Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: pZ+0XZSBNFuyXfU+vs4PKAftGG7wGCd6hlhkcRxTSK8=
Subject key identifier: 46:40:87:3C:D1:1A:6F:DD:3B:0D:B0:D4:B3:E5:DE:A7:DA:FF:61:83
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019678D6B416C4586100ED36ACFC39B15F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 08F3
Signing time: Sun 27 Apr 2025 20:00:58 +0000
Manifest this update: Sun 27 Apr 2025 20:00:58 +0000
Manifest next update: Mon 28 Apr 2025 20:00:58 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: jPGIAlRWnlCT3+c0Axsv0HKxzR9M+n9AlPRv66LeVhs=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:b4:16:c4:58:61:00:ed:36:ac:fc:39:b1:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Apr 27 20:00:58 2025 GMT
Not After : Apr 28 20:00:58 2025 GMT
Subject: CN=4640873cd11a6fdd3b0db0d4b3e5dea7daff6183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:88:82:0d:7d:3a:23:5c:30:04:c6:ab:48:
16:9c:32:1e:11:12:e5:02:20:87:60:f3:5f:d6:47:
40:31:1a:04:42:d0:17:26:7c:93:8e:a0:0f:66:85:
53:71:d1:9d:e0:de:fb:60:3f:02:b9:31:30:2f:93:
75:e8:fd:af:55:75:46:76:86:39:95:91:0d:48:aa:
bd:7a:b3:f3:a9:63:03:93:49:56:a5:f8:28:27:65:
c4:b1:00:fd:c8:8f:59:39:98:e0:40:83:eb:82:56:
4e:80:3f:4e:ea:c5:66:6f:7f:89:a4:1e:8b:03:eb:
db:50:61:5e:1d:68:df:ff:9e:76:ae:38:74:d1:3a:
dc:a8:f0:e3:fd:ee:7d:bf:eb:9c:63:7e:d6:aa:07:
1b:0b:88:33:b4:6c:32:9b:94:e5:91:02:4f:f0:8f:
8c:9b:05:1d:f4:1d:97:0a:2e:43:43:b8:fd:6a:f2:
8d:2c:7a:88:a2:aa:cb:19:8d:35:f3:65:e2:fb:62:
24:b3:16:47:9d:50:69:74:25:a6:64:6e:a9:43:06:
c7:68:2c:43:74:6b:68:98:7a:68:e1:73:84:00:4f:
5b:35:60:88:8e:92:af:1e:e7:cf:c2:36:77:0e:fd:
32:f5:fd:b5:8d:21:32:4a:5f:a1:21:a1:9e:12:8f:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:87:3C:D1:1A:6F:DD:3B:0D:B0:D4:B3:E5:DE:A7:DA:FF:61:83
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:a8:03:04:db:5d:18:7e:1a:99:27:f3:ef:07:33:16:a9:
54:29:91:a7:42:52:ea:c7:8e:5a:76:e2:d0:9e:16:c2:22:3f:
1d:5b:a4:1a:47:66:a9:11:aa:ac:40:ee:54:03:38:22:b7:09:
8c:0f:64:d2:59:e0:4e:f9:c9:07:2f:60:b7:35:33:56:b9:08:
5b:2e:df:8d:9b:d5:c2:8d:b6:dc:81:c2:21:90:3c:d8:b4:80:
99:a6:6c:65:8f:e0:d7:9c:59:8d:0f:62:2b:a6:5a:3f:36:11:
69:1b:c2:21:9c:c7:b1:d8:07:d4:cd:9b:45:5c:3f:dc:75:3a:
1d:de:df:81:24:6b:2f:d2:b2:4d:dc:cc:21:b6:7b:83:f9:2c:
ae:02:b9:84:92:e0:06:e9:20:de:e0:1f:26:91:f0:71:e1:1b:
d7:b8:94:e9:18:76:06:83:88:7e:2d:b7:f9:cd:a1:02:ff:60:
90:9f:9b:76:92:cc:75:ef:ec:f6:0e:4f:85:83:68:fa:aa:59:
9f:73:a8:24:51:fe:85:ad:07:00:36:97:e9:44:76:3d:13:10:
ae:e3:c4:da:c0:7f:29:19:4f:6f:c9:27:81:aa:56:67:29:51:
e9:7d:0c:00:5c:8d:da:96:58:e8:b7:55:a5:93:77:97:4c:50:
f5:9d:7d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41rQWxFhhAO02rPw5sV96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTlhZmQyMWNiOGZiZTZiODUwODAwY2Q0YjQ5ZjI1NjJj
OTJiYTAwHhcNMjUwNDI3MjAwMDU4WhcNMjUwNDI4MjAwMDU4WjAzMTEwLwYDVQQD
Eyg0NjQwODczY2QxMWE2ZmRkM2IwZGIwZDRiM2U1ZGVhN2RhZmY2MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRCIgg19OiNcMATGq0gWnDIeERLl
AiCHYPNf1kdAMRoEQtAXJnyTjqAPZoVTcdGd4N77YD8CuTEwL5N16P2vVXVGdoY5
lZENSKq9erPzqWMDk0lWpfgoJ2XEsQD9yI9ZOZjgQIPrglZOgD9O6sVmb3+JpB6L
A+vbUGFeHWjf/552rjh00TrcqPDj/e59v+ucY37WqgcbC4gztGwym5TlkQJP8I+M
mwUd9B2XCi5DQ7j9avKNLHqIoqrLGY0182Xi+2IksxZHnVBpdCWmZG6pQwbHaCxD
dGtomHpo4XOEAE9bNWCIjpKvHufPwjZ3Dv0y9f21jSEySl+hIaGeEo/6iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZAhzzRGm/dOw2w1LPl3qfa/2GDMB8GA1UdIwQY
MBaAFEupr9IcuPvmuFCADNS0nyViySugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmIt
ZjY5NjIyNDI1NjUxLzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kNWJkMzktYmVhNi00NDdiLTgzYmItZjY5NjIyNDI1NjUx
LzEvUzZtdjBoeTQtLWE0VUlBTTFMU2ZKV0xKSzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlaoAwTb
XRh+Gpkn8+8HMxapVCmRp0JS6seOWnbi0J4WwiI/HVukGkdmqRGqrEDuVAM4IrcJ
jA9k0lngTvnJBy9gtzUzVrkIWy7fjZvVwo223IHCIZA82LSAmaZsZY/g15xZjQ9i
K6ZaPzYRaRvCIZzHsdgH1M2bRVw/3HU6Hd7fgSRrL9KyTdzMIbZ7g/ksrgK5hJLg
Bukg3uAfJpHwceEb17iU6Rh2BoOIfi23+c2hAv9gkJ+bdpLMde/s9g5PhYNo+qpZ
n3OoJFH+ha0HADaX6UR2PRMQruPE2sB/KRlPb8kngapWZylR6X0MAFyN2pZY6LdV
pZN3l0xQ9Z19gQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:07:02 2025 by rpki-client