Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: 21Fgn4ee+/se+VumerWESz+hyBbs0aJdjES0mQRWl3M=
Subject key identifier: AE:32:E0:F8:CA:BC:6B:5E:82:A1:20:4D:51:42:83:0E:7D:54:00:10
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 0196C683C49831B9FEC804F38A2CD4AB79C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 14CB
Signing time: Mon 12 May 2025 22:00:46 +0000
Manifest this update: Mon 12 May 2025 22:00:46 +0000
Manifest next update: Tue 13 May 2025 22:00:46 +0000
Files and hashes: 1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: EGeXZc7GmedFQnXI6ryYEXvyGQIcrVW9Og4mxYQ20B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:c4:98:31:b9:fe:c8:04:f3:8a:2c:d4:ab:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: May 12 22:00:46 2025 GMT
Not After : May 13 22:00:46 2025 GMT
Subject: CN=ae32e0f8cabc6b5e82a1204d5142830e7d540010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:1d:9b:50:1e:3b:6d:0d:82:56:ea:fb:d2:
9d:b9:bf:68:f2:87:06:50:28:1b:7e:3d:13:3d:a0:
5a:e4:6c:e6:05:f7:62:b9:40:fc:15:cb:81:f8:3b:
17:52:ee:4f:e9:99:32:d2:c8:61:45:8e:07:8e:a8:
ac:13:38:ab:29:57:f0:08:d0:6c:d1:7f:be:46:1a:
9d:6e:03:f7:2b:44:65:d6:33:23:a6:99:e0:5b:cd:
84:16:26:f6:e8:3c:be:23:02:5e:73:9c:fb:7b:77:
e5:38:d6:58:ad:5c:e2:28:1a:22:28:3e:b9:2d:e5:
17:6d:e6:69:ea:42:eb:43:bd:37:47:1c:90:5b:2d:
0b:66:ab:e7:26:80:b3:14:08:1e:89:c0:a4:ba:89:
fa:02:fa:7b:d8:a8:22:95:68:a5:62:c5:91:3c:63:
37:c2:be:1c:77:17:85:b7:8a:f5:97:46:47:e2:14:
9c:6e:43:21:9e:e4:6c:4d:fb:1d:aa:49:bd:09:cb:
21:18:4a:b2:00:db:e0:b7:a3:9e:4e:b8:93:76:5f:
e1:1b:25:14:33:a8:40:15:76:53:c5:60:37:9f:96:
62:cc:b3:69:23:e7:15:b5:d9:56:c7:9d:d6:4f:d1:
80:5f:e6:14:1b:d8:29:b7:10:30:82:3d:af:df:c4:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:32:E0:F8:CA:BC:6B:5E:82:A1:20:4D:51:42:83:0E:7D:54:00:10
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:23:de:b7:01:e9:da:87:33:00:01:96:09:e1:00:17:12:dd:
70:a2:cf:2a:90:b4:98:41:28:72:71:22:91:fc:65:e6:3f:cb:
d1:48:99:bb:68:45:a6:3f:c1:d1:53:d7:84:aa:c2:01:67:35:
7a:e5:f0:ab:52:e8:b4:85:e9:20:12:48:bb:5b:2c:f0:7f:8f:
1d:bc:40:c3:30:ca:51:72:46:5f:c0:19:93:d6:fb:2e:7d:be:
29:72:d7:1d:bc:c8:fe:7c:d1:f3:63:b6:27:10:39:16:70:2a:
de:48:52:8d:74:c8:ad:6a:72:d8:a6:54:81:b8:2d:21:e4:eb:
b1:1e:d9:37:f8:99:c6:fe:ab:ce:b9:f3:6a:3b:92:4d:f0:da:
d0:72:03:55:4d:cf:c5:b3:44:bf:96:95:60:90:80:17:cd:94:
36:87:ca:25:50:60:ff:04:46:34:d1:cb:a5:d8:41:da:40:50:
df:06:36:3a:2b:fa:2b:9a:db:06:e2:48:02:17:7b:62:62:23:
cc:51:3b:21:fc:43:db:21:d6:fe:99:f7:91:25:10:52:2c:73:
09:8e:c1:62:89:50:cc:42:84:7c:4a:cb:06:e1:80:70:d8:b1:
32:d5:94:75:f6:5e:62:dd:1a:65:4f:b3:b6:45:e8:86:8e:65:
fd:5a:19:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGg8SYMbn+yATziizUq3nCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTBkNDBiZmNkNWE0YTMwODc1MTYwZWNjNmY5ZmU1M2Mw
NWE2ZTYwHhcNMjUwNTEyMjIwMDQ2WhcNMjUwNTEzMjIwMDQ2WjAzMTEwLwYDVQQD
EyhhZTMyZTBmOGNhYmM2YjVlODJhMTIwNGQ1MTQyODMwZTdkNTQwMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqgdm1AeO20Nglbq+9Kdub9o8ocG
UCgbfj0TPaBa5GzmBfdiuUD8FcuB+DsXUu5P6Zky0shhRY4HjqisEzirKVfwCNBs
0X++RhqdbgP3K0Rl1jMjppngW82EFib26Dy+IwJec5z7e3flONZYrVziKBoiKD65
LeUXbeZp6kLrQ703RxyQWy0LZqvnJoCzFAgeicCkuon6Avp72KgilWilYsWRPGM3
wr4cdxeFt4r1l0ZH4hScbkMhnuRsTfsdqkm9CcshGEqyANvgt6OeTriTdl/hGyUU
M6hAFXZTxWA3n5ZizLNpI+cVtdlWx53WT9GAX+YUG9gptxAwgj2v38QjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4y4PjKvGtegqEgTVFCgw59VAAQMB8GA1UdIwQY
MBaAFLCQ1Av81aSjCHUWDsxvn+U8BabmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWIt
ODEwOWQ0MDg5ODI4LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWItODEwOWQ0MDg5ODI4
LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiPetwHp
2oczAAGWCeEAFxLdcKLPKpC0mEEocnEikfxl5j/L0UiZu2hFpj/B0VPXhKrCAWc1
euXwq1LotIXpIBJIu1ss8H+PHbxAwzDKUXJGX8AZk9b7Ln2+KXLXHbzI/nzR82O2
JxA5FnAq3khSjXTIrWpy2KZUgbgtIeTrsR7ZN/iZxv6rzrnzajuSTfDa0HIDVU3P
xbNEv5aVYJCAF82UNofKJVBg/wRGNNHLpdhB2kBQ3wY2Oiv6K5rbBuJIAhd7YmIj
zFE7IfxD2yHW/pn3kSUQUixzCY7BYolQzEKEfErLBuGAcNixMtWUdfZeYt0aZU+z
tkXoho5l/VoZaw==
-----END CERTIFICATE-----
Generated at Tue May 13 07:08:31 2025 by rpki-client