Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: Zt56URimn4FDhewH6KRm+WzH87ihesM3TNCXHKg/eTg=
Subject key identifier: 78:F2:2F:85:C5:CD:0D:78:C8:D4:91:53:FA:A1:DA:64:35:E8:89:56
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019676E7B9C2A8624E674AA8810236D5001E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 14A4
Signing time: Sun 27 Apr 2025 11:00:19 +0000
Manifest this update: Sun 27 Apr 2025 11:00:19 +0000
Manifest next update: Mon 28 Apr 2025 11:00:19 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: cVl6aOiP/8LxQ7TLEl6Q6G9hzEouHHJHaG/S6pU24hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:b9:c2:a8:62:4e:67:4a:a8:81:02:36:d5:00:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Apr 27 11:00:19 2025 GMT
Not After : Apr 28 11:00:19 2025 GMT
Subject: CN=78f22f85c5cd0d78c8d49153faa1da6435e88956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:07:d8:8d:ad:31:c0:98:64:e2:c1:f2:d8:
73:ba:4e:d2:83:3c:88:5e:c4:ef:4d:7c:b1:cb:7e:
18:9f:f0:74:d3:59:34:0f:7c:0b:6d:71:1d:72:3f:
cc:79:b6:cc:b3:c8:da:b7:61:24:09:78:b0:20:48:
5f:4d:01:68:e9:a6:86:d8:c6:9c:41:7b:b7:c0:cf:
9d:55:7f:7a:6e:20:77:3b:41:f0:5a:26:9c:88:c8:
f9:b8:fa:5a:71:c0:8b:6c:dc:49:b7:06:68:ca:29:
37:a7:0a:1e:ec:f4:2d:7f:69:6c:2e:e2:47:dc:d0:
99:21:2f:45:0a:5b:a1:4b:94:ae:e1:a6:aa:1d:13:
7a:18:c6:db:51:bf:9b:50:83:fc:8d:b2:bb:7b:19:
0e:57:15:c9:8f:f0:65:a8:a1:96:82:8d:83:69:09:
7d:eb:d4:e6:5c:a3:6d:b4:69:ce:59:3e:92:37:d4:
64:59:ef:7b:15:7e:5b:02:78:b1:cc:ac:dc:ed:14:
4e:04:96:70:7d:56:c2:05:66:7f:fe:22:30:d3:24:
bc:29:7c:f9:ac:50:ae:13:7f:43:4e:fd:21:0a:0a:
83:ba:cf:85:29:f9:27:4b:3a:2a:77:04:1f:57:8b:
31:5e:5e:f4:fe:ff:58:2c:1e:39:de:c9:1b:70:db:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:2F:85:C5:CD:0D:78:C8:D4:91:53:FA:A1:DA:64:35:E8:89:56
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b0:9a:7f:d0:ec:53:ff:84:07:c5:14:2f:91:82:3b:3e:78:
22:8c:78:0b:19:d2:91:3e:87:e5:b7:a8:11:6b:cd:fe:34:2f:
c4:e2:49:bd:be:74:6c:96:41:76:47:77:06:b2:0f:cb:de:a4:
59:21:88:9d:25:c5:f8:36:aa:44:43:4f:d9:4d:b7:b0:e4:f7:
93:be:5a:ed:33:ec:89:b9:26:4b:9d:f6:30:6e:8c:f1:b8:9a:
05:ee:8e:f5:6f:8b:e0:1f:25:07:44:08:fd:3f:8a:79:ba:43:
7d:68:76:6a:57:0e:0e:60:19:1e:76:46:6f:69:7b:4c:38:f4:
52:3e:84:87:12:33:0e:08:13:aa:d0:c6:00:83:d3:62:bc:0c:
2a:0b:ac:88:4c:d4:87:96:84:34:de:82:8a:48:ac:a4:0b:b4:
fb:72:b3:10:a9:d4:51:af:00:1a:d9:3d:06:f1:e7:66:2b:6a:
21:e2:97:f2:e3:15:8a:8a:ee:19:c9:bf:9a:28:2d:26:15:c6:
8d:46:c2:68:b9:41:94:d8:fe:c4:b8:78:bb:2f:bd:02:67:57:
98:ca:09:5a:84:0e:b2:8a:e8:12:b0:46:ba:c3:37:22:fa:ba:
15:3b:43:4f:a8:5c:b3:c1:fb:9a:fa:b2:c0:6e:64:c1:cd:98:
56:d3:9b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ257nCqGJOZ0qogQI21QAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw
MjI5NTkwHhcNMjUwNDI3MTEwMDE5WhcNMjUwNDI4MTEwMDE5WjAzMTEwLwYDVQQD
Eyg3OGYyMmY4NWM1Y2QwZDc4YzhkNDkxNTNmYWExZGE2NDM1ZTg4OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRsH2I2tMcCYZOLB8thzuk7SgzyI
XsTvTXyxy34Yn/B001k0D3wLbXEdcj/MebbMs8jat2EkCXiwIEhfTQFo6aaG2Mac
QXu3wM+dVX96biB3O0HwWiaciMj5uPpaccCLbNxJtwZoyik3pwoe7PQtf2lsLuJH
3NCZIS9FCluhS5Su4aaqHRN6GMbbUb+bUIP8jbK7exkOVxXJj/BlqKGWgo2DaQl9
69TmXKNttGnOWT6SN9RkWe97FX5bAnixzKzc7RROBJZwfVbCBWZ//iIw0yS8KXz5
rFCuE39DTv0hCgqDus+FKfknSzoqdwQfV4sxXl70/v9YLB453skbcNsDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjyL4XFzQ14yNSRU/qh2mQ16IlWMB8GA1UdIwQY
MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt
NGVhN2ExYWU5OGRlLzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgtNGVhN2ExYWU5OGRl
LzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLCaf9Ds
U/+EB8UUL5GCOz54Iox4CxnSkT6H5beoEWvN/jQvxOJJvb50bJZBdkd3BrIPy96k
WSGInSXF+DaqRENP2U23sOT3k75a7TPsibkmS532MG6M8biaBe6O9W+L4B8lB0QI
/T+KebpDfWh2alcODmAZHnZGb2l7TDj0Uj6EhxIzDggTqtDGAIPTYrwMKgusiEzU
h5aENN6CikispAu0+3KzEKnUUa8AGtk9BvHnZitqIeKX8uMVioruGcm/migtJhXG
jUbCaLlBlNj+xLh4uy+9AmdXmMoJWoQOsoroErBGusM3Ivq6FTtDT6hcs8H7mvqy
wG5kwc2YVtOb9g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:30 2025 by rpki-client