Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
File: S6XEBCZt6xbZx4qpLoAtg_uibHE.mft (raw, json)
Hash identifier: X5egW3o0Id4+zKkF+Y6MJGH3uvWW/twpF6kp9VITOEs=
Subject key identifier: 3D:CF:CB:F5:62:FE:8A:E1:4F:AB:3E:F0:34:DA:CA:38:D1:6C:55:A8
Authority key identifier: 4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
Certificate issuer: /CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Certificate serial: 0196BC6E4DC8A6249853833EDC5771C6FCDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
Manifest number: 0437
Signing time: Sat 10 May 2025 23:01:07 +0000
Manifest this update: Sat 10 May 2025 23:01:07 +0000
Manifest next update: Sun 11 May 2025 23:01:07 +0000
Files and hashes: 1: S6XEBCZt6xbZx4qpLoAtg_uibHE.crl (hash: 0TdwMeeJf0l25TMfFNMMGIAxYDRZWvz1XHCpR+O9Ij8=)
2: eQ54edgYKIUcfPhFEws-eNJ8BAA.roa (hash: OAjHXz/8YyId26wIY7CC8yapukZc0Z6aGp6x02zSR/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:4d:c8:a6:24:98:53:83:3e:dc:57:71:c6:fc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5c404266deb16d9c78aa92e802d83fba26c71
Validity
Not Before: May 10 23:01:07 2025 GMT
Not After : May 11 23:01:07 2025 GMT
Subject: CN=3dcfcbf562fe8ae14fab3ef034daca38d16c55a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:73:1a:9e:0a:9d:a6:35:30:52:e9:4f:2d:
e0:80:e1:58:bb:b8:42:a5:3f:0f:ae:0f:44:61:b4:
c0:14:a3:8b:b0:23:bd:ad:c8:66:ea:85:75:8d:d8:
e5:fc:7e:c6:b9:33:25:c0:b7:2b:e7:c3:47:8d:3b:
b2:16:d9:93:d3:1b:e2:23:10:4f:a6:5a:4b:ed:d5:
d2:4c:03:66:a4:bd:fe:68:95:11:78:2d:bb:4e:ed:
86:3a:c3:3e:88:67:99:28:a8:ca:8e:5f:67:b0:8d:
37:f3:5e:f8:5c:6b:3c:7c:36:38:a1:a2:8e:3e:cf:
55:b6:29:b8:e8:2e:a7:2d:5e:12:98:e0:96:7d:05:
90:19:f0:71:76:de:0b:b6:54:b6:ca:09:64:a4:bb:
0a:90:a1:f3:a1:af:7e:0f:be:11:69:68:e2:f6:7a:
85:75:da:b8:a3:a1:81:fe:1e:6b:09:a2:1e:c5:48:
43:b6:22:39:88:98:71:94:44:b2:78:40:6f:af:42:
05:9d:c2:0c:c6:50:28:ed:e5:b8:85:04:8b:43:43:
2e:73:8d:ab:15:ad:01:f2:41:52:f9:23:bc:c0:1c:
3e:a6:61:5f:1b:99:b3:70:08:1a:4d:de:39:ec:ed:
af:19:2a:d4:18:12:c0:e5:51:e1:ba:03:62:f9:56:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CF:CB:F5:62:FE:8A:E1:4F:AB:3E:F0:34:DA:CA:38:D1:6C:55:A8
X509v3 Authority Key Identifier:
keyid:4B:A5:C4:04:26:6D:EB:16:D9:C7:8A:A9:2E:80:2D:83:FB:A2:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6XEBCZt6xbZx4qpLoAtg_uibHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3f2772-3da3-4921-9c52-b0b06eb344fb/1/S6XEBCZt6xbZx4qpLoAtg_uibHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:78:1b:49:e1:0a:0b:92:85:ff:bd:a5:91:dd:cb:17:ad:bb:
a9:44:e5:c4:c7:80:58:a4:dd:06:1a:1d:d3:f9:59:88:27:33:
b2:e0:70:59:14:df:c0:d2:7a:fd:2c:63:ec:11:bf:0e:62:f0:
58:5c:98:d8:76:e4:b9:fc:46:c5:7c:3d:12:6d:10:47:5b:f2:
c4:e9:94:81:09:e0:cf:e3:99:4b:74:41:cb:4a:92:99:04:dd:
74:8b:25:25:45:78:5d:a4:0c:99:56:bc:e5:c2:6c:79:5d:53:
67:b7:93:38:ab:2b:5d:e9:ff:92:ed:f9:f3:fa:88:63:f8:cc:
6e:eb:74:36:f7:e6:10:e1:e0:19:31:be:d7:e7:03:15:e7:5d:
f4:5c:2b:33:9f:c0:d1:33:fe:1f:80:31:a2:dd:e8:85:cf:e5:
c7:cb:d1:88:0a:d8:fd:4c:71:0c:8e:f0:88:be:83:01:cc:ff:
55:8c:d1:8e:6d:38:6a:19:09:4e:c5:2d:80:31:07:13:d7:17:
a3:a6:a6:fa:02:a5:bc:d4:af:04:47:c3:f4:b5:7f:2f:bd:70:
2f:4a:3c:ca:e3:69:25:49:d2:5e:8d:ed:b4:22:59:81:0b:12:
e1:f9:3d:d4:73:e3:7e:00:6a:a4:b6:6b:5f:b9:f3:60:1b:f2:
49:ae:5c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bk3IpiSYU4M+3FdxxvzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTVjNDA0MjY2ZGViMTZkOWM3OGFhOTJlODAyZDgzZmJh
MjZjNzEwHhcNMjUwNTEwMjMwMTA3WhcNMjUwNTExMjMwMTA3WjAzMTEwLwYDVQQD
EygzZGNmY2JmNTYyZmU4YWUxNGZhYjNlZjAzNGRhY2EzOGQxNmM1NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurhzGp4KnaY1MFLpTy3ggOFYu7hC
pT8Prg9EYbTAFKOLsCO9rchm6oV1jdjl/H7GuTMlwLcr58NHjTuyFtmT0xviIxBP
plpL7dXSTANmpL3+aJUReC27Tu2GOsM+iGeZKKjKjl9nsI038174XGs8fDY4oaKO
Ps9Vtim46C6nLV4SmOCWfQWQGfBxdt4LtlS2yglkpLsKkKHzoa9+D74RaWji9nqF
ddq4o6GB/h5rCaIexUhDtiI5iJhxlESyeEBvr0IFncIMxlAo7eW4hQSLQ0Muc42r
Fa0B8kFS+SO8wBw+pmFfG5mzcAgaTd457O2vGSrUGBLA5VHhugNi+Vb2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Py/Vi/orhT6s+8DTayjjRbFWoMB8GA1UdIwQY
MBaAFEulxAQmbesW2ceKqS6ALYP7omxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTIt
YjBiMDZlYjM0NGZiLzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zZjI3NzItM2RhMy00OTIxLTljNTItYjBiMDZlYjM0NGZi
LzEvUzZYRUJDWnQ2eGJaeDRxcExvQXRnX3VpYkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXgbSeEK
C5KF/72lkd3LF627qUTlxMeAWKTdBhod0/lZiCczsuBwWRTfwNJ6/Sxj7BG/DmLw
WFyY2HbkufxGxXw9Em0QR1vyxOmUgQngz+OZS3RBy0qSmQTddIslJUV4XaQMmVa8
5cJseV1TZ7eTOKsrXen/ku358/qIY/jMbut0NvfmEOHgGTG+1+cDFedd9FwrM5/A
0TP+H4Axot3ohc/lx8vRiArY/UxxDI7wiL6DAcz/VYzRjm04ahkJTsUtgDEHE9cX
o6am+gKlvNSvBEfD9LV/L71wL0o8yuNpJUnSXo3ttCJZgQsS4fk91HPjfgBqpLZr
X7nzYBvySa5c3g==
-----END CERTIFICATE-----
Generated at Sun May 11 01:33:12 2025 by rpki-client