Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: LQNU0WHLAloARp2m/2+clkGybqWtiRa+lEYWAu2yEXY=
Subject key identifier: 8B:18:9B:C2:C2:00:80:CC:69:CB:A7:33:F2:B1:7B:DE:B0:43:E7:F7
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0196B9DA9C8C32FD2B3DA7C982D5ABBB2588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1255
Signing time: Sat 10 May 2025 11:00:33 +0000
Manifest this update: Sat 10 May 2025 11:00:33 +0000
Manifest next update: Sun 11 May 2025 11:00:33 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: eK0NAoUoi94tWXvGX7DipB7gOwxUyZfH9N7rQuQgGbE=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:9c:8c:32:fd:2b:3d:a7:c9:82:d5:ab:bb:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: May 10 11:00:33 2025 GMT
Not After : May 11 11:00:33 2025 GMT
Subject: CN=8b189bc2c20080cc69cba733f2b17bdeb043e7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:76:32:88:3d:b8:ea:49:ca:e5:56:91:18:
1f:2c:81:3f:d2:38:49:75:ee:79:2e:5f:26:4f:e8:
82:34:5e:a6:f8:73:96:c8:b0:78:b1:d8:55:f8:59:
44:43:d1:58:06:37:6d:f0:b3:a1:42:bb:77:52:7e:
65:7c:da:be:41:6d:2d:43:d6:69:98:44:1a:e6:f2:
c8:11:a0:a2:85:5f:24:79:9e:26:10:47:49:3e:05:
3d:41:6c:e3:97:48:6f:a1:53:bd:3f:a8:ea:00:6a:
20:b6:9c:51:d2:70:2b:f1:25:82:99:28:d8:65:8c:
9e:aa:50:1c:83:09:6f:03:27:7b:fb:8b:34:f5:f9:
e8:93:d8:86:e5:a8:dd:07:05:35:75:e1:0a:0d:7e:
80:94:99:70:06:b9:d7:96:0c:79:8b:8b:82:44:0c:
2a:93:cc:17:08:58:48:33:6c:c2:87:59:5d:57:73:
de:fd:8c:96:1f:47:25:7e:4a:af:c2:4c:d0:87:d5:
99:83:57:95:6b:e9:22:46:42:9e:49:2f:3a:ff:3d:
cc:71:73:e4:f6:3d:08:bd:1f:13:ae:95:6f:40:0c:
d5:80:b6:39:f7:d0:14:3e:d5:52:a8:db:17:86:6e:
de:21:ac:fe:cb:7e:5d:59:0f:2a:5f:d6:19:48:0f:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:9B:C2:C2:00:80:CC:69:CB:A7:33:F2:B1:7B:DE:B0:43:E7:F7
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4b:82:f2:8b:49:29:a1:af:96:78:9d:1d:00:3e:12:1a:bd:
29:6f:58:61:dc:67:ee:6e:3b:3f:7d:75:2b:3e:4d:87:d5:04:
02:d8:6e:97:0f:e0:28:07:cb:0f:8f:e1:a0:c3:3c:23:27:c8:
58:ec:9e:93:64:82:53:22:c2:1f:29:1a:a0:75:a1:9b:62:50:
4c:3c:a2:91:5e:b6:40:0a:a3:b6:37:99:a7:7b:73:2c:41:45:
30:6d:20:f5:df:8d:24:ff:88:32:a9:89:fb:01:71:26:b8:f6:
f2:5d:30:99:28:21:51:e4:a3:ba:a0:04:a0:ee:71:39:55:c6:
7e:74:64:6a:48:9f:c4:1e:5f:79:1f:7e:3f:6e:4a:cb:9a:f1:
cd:f1:51:81:7b:89:38:14:3c:de:81:42:a3:da:be:68:98:4d:
28:7e:d3:8e:46:ef:2f:e4:e0:12:3c:16:35:e3:22:da:b3:07:
c3:26:2f:9b:7e:ad:73:a6:e5:9a:4e:8b:ec:8f:b8:23:fc:91:
db:84:d7:62:12:f1:f1:e4:dc:11:22:a5:d5:82:be:fc:dc:d9:
30:62:f9:24:fe:ce:32:df:74:dc:59:2c:7f:34:d3:4e:b6:87:
62:99:09:ec:b4:d8:cc:ed:76:24:9a:e7:79:b0:e0:9d:c0:38:
83:be:1d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa52pyMMv0rPafJgtWruyWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy
NDA4MDIwHhcNMjUwNTEwMTEwMDMzWhcNMjUwNTExMTEwMDMzWjAzMTEwLwYDVQQD
Eyg4YjE4OWJjMmMyMDA4MGNjNjljYmE3MzNmMmIxN2JkZWIwNDNlN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgp2Mog9uOpJyuVWkRgfLIE/0jhJ
de55Ll8mT+iCNF6m+HOWyLB4sdhV+FlEQ9FYBjdt8LOhQrt3Un5lfNq+QW0tQ9Zp
mEQa5vLIEaCihV8keZ4mEEdJPgU9QWzjl0hvoVO9P6jqAGogtpxR0nAr8SWCmSjY
ZYyeqlAcgwlvAyd7+4s09fnok9iG5ajdBwU1deEKDX6AlJlwBrnXlgx5i4uCRAwq
k8wXCFhIM2zCh1ldV3Pe/YyWH0clfkqvwkzQh9WZg1eVa+kiRkKeSS86/z3McXPk
9j0IvR8TrpVvQAzVgLY599AUPtVSqNsXhm7eIaz+y35dWQ8qX9YZSA+f4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsYm8LCAIDMacunM/Kxe96wQ+f3MB8GA1UdIwQY
MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt
NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl
LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0uC8otJ
KaGvlnidHQA+Ehq9KW9YYdxn7m47P311Kz5Nh9UEAthulw/gKAfLD4/hoMM8IyfI
WOyek2SCUyLCHykaoHWhm2JQTDyikV62QAqjtjeZp3tzLEFFMG0g9d+NJP+IMqmJ
+wFxJrj28l0wmSghUeSjuqAEoO5xOVXGfnRkakifxB5feR9+P25Ky5rxzfFRgXuJ
OBQ83oFCo9q+aJhNKH7TjkbvL+TgEjwWNeMi2rMHwyYvm36tc6blmk6L7I+4I/yR
24TXYhLx8eTcESKl1YK+/NzZMGL5JP7OMt903FksfzTTTraHYpkJ7LTYzO12JJrn
ebDgncA4g74dAQ==
-----END CERTIFICATE-----
Generated at Sat May 10 13:12:05 2025 by rpki-client