Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: sMwtzZSd3AchKgACsB4OGVOvSpVDiR4H74oGrHOKNBE=
Subject key identifier: 19:E7:6A:1C:68:7A:76:06:61:8E:FE:7E:FB:1B:D5:1B:80:1B:BD:1A
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 019677FAAEE75CC9A71A67575C4F1CA6FF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 16:00:39 +0000
Manifest this update: Sun 27 Apr 2025 16:00:39 +0000
Manifest next update: Mon 28 Apr 2025 16:00:39 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: nHpKIPjOw6WFpcnqWreMGxpU+KbzZANo7x2/xFbReD4=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:ae:e7:5c:c9:a7:1a:67:57:5c:4f:1c:a6:ff:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Apr 27 16:00:39 2025 GMT
Not After : Apr 28 16:00:39 2025 GMT
Subject: CN=19e76a1c687a7606618efe7efb1bd51b801bbd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:f3:d5:29:fb:bd:77:1f:5e:b1:94:aa:b6:
5a:d3:85:0f:12:62:7b:ea:ed:72:ee:bd:9c:88:00:
e0:c9:04:e4:61:ee:0a:f8:eb:40:ef:92:92:b7:4d:
54:4f:97:a3:45:da:de:a4:f9:d4:01:46:aa:51:34:
2a:dd:87:83:56:99:9a:3a:94:84:c7:34:37:d6:20:
94:57:0e:9a:fd:3d:c4:c9:e5:1d:77:f0:48:16:64:
a0:6a:4a:11:63:0a:27:a2:55:3e:d3:9a:2c:8f:61:
c4:b8:f0:a1:61:45:a6:41:87:f7:e5:4f:50:9d:50:
f1:64:d8:a9:df:c2:df:40:09:58:62:3b:ad:a0:d9:
b1:70:a3:e1:f1:f2:c2:2c:28:5b:e4:36:7b:87:fc:
4d:2a:37:8d:85:58:19:37:36:1e:b4:a4:2a:3a:77:
b9:d5:af:6a:b3:12:b2:c6:ac:8c:05:33:40:00:ab:
93:78:c4:06:a9:96:92:a0:30:aa:32:e6:9a:68:e2:
fe:a3:9f:42:04:b1:f8:62:4a:91:80:13:ad:6b:56:
31:65:a6:f7:84:4b:9e:50:ea:44:2f:e7:53:39:21:
fe:30:0b:b5:7f:2b:5c:a2:17:b1:34:b2:47:85:0e:
12:4d:c2:4f:c5:08:b4:a1:69:0f:da:4d:28:6b:62:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:6A:1C:68:7A:76:06:61:8E:FE:7E:FB:1B:D5:1B:80:1B:BD:1A
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d6:a3:b6:42:f5:d3:03:7f:07:2c:7a:aa:40:d7:9a:72:c1:
52:43:68:4c:6a:6e:d1:e5:e5:bd:ad:31:ea:98:1a:ad:22:f4:
72:4b:21:7d:a9:1a:60:4d:e2:de:f0:75:fb:9c:4b:ed:32:69:
e6:25:2e:70:f9:58:6d:71:ad:4d:e8:99:40:9c:d6:61:ff:6b:
33:00:d2:35:9c:c4:9d:59:9f:de:e6:bc:d3:75:ba:9a:19:d7:
fd:ed:ae:25:18:e5:74:a5:53:69:f4:4c:74:fc:f6:63:f1:20:
23:a1:98:1c:c1:25:d9:74:eb:11:f1:80:b5:80:4f:0c:1d:04:
3e:67:4d:70:78:1a:17:3a:0f:00:e4:e5:c4:4a:84:b7:94:6d:
88:e2:f4:af:b2:7b:71:db:b3:d2:d0:a7:2a:f4:2a:d2:00:36:
66:38:f0:ba:53:e7:33:b2:e0:5c:bc:b6:49:f0:5a:d3:3a:da:
4a:0b:00:18:1d:eb:5c:e5:82:79:45:f2:d7:26:66:fd:98:0a:
b7:74:d5:06:87:fc:91:b7:17:25:cf:83:7e:9f:f5:69:78:8b:
74:8a:75:71:f3:1a:64:1b:4c:da:5c:7e:f0:18:86:b9:ad:25:
4d:09:9f:7b:e4:e1:86:3e:e4:44:2d:09:a2:da:ad:f8:7c:1f:
08:63:c2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+q7nXMmnGmdXXE8cpv+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YWYyMTUzZjAyNDA5YTQ2NGU0ZDc0NjFjODAyZDRiOGRk
MTBkZmYwHhcNMjUwNDI3MTYwMDM5WhcNMjUwNDI4MTYwMDM5WjAzMTEwLwYDVQQD
EygxOWU3NmExYzY4N2E3NjA2NjE4ZWZlN2VmYjFiZDUxYjgwMWJiZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMHz1Sn7vXcfXrGUqrZa04UPEmJ7
6u1y7r2ciADgyQTkYe4K+OtA75KSt01UT5ejRdrepPnUAUaqUTQq3YeDVpmaOpSE
xzQ31iCUVw6a/T3EyeUdd/BIFmSgakoRYwonolU+05osj2HEuPChYUWmQYf35U9Q
nVDxZNip38LfQAlYYjutoNmxcKPh8fLCLChb5DZ7h/xNKjeNhVgZNzYetKQqOne5
1a9qsxKyxqyMBTNAAKuTeMQGqZaSoDCqMuaaaOL+o59CBLH4YkqRgBOta1YxZab3
hEueUOpEL+dTOSH+MAu1fytcohexNLJHhQ4STcJPxQi0oWkP2k0oa2JY2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnnahxoenYGYY7+fvsb1RuAG70aMB8GA1UdIwQY
MBaAFEmvIVPwJAmkZOTXRhyALUuN0Q3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQt
NGVhNmRmYjJlNWQzLzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYjI1YjUtNzFlYS00NjlkLTk0ODQtNGVhNmRmYjJlNWQz
LzEvU2E4aFVfQWtDYVJrNU5kR0hJQXRTNDNSRGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9ajtkL1
0wN/Byx6qkDXmnLBUkNoTGpu0eXlva0x6pgarSL0ckshfakaYE3i3vB1+5xL7TJp
5iUucPlYbXGtTeiZQJzWYf9rMwDSNZzEnVmf3ua803W6mhnX/e2uJRjldKVTafRM
dPz2Y/EgI6GYHMEl2XTrEfGAtYBPDB0EPmdNcHgaFzoPAOTlxEqEt5RtiOL0r7J7
cduz0tCnKvQq0gA2ZjjwulPnM7LgXLy2SfBa0zraSgsAGB3rXOWCeUXy1yZm/ZgK
t3TVBof8kbcXJc+Dfp/1aXiLdIp1cfMaZBtM2lx+8BiGua0lTQmfe+Thhj7kRC0J
otqt+HwfCGPC4g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:53:29 2025 by rpki-client