Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: chtGHBBGFVRmpehGL8UnuECwZuyFufdhqlXRhgmZbsw=
Subject key identifier: A3:23:32:92:71:20:FE:B4:FD:6C:34:F2:DC:2C:76:0B:E0:60:1E:A8
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 0196A352C054019A99223D824EBBF92FA50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 0149
Signing time: Tue 06 May 2025 02:00:31 +0000
Manifest this update: Tue 06 May 2025 02:00:31 +0000
Manifest next update: Wed 07 May 2025 02:00:31 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: QSYzyYezt6CQwIuNEUS4uVskTTFkpOF1B2cadwY+BxI=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:c0:54:01:9a:99:22:3d:82:4e:bb:f9:2f:a5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: May 6 02:00:31 2025 GMT
Not After : May 7 02:00:31 2025 GMT
Subject: CN=a32332927120feb4fd6c34f2dc2c760be0601ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:17:8b:77:d4:6d:c4:4c:fa:f1:f4:db:57:
aa:6c:c1:64:aa:af:04:86:7d:f7:eb:56:56:73:b4:
06:15:74:18:21:0b:08:29:bc:2e:e3:a5:d6:40:f0:
08:4f:88:3b:c4:6e:ee:33:ed:16:d3:6d:eb:7b:6a:
0f:49:00:32:7b:fb:65:68:74:0d:ca:c4:56:aa:de:
b5:81:8a:2d:76:be:37:c0:94:3a:b2:31:14:1e:96:
ed:6f:cf:6a:50:cb:29:be:c6:83:00:ee:2b:6a:80:
9d:39:b7:c1:61:59:77:46:85:6d:cf:ed:1b:57:92:
2e:5b:2f:4f:c5:b3:82:2e:ec:01:83:ed:60:30:ea:
19:8f:22:01:1d:41:28:87:f0:83:30:3e:dd:71:99:
bd:c7:d0:e7:f9:96:f5:b8:71:3e:c8:93:44:93:43:
30:61:78:b7:da:f6:52:b7:3e:5b:cc:13:65:18:a4:
22:dd:5c:51:7f:16:94:0f:47:57:45:c0:bb:1d:2e:
d2:8d:f9:fb:08:b9:12:26:91:2b:79:60:e4:57:2f:
6b:17:88:41:57:84:1c:76:e4:94:e9:48:ee:f1:cd:
de:e9:1b:b1:aa:7b:f3:5b:bb:07:8a:7e:64:f9:27:
c3:b0:f6:83:75:6d:1e:5a:40:90:d7:50:71:3c:5d:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:32:92:71:20:FE:B4:FD:6C:34:F2:DC:2C:76:0B:E0:60:1E:A8
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e6:3a:9e:5d:d6:72:68:a3:a5:37:7a:1d:b2:52:3d:e6:ea:
07:d6:f5:5f:87:0e:f3:fd:87:96:47:57:4a:81:9b:ca:9e:87:
1a:44:7b:41:b3:15:ea:81:8b:a2:52:2b:d7:66:5a:17:9a:db:
9e:75:4d:b0:02:3a:ba:20:85:42:9c:87:77:69:39:42:ad:5e:
b4:44:bf:59:12:94:74:0d:85:99:71:62:2f:5a:ab:67:8f:0f:
21:4a:4f:c6:29:c7:22:dd:be:05:e5:a8:b9:e3:fa:61:3d:58:
78:99:e6:68:1b:fa:02:c8:f0:8b:63:6a:75:97:8a:c9:46:2d:
6f:13:9c:7d:b4:ec:92:71:23:47:46:00:dd:17:1f:f0:93:2a:
2d:75:c3:9d:fd:9a:78:e0:45:02:0e:2c:f0:a2:8f:77:b7:52:
86:2c:b2:54:e5:5c:29:cf:8d:a0:0b:fd:3a:ee:93:82:1a:a3:
56:cb:71:86:cd:59:4b:d1:3e:94:be:12:33:c5:8d:fb:e5:05:
b7:88:24:4c:e6:6d:4f:7d:af:08:82:b2:17:21:cc:e7:eb:16:
94:8b:39:c2:70:56:8e:d1:7b:81:25:54:f5:82:8a:1b:9d:1d:
7c:a0:ec:fb:59:75:0f:79:a0:df:f9:67:27:65:f9:81:b8:4b:
c6:ef:c6:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajUsBUAZqZIj2CTrv5L6ULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDAxZjcwY2Y1ZjRkZWVkOTNhOGMxNWU0OTQwMjllOTNh
YmVkNTUwHhcNMjUwNTA2MDIwMDMxWhcNMjUwNTA3MDIwMDMxWjAzMTEwLwYDVQQD
EyhhMzIzMzI5MjcxMjBmZWI0ZmQ2YzM0ZjJkYzJjNzYwYmUwNjAxZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N0Xi3fUbcRM+vH021eqbMFkqq8E
hn3361ZWc7QGFXQYIQsIKbwu46XWQPAIT4g7xG7uM+0W023re2oPSQAye/tlaHQN
ysRWqt61gYotdr43wJQ6sjEUHpbtb89qUMspvsaDAO4raoCdObfBYVl3RoVtz+0b
V5IuWy9PxbOCLuwBg+1gMOoZjyIBHUEoh/CDMD7dcZm9x9Dn+Zb1uHE+yJNEk0Mw
YXi32vZStz5bzBNlGKQi3VxRfxaUD0dXRcC7HS7Sjfn7CLkSJpEreWDkVy9rF4hB
V4QcduSU6Uju8c3e6RuxqnvzW7sHin5k+SfDsPaDdW0eWkCQ11BxPF37mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMjMpJxIP60/Ww08twsdgvgYB6oMB8GA1UdIwQY
MBaAFEnQH3DPX03u2TqMFeSUAp6Tq+1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMt
ZjRjMTY2YzgzZjg4LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84MjE1NzItMzQ0NS00OTEwLWExNWMtZjRjMTY2YzgzZjg4
LzEvU2RBZmNNOWZUZTdaT293VjVKUUNucE9yN1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuY6nl3W
cmijpTd6HbJSPebqB9b1X4cO8/2HlkdXSoGbyp6HGkR7QbMV6oGLolIr12ZaF5rb
nnVNsAI6uiCFQpyHd2k5Qq1etES/WRKUdA2FmXFiL1qrZ48PIUpPxinHIt2+BeWo
ueP6YT1YeJnmaBv6Asjwi2NqdZeKyUYtbxOcfbTsknEjR0YA3Rcf8JMqLXXDnf2a
eOBFAg4s8KKPd7dShiyyVOVcKc+NoAv9Ou6TghqjVstxhs1ZS9E+lL4SM8WN++UF
t4gkTOZtT32vCIKyFyHM5+sWlIs5wnBWjtF7gSVU9YKKG50dfKDs+1l1D3mg3/ln
J2X5gbhLxu/GCg==
-----END CERTIFICATE-----
Generated at Tue May 6 07:32:21 2025 by rpki-client