Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: H5UzPUsc2vno2fpstDUI+vdMM2sJud0F/xjJvsK13Nk=
Subject key identifier: 94:D1:99:2A:A4:0A:32:85:F9:34:98:BE:59:04:00:9B:37:5E:8C:07
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 0196C83AC21D00B6CC1623239F400FB8C7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 06:00:15 +0000
Manifest this update: Tue 13 May 2025 06:00:15 +0000
Manifest next update: Wed 14 May 2025 06:00:15 +0000
Files and hashes: 1: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (hash: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=)
2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: x/iVnXL0ZjcLaJFXBHFizK4oy2RqFKFzvQ/8Q7ov1mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:c2:1d:00:b6:cc:16:23:23:9f:40:0f:b8:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: May 13 06:00:15 2025 GMT
Not After : May 14 06:00:15 2025 GMT
Subject: CN=94d1992aa40a3285f93498be5904009b375e8c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:25:37:db:7b:c8:bf:39:91:91:7f:dc:e4:
72:58:5b:fa:b2:b6:82:ac:27:f4:d2:d5:9f:f6:e1:
79:3b:73:c4:1c:ee:dd:dd:dd:14:6d:6b:4a:d9:51:
29:83:7c:3f:e3:9c:19:58:b9:c6:09:5c:ed:71:20:
60:34:77:a9:b4:13:a1:5a:91:a3:2b:c0:75:f2:6e:
a4:ce:22:81:c3:63:07:f1:39:14:0a:3c:8d:b6:8b:
3d:4a:d5:81:20:96:45:66:24:df:93:dd:3e:e7:1d:
42:25:e2:3d:e9:17:91:3e:19:38:12:e5:b5:db:2c:
6c:f9:c2:44:55:83:91:86:00:9c:e2:00:2e:92:ca:
32:52:58:67:48:70:d8:eb:a1:9c:ae:d8:5f:1a:4d:
3b:4e:9b:87:e6:2e:f3:5a:f4:c1:67:bf:26:02:d9:
ba:66:18:d2:a3:97:ab:70:1d:03:cd:33:f1:d3:f0:
91:55:a2:85:c5:1a:99:fb:3f:95:6a:5b:fc:3d:47:
03:7d:c3:79:65:93:69:3c:cc:ad:43:76:b0:56:4d:
f5:e2:da:c3:51:ec:5d:cf:9b:0b:87:a1:1b:13:6f:
18:90:e1:38:97:56:d7:85:cf:51:25:ab:82:8c:4d:
24:10:b9:cc:d7:69:9b:3b:20:fb:74:d0:f1:70:38:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:99:2A:A4:0A:32:85:F9:34:98:BE:59:04:00:9B:37:5E:8C:07
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:10:ea:cd:53:99:03:92:51:46:52:56:c9:a9:ec:70:9a:ba:
a1:f7:6b:9b:74:56:1f:a2:de:87:e5:da:c6:dc:a8:e0:14:f8:
1d:ba:88:3f:ce:05:37:f7:ca:70:20:73:ea:37:43:67:7b:70:
09:c7:4c:c2:23:9f:18:66:a7:44:da:3d:73:11:0c:10:eb:eb:
6b:ab:cd:f9:13:35:61:c7:51:06:5d:7e:49:28:60:74:f6:38:
42:65:c5:8d:d5:b7:06:21:96:4f:a5:81:63:42:0d:61:62:ef:
86:cb:cf:00:a5:d6:c8:24:93:63:3e:a1:cf:46:b3:8c:f9:3e:
95:8b:28:de:1c:27:2b:66:7c:6c:97:44:c4:f2:0f:90:62:76:
b7:62:b5:e4:b7:19:96:a4:b9:e2:62:68:bb:c9:c7:5c:c1:a7:
39:ac:f7:06:9b:ed:bc:24:90:49:55:d5:7a:56:68:90:ca:65:
d0:7a:38:4a:e9:7e:6e:76:60:fa:d5:f6:a9:ca:f7:da:71:28:
8f:5a:03:8e:52:af:4d:4c:1e:c7:0d:ad:d4:f1:f2:12:06:03:
79:5a:df:8d:3f:28:78:5c:a8:60:69:5e:f9:d1:a3:fe:26:ab:
39:1d:73:9d:8c:4a:f0:11:5b:31:53:77:99:d5:55:38:e0:6d:
00:2d:a0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIOsIdALbMFiMjn0APuMfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWU3MzhlZTE3ODI3MzU5MzlhNGZiMGQ2NzJhNjMxN2I3
ZjUyNDMwHhcNMjUwNTEzMDYwMDE1WhcNMjUwNTE0MDYwMDE1WjAzMTEwLwYDVQQD
Eyg5NGQxOTkyYWE0MGEzMjg1ZjkzNDk4YmU1OTA0MDA5YjM3NWU4YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGolN9t7yL85kZF/3ORyWFv6sraC
rCf00tWf9uF5O3PEHO7d3d0UbWtK2VEpg3w/45wZWLnGCVztcSBgNHeptBOhWpGj
K8B18m6kziKBw2MH8TkUCjyNtos9StWBIJZFZiTfk90+5x1CJeI96ReRPhk4EuW1
2yxs+cJEVYORhgCc4gAuksoyUlhnSHDY66GcrthfGk07TpuH5i7zWvTBZ78mAtm6
ZhjSo5ercB0DzTPx0/CRVaKFxRqZ+z+Valv8PUcDfcN5ZZNpPMytQ3awVk314trD
Uexdz5sLh6EbE28YkOE4l1bXhc9RJauCjE0kELnM12mbOyD7dNDxcDhcHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTRmSqkCjKF+TSYvlkEAJs3XowHMB8GA1UdIwQY
MBaAFEquc47heCc1k5pPsNZypjF7f1JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjkt
MWZmOWZmMTkyY2Q3LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjktMWZmOWZmMTkyY2Q3
LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohDqzVOZ
A5JRRlJWyanscJq6ofdrm3RWH6Leh+Xaxtyo4BT4HbqIP84FN/fKcCBz6jdDZ3tw
CcdMwiOfGGanRNo9cxEMEOvra6vN+RM1YcdRBl1+SShgdPY4QmXFjdW3BiGWT6WB
Y0INYWLvhsvPAKXWyCSTYz6hz0azjPk+lYso3hwnK2Z8bJdExPIPkGJ2t2K15LcZ
lqS54mJou8nHXMGnOaz3BpvtvCSQSVXVelZokMpl0Ho4Sul+bnZg+tX2qcr32nEo
j1oDjlKvTUwexw2t1PHyEgYDeVrfjT8oeFyoYGle+dGj/iarOR1znYxK8BFbMVN3
mdVVOOBtAC2gUA==
-----END CERTIFICATE-----
Generated at Tue May 13 13:21:36 2025 by rpki-client