:e3:ba:8e:81:81:3f:8a:e8:6e:73:51:c0:8c:05:5d:8f:2b:
3a:dd:ee:0e:1b:97:2e:cd:ad:d6:6c:2e:af:61:eb:a4:41:6f:
73:82:4b:c9:28:a3:36:60:9a:90:b4:8e:19:fe:c8:e2:af:0e:
ce:51:19:60:a1:60:da:3d:71:4b:e9:54:ff:34:d3:ad:2c:2a:
ef:8a:9a:78:75:26:5c:d6:d7:14:6c:58:28:cb:d5:1b:5f:21:
e9:95:92:51:e3:be:64:96:ee:9b:8a:ff:30:98:a1:30:cf:64:
c3:64:95:68:2a:0a:cc:c4:cf:e0:8f:b3:a4:98:95:49:35:ac:
1d:90:cc:39:63:6d:09:87:bf:4d:59:9c:55:92:05:82:8d:39:
91:f5:82:a2:f2:3d:1e:a1:c1:6c:6a:0d:70:21:48:d1:49:93:
08:73:df:5e:8a:20:a1:5f:a8:2b:62:de:56:a6:02:3d:ed:f8:
e1:93:65:eb:83:34:a4:74:40:87:1b:c9:d0:e0:1c:1e:70:97:
76:cd:c2:e0:e7:b3:dd:ee:8d:fc:a1:49:ad:94:db:5a:85:a7:
66:ed:69:2b:2c:f0:fb:03:4e:95:89:1d:44:cd:e2:64:86:3a:
6d:5d:31:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJJTLSnSlnqFpDOqS+8g5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGFlNzg3MTUyNWJlMmVhNGQwZGZmZGFlNGYzYThiZmYz
NzI0OTYwHhcNMjUwNTAxMDAwMDM4WhcNMjUwNTAyMDAwMDM4WjAzMTEwLwYDVQQD
Eyg4ZDM0NDZlNmU2N2NiZTAxNzU2ZTQ1MzY3OWZjYzRkNTYyMmZiZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo0YlpNCy/5PRo0jc9sO0ZCoLRMc
1Gq/Udid789vqYjoEWluPpTKAtkS3czkjJjmv45RAeZzBTowkd/RTaSflwn/5GSk
o4hM30r9Ks2cUMoWK/swy0oZ2XRqecQmetZgxRDvK4zHLNwsdXClaUblqOKmv1Q8
NYJUiOwy3k08HMFoqCkwqXYyMtH0t9wTcwEiR0cEiDX1X3iTwXwYRyFD1sphwyXg
pusGvsjX2ZUBhG3n71zjVV+5ud2qvcvKxewmcRWN0OOpJBW4QtsmhScIds3eUOBO
BZz0iURdCQFZ57CKR2QOTUOg+sDJ8wEYykCiiXiK0IFotAkdl/VWl3Zl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI00RubmfL4BdW5FNnn8xNViL77CMB8GA1UdIwQY
MBaAFEqK54cVJb4upNDf/a5POov/NySWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQt
OThmNzQ1NGJhNmNlLzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mYTZjYzItMjdhZi00MTZjLWExMzQtOThmNzQ1NGJhNmNl
LzEvU29ybmh4VWx2aTZrME5fOXJrODZpXzgzSkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTxQstEd
eq5XKQ54A4e/jdOmr+O6joGBP4robnNRwIwFXY8rOt3uDhuXLs2t1mwur2HrpEFv
c4JLySijNmCakLSOGf7I4q8OzlEZYKFg2j1xS+lU/zTTrSwq74qaeHUmXNbXFGxY
KMvVG18h6ZWSUeO+ZJbum4r/MJihMM9kw2SVaCoKzMTP4I+zpJiVSTWsHZDMOWNt
CYe/TVmcVZIFgo05kfWCovI9HqHBbGoNcCFI0UmTCHPfXoogoV+oK2LeVqYCPe34
4ZNl64M0pHRAhxvJ0OAcHnCXds3C4Oez3e6N/KFJrZTbWoWnZu1pKyzw+wNOlYkd
RM3iZIY6bV0xgw==
-----END CERTIFICATE-----
Generated at Thu May 1 02:20:38 2025 by rpki-client