Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: TFqCHIUu9hW5d/KwIOYqEr5z+NuJLLZIBrBqbwYOEzQ=
Subject key identifier: 6D:8B:31:58:1D:37:67:83:BA:83:26:3F:B9:2B:54:DE:3A:33:E2:09
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 0196AA9E30AF5D40BEEC9D471434545E9D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 12:00:15 +0000
Manifest this update: Wed 07 May 2025 12:00:15 +0000
Manifest next update: Thu 08 May 2025 12:00:15 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: KhqaQOVygRFWr9zyj0iPE6wm8qzypsqaeL2GkCxsTAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:30:af:5d:40:be:ec:9d:47:14:34:54:5e:9d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: May 7 12:00:15 2025 GMT
Not After : May 8 12:00:15 2025 GMT
Subject: CN=6d8b31581d376783ba83263fb92b54de3a33e209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:4b:af:9a:22:cb:55:80:eb:ce:4e:00:fa:
31:77:bf:f6:52:7b:f7:af:c9:5c:2d:03:c0:09:b9:
be:a4:a2:3e:48:20:01:8d:5e:23:6b:4a:b4:9f:f5:
c1:cb:d1:08:20:b1:c6:64:a3:82:e4:a1:ab:2a:75:
14:83:70:e2:b7:3f:5b:d9:cd:aa:c8:74:16:cd:e6:
3e:1e:02:ce:c1:83:da:89:b0:0c:4f:6e:34:58:bd:
40:48:3a:e6:0c:69:b7:41:65:bd:e8:8d:8e:cf:ce:
7a:4a:ab:6f:db:82:66:b0:06:f7:1c:48:58:06:d9:
07:2a:c5:6c:66:d0:de:65:d8:d1:fb:40:83:0e:86:
b3:98:af:6d:e1:04:5b:98:99:ad:9f:95:15:06:a0:
ba:6e:d6:f1:8d:81:06:2d:23:4e:51:c8:89:82:b3:
c5:f5:a1:fd:64:9a:be:d8:e7:82:af:a4:7c:91:19:
be:cc:4f:30:5c:73:d7:fe:61:85:33:e1:97:50:3b:
9b:b1:dd:25:42:14:93:7c:28:07:cb:48:10:1b:e6:
87:aa:5d:19:47:bc:25:1e:8f:08:e3:f4:40:49:bb:
68:ef:1b:3f:d9:5c:aa:94:c4:a8:1f:76:02:10:41:
97:95:32:55:8e:f8:23:8f:15:5b:4a:04:4c:a6:19:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:31:58:1D:37:67:83:BA:83:26:3F:B9:2B:54:DE:3A:33:E2:09
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:79:a7:5c:37:c4:64:b3:8c:9b:bb:5a:b7:b6:42:91:a3:2e:
3b:9b:92:9a:f7:fb:ff:b3:d7:28:04:27:e2:c6:5b:ac:9c:56:
ed:a2:80:5b:1d:bf:e4:34:52:ef:65:d8:aa:ff:e9:c5:24:8f:
81:50:ae:2e:12:d7:ec:e7:91:f7:18:b2:48:43:fe:77:ab:20:
47:62:3e:23:8e:b9:f9:c7:07:89:32:8f:9d:11:64:b7:32:6b:
da:6e:4b:bf:06:27:a9:d4:64:ae:9b:fe:cf:3b:50:e4:35:31:
43:97:94:7f:a7:72:1f:79:3a:33:cd:ee:e4:ad:f5:4b:4e:b1:
ff:c7:e3:9c:96:cd:16:00:c2:60:ac:5f:d7:28:cd:d9:cf:a5:
40:42:d3:42:f2:21:21:c1:4a:18:a7:b9:88:6c:b5:b5:5d:33:
ac:48:0c:92:da:01:d1:76:03:4a:58:b5:99:d8:2e:1a:15:1d:
a3:57:bd:36:3b:31:5e:59:97:e5:e2:f8:5a:cb:ac:5a:b7:2d:
f6:cc:ef:d7:0f:5a:30:b7:32:78:4c:fd:e3:e5:e0:32:a9:af:
9f:27:e2:6f:f8:27:a7:08:c2:b9:24:f7:71:83:ca:94:cf:9f:
be:1b:70:29:0f:1b:dc:89:47:24:76:68:6b:22:f1:b7:1c:9a:
4b:15:40:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqnjCvXUC+7J1HFDRUXp2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk
MDg0ODUwHhcNMjUwNTA3MTIwMDE1WhcNMjUwNTA4MTIwMDE1WjAzMTEwLwYDVQQD
Eyg2ZDhiMzE1ODFkMzc2NzgzYmE4MzI2M2ZiOTJiNTRkZTNhMzNlMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tBLr5oiy1WA685OAPoxd7/2Unv3
r8lcLQPACbm+pKI+SCABjV4ja0q0n/XBy9EIILHGZKOC5KGrKnUUg3Ditz9b2c2q
yHQWzeY+HgLOwYPaibAMT240WL1ASDrmDGm3QWW96I2Oz856Sqtv24JmsAb3HEhY
BtkHKsVsZtDeZdjR+0CDDoazmK9t4QRbmJmtn5UVBqC6btbxjYEGLSNOUciJgrPF
9aH9ZJq+2OeCr6R8kRm+zE8wXHPX/mGFM+GXUDubsd0lQhSTfCgHy0gQG+aHql0Z
R7wlHo8I4/RASbto7xs/2VyqlMSoH3YCEEGXlTJVjvgjjxVbSgRMphmc8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2LMVgdN2eDuoMmP7krVN46M+IJMB8GA1UdIwQY
MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt
NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1
LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHmnXDfE
ZLOMm7tat7ZCkaMuO5uSmvf7/7PXKAQn4sZbrJxW7aKAWx2/5DRS72XYqv/pxSSP
gVCuLhLX7OeR9xiySEP+d6sgR2I+I465+ccHiTKPnRFktzJr2m5LvwYnqdRkrpv+
zztQ5DUxQ5eUf6dyH3k6M83u5K31S06x/8fjnJbNFgDCYKxf1yjN2c+lQELTQvIh
IcFKGKe5iGy1tV0zrEgMktoB0XYDSli1mdguGhUdo1e9NjsxXlmX5eL4WsusWrct
9szv1w9aMLcyeEz94+XgMqmvnyfib/gnpwjCuST3cYPKlM+fvhtwKQ8b3IlHJHZo
ayLxtxyaSxVAtg==
-----END CERTIFICATE-----
Generated at Wed May 7 17:13:37 2025 by rpki-client