Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File: sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier: sa2DnA8SGPjnDKtXe3S2o/DwII8Ce4Sidq8od1R2aH4=
Subject key identifier: 0E:FE:FF:4A:DE:D5:5E:BA:96:98:43:7F:42:F4:28:0D:B0:1A:62:AB
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer: /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial: 0196C570F64776059B0C8FD4890B1444D472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number: 1408
Signing time: Mon 12 May 2025 17:00:36 +0000
Manifest this update: Mon 12 May 2025 17:00:36 +0000
Manifest next update: Tue 13 May 2025 17:00:36 +0000
Files and hashes: 1: EhMQv2Hd3Y0AB-EaVNPw9A1el2Y.roa (hash: bVKsgWkrvgH7jweX9NZzvJ58rjQAc648XkG11nW0Xqk=)
2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: wBci+L17IPZkc2syXCOWkaqgBSIo78SX72w2gxKf+/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:f6:47:76:05:9b:0c:8f:d4:89:0b:14:44:d4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Validity
Not Before: May 12 17:00:36 2025 GMT
Not After : May 13 17:00:36 2025 GMT
Subject: CN=0efeff4aded55eba9698437f42f4280db01a62ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:ab:9a:a2:96:17:77:04:b3:a9:47:b1:b7:
06:0a:33:34:e9:59:40:54:ed:ed:37:d5:f5:a1:e9:
8a:c7:e2:a4:dc:6d:b5:35:80:dc:7a:3e:7c:7c:b6:
4d:9f:06:9f:42:16:61:18:86:b4:ad:d4:ed:98:34:
cb:12:30:a9:9d:5c:2a:38:ce:8a:9a:1d:d8:42:cc:
ca:b2:d8:20:47:cd:98:b9:3e:94:9e:fd:7e:e3:54:
b5:51:2a:89:3b:73:11:6a:f5:35:e3:ac:39:99:33:
e3:48:e7:28:93:1f:17:bd:11:7d:9e:8f:48:f2:6f:
aa:ec:95:bb:cc:7e:18:a9:c6:35:63:09:bc:a1:ff:
38:ee:b9:c3:2e:22:0c:62:51:e4:57:19:86:fb:e1:
4c:87:5b:4d:a8:b7:f9:eb:a6:2f:7d:41:91:6e:ae:
6a:0d:57:7a:b9:0d:30:d9:5b:e8:e1:61:e4:cd:55:
a7:60:64:b1:28:32:50:10:f9:cd:cb:ac:c9:53:59:
79:86:e2:2b:5c:ed:f4:5d:bd:43:96:3d:a5:5c:c6:
c3:ee:0d:66:a8:32:dd:28:e9:9e:55:82:d7:c8:8e:
6e:82:5c:74:59:7a:19:10:0f:f6:8b:4f:5e:51:57:
69:aa:fb:5b:da:44:00:54:5e:c7:aa:de:3e:4c:53:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:FF:4A:DE:D5:5E:BA:96:98:43:7F:42:F4:28:0D:B0:1A:62:AB
X509v3 Authority Key Identifier:
keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e8:78:55:78:86:c9:26:c9:98:51:b0:f1:6c:de:d0:1b:68:
20:00:48:ec:8b:c7:a5:82:40:fd:82:96:08:e4:13:eb:e9:e6:
90:ed:2b:41:ff:8e:b0:01:d8:69:ce:76:f1:5a:ad:fa:47:a8:
b6:35:00:04:bf:7b:f4:99:62:84:64:b0:c0:d6:b8:78:ec:db:
d6:5f:41:77:d1:bf:87:cd:dc:d9:18:d9:dc:72:3d:47:34:64:
0c:77:7d:4c:94:72:9c:ec:fb:a4:6a:af:19:bc:7b:97:ec:7a:
48:ec:f5:2b:8e:b9:3f:eb:61:01:6d:07:a1:83:be:d8:31:0a:
eb:66:02:e7:4e:fa:7e:95:74:a8:aa:69:95:78:e0:71:36:1b:
1e:e9:94:05:7e:8a:aa:b2:5c:f0:93:39:76:65:93:36:f4:89:
aa:6a:22:ab:b6:12:00:c2:42:f7:bc:64:f2:1c:d5:44:19:43:
f3:22:39:e2:92:29:52:8e:70:13:ac:f1:e8:e2:d8:2e:42:f2:
36:1d:45:84:75:ef:70:be:f9:19:81:60:eb:c0:08:c2:f5:0d:
dc:79:ee:c1:6e:a1:a7:59:fa:97:df:da:83:6a:c8:b5:52:1e:
79:66:c2:d3:19:47:ae:63:22:07:e3:0e:a3:bf:18:73:77:8f:
16:79:24:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcPZHdgWbDI/UiQsURNRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTRmYzJhZjM4YWY1YjRmNTg2MWUyN2ZkMDA3ZTYyNGI1
ZjliMDIwHhcNMjUwNTEyMTcwMDM2WhcNMjUwNTEzMTcwMDM2WjAzMTEwLwYDVQQD
EygwZWZlZmY0YWRlZDU1ZWJhOTY5ODQzN2Y0MmY0MjgwZGIwMWE2MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAyrmqKWF3cEs6lHsbcGCjM06VlA
VO3tN9X1oemKx+Kk3G21NYDcej58fLZNnwafQhZhGIa0rdTtmDTLEjCpnVwqOM6K
mh3YQszKstggR82YuT6Unv1+41S1USqJO3MRavU146w5mTPjSOcokx8XvRF9no9I
8m+q7JW7zH4YqcY1Ywm8of847rnDLiIMYlHkVxmG++FMh1tNqLf566YvfUGRbq5q
DVd6uQ0w2Vvo4WHkzVWnYGSxKDJQEPnNy6zJU1l5huIrXO30Xb1Dlj2lXMbD7g1m
qDLdKOmeVYLXyI5uglx0WXoZEA/2i09eUVdpqvtb2kQAVF7Hqt4+TFOUMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7+/0re1V66lphDf0L0KA2wGmKrMB8GA1UdIwQY
MBaAFLCk/CrzivW09YYeJ/0AfmJLX5sCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYt
NjhmZTA4NjIyNjE0LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hODBkYmYtNWNiNC00ZTI2LWFkYWYtNjhmZTA4NjIyNjE0
LzEvc0tUOEt2T0s5YlQxaGg0bl9RQi1Za3RmbXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeh4VXiG
ySbJmFGw8Wze0BtoIABI7IvHpYJA/YKWCOQT6+nmkO0rQf+OsAHYac528Vqt+keo
tjUABL979JlihGSwwNa4eOzb1l9Bd9G/h83c2RjZ3HI9RzRkDHd9TJRynOz7pGqv
Gbx7l+x6SOz1K465P+thAW0HoYO+2DEK62YC5076fpV0qKpplXjgcTYbHumUBX6K
qrJc8JM5dmWTNvSJqmoiq7YSAMJC97xk8hzVRBlD8yI54pIpUo5wE6zx6OLYLkLy
Nh1FhHXvcL75GYFg68AIwvUN3HnuwW6hp1n6l9/ag2rItVIeeWbC0xlHrmMiB+MO
o78Yc3ePFnkkzg==
-----END CERTIFICATE-----
Generated at Mon May 12 22:22:21 2025 by rpki-client