Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
File: sKEzNsOO66EMusnCjK8e_PRKyGM.mft (raw, json)
Hash identifier: u2z92gjvh4ZkgbmVgaxcaBDFkmGHsh5MWJriIZy9uHs=
Subject key identifier: AF:72:20:3A:84:1E:56:7D:71:F8:93:BE:DD:82:86:87:43:56:DE:95
Authority key identifier: B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
Certificate issuer: /CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Certificate serial: 0196756736296DFCFB8864DA4F88A13E07C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
Manifest number: 07D8
Signing time: Sun 27 Apr 2025 04:00:20 +0000
Manifest this update: Sun 27 Apr 2025 04:00:20 +0000
Manifest next update: Mon 28 Apr 2025 04:00:20 +0000
Files and hashes: 1: sKEzNsOO66EMusnCjK8e_PRKyGM.crl (hash: MUtzJqQeBazRlr797RhqW+Ngq9Pn71dpbhEJlZ3UvDQ=)
2: y3LlHCcHKFo-BQ_p86jxyc013sQ.roa (hash: 70W6ragDKntXJcQVl89iuaUr+4h8ye/EbsXthKhbWqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:36:29:6d:fc:fb:88:64:da:4f:88:a1:3e:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a13336c38eeba10cbac9c28caf1efcf44ac863
Validity
Not Before: Apr 27 04:00:20 2025 GMT
Not After : Apr 28 04:00:20 2025 GMT
Subject: CN=af72203a841e567d71f893bedd8286874356de95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:0f:ca:68:1c:cf:86:a8:23:3a:74:fb:e0:
7a:72:42:68:56:08:de:64:40:5c:0b:49:f6:d1:d7:
6e:6a:91:fc:ac:2e:a6:ee:83:1d:10:64:a3:aa:51:
30:42:c9:e6:b3:3b:35:d3:36:7f:60:87:41:ce:78:
1e:09:4c:c0:6c:2e:46:cf:20:f8:8d:62:ea:71:b8:
46:d6:d7:75:c8:ea:a9:f8:40:3c:75:d4:a4:5a:ac:
86:ef:3f:eb:f6:69:20:74:dc:7d:ec:01:c7:cb:3b:
cd:f7:0d:5d:94:76:5c:eb:f7:4c:d8:b2:ea:89:08:
7a:81:1b:75:97:10:f3:01:dd:9c:03:20:17:88:cf:
79:11:73:f7:21:bf:72:37:9b:27:44:b0:4b:c9:01:
a6:f3:5b:2d:4f:55:c8:41:71:84:f0:69:8c:ec:be:
7b:0c:31:77:c9:87:25:34:34:75:ca:a6:43:89:5e:
2b:ae:6b:ee:87:ac:dd:a8:f4:58:f2:6f:88:be:b6:
5e:69:6e:bc:aa:6c:d1:cd:cf:7b:9b:ae:99:6f:c6:
75:f7:7d:42:ba:b3:50:54:30:10:0a:57:dc:45:de:
31:75:29:16:95:b7:3e:34:c5:d2:d2:68:90:ea:4a:
63:a1:01:21:67:aa:d3:bd:00:4f:2e:3a:bd:bd:6e:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:20:3A:84:1E:56:7D:71:F8:93:BE:DD:82:86:87:43:56:DE:95
X509v3 Authority Key Identifier:
keyid:B0:A1:33:36:C3:8E:EB:A1:0C:BA:C9:C2:8C:AF:1E:FC:F4:4A:C8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKEzNsOO66EMusnCjK8e_PRKyGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/238486-3e8d-4bc3-a19d-0a768b24125a/1/sKEzNsOO66EMusnCjK8e_PRKyGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:0d:d1:13:fd:6f:4c:76:68:c2:ba:17:67:06:1a:2f:32:
54:eb:10:c7:8d:1b:87:0c:17:b5:cf:43:00:b4:fb:5a:3b:c9:
4c:a7:f9:27:c2:55:14:8c:6a:44:90:e0:5e:f6:71:f2:43:d8:
0f:71:ea:e4:a7:2d:17:1f:a2:99:48:25:3a:a0:42:a1:68:86:
96:f9:50:ed:c7:28:c6:7c:9c:45:26:40:94:7b:91:7a:d1:6a:
76:f7:fc:3a:30:78:d2:f5:43:79:d5:19:96:44:26:aa:e4:d6:
6b:2a:24:5a:30:ff:c8:06:d3:ba:5f:14:db:14:03:bd:76:92:
3c:a4:86:a1:e4:42:6d:38:0f:53:a8:8c:8e:a8:4a:68:1f:c2:
29:0a:b4:93:a1:b3:f2:f4:9b:df:f2:85:7a:93:91:55:43:2d:
69:ab:24:22:61:0a:29:9f:be:bb:91:57:d5:97:dd:e4:8c:88:
5b:d1:b3:40:b1:a3:85:6f:fc:55:46:cf:e8:4b:ad:aa:19:bd:
33:65:67:03:77:43:62:24:31:b1:82:34:99:20:2a:9c:9f:33:
d5:2f:1d:4d:e5:b0:5f:63:72:66:72:48:d8:f1:8b:59:6d:b1:
24:ad:43:69:48:3a:14:3c:f7:9f:b7:fa:dd:08:cd:5a:bc:59:
fd:e9:a0:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1ZzYpbfz7iGTaT4ihPgfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTEzMzM2YzM4ZWViYTEwY2JhYzljMjhjYWYxZWZjZjQ0
YWM4NjMwHhcNMjUwNDI3MDQwMDIwWhcNMjUwNDI4MDQwMDIwWjAzMTEwLwYDVQQD
EyhhZjcyMjAzYTg0MWU1NjdkNzFmODkzYmVkZDgyODY4NzQzNTZkZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnYPymgcz4aoIzp0++B6ckJoVgje
ZEBcC0n20dduapH8rC6m7oMdEGSjqlEwQsnmszs10zZ/YIdBzngeCUzAbC5GzyD4
jWLqcbhG1td1yOqp+EA8ddSkWqyG7z/r9mkgdNx97AHHyzvN9w1dlHZc6/dM2LLq
iQh6gRt1lxDzAd2cAyAXiM95EXP3Ib9yN5snRLBLyQGm81stT1XIQXGE8GmM7L57
DDF3yYclNDR1yqZDiV4rrmvuh6zdqPRY8m+IvrZeaW68qmzRzc97m66Zb8Z1931C
urNQVDAQClfcRd4xdSkWlbc+NMXS0miQ6kpjoQEhZ6rTvQBPLjq9vW62dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9yIDqEHlZ9cfiTvt2ChodDVt6VMB8GA1UdIwQY
MBaAFLChMzbDjuuhDLrJwoyvHvz0SshjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQt
MGE3NjhiMjQxMjVhLzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMzg0ODYtM2U4ZC00YmMzLWExOWQtMGE3NjhiMjQxMjVh
LzEvc0tFek5zT082NkVNdXNuQ2pLOGVfUFJLeUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1QN0RP9
b0x2aMK6F2cGGi8yVOsQx40bhwwXtc9DALT7WjvJTKf5J8JVFIxqRJDgXvZx8kPY
D3Hq5KctFx+imUglOqBCoWiGlvlQ7ccoxnycRSZAlHuRetFqdvf8OjB40vVDedUZ
lkQmquTWayokWjD/yAbTul8U2xQDvXaSPKSGoeRCbTgPU6iMjqhKaB/CKQq0k6Gz
8vSb3/KFepORVUMtaaskImEKKZ++u5FX1Zfd5IyIW9GzQLGjhW/8VUbP6Eutqhm9
M2VnA3dDYiQxsYI0mSAqnJ8z1S8dTeWwX2NyZnJI2PGLWW2xJK1DaUg6FDz3n7f6
3QjNWrxZ/emgGw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:27 2025 by rpki-client