Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File: SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier: 4NPKWyoDxoDEPvGWzAdcjIFsFWvZmVcyYSy0vDtEIcQ=
Subject key identifier: A5:CD:70:16:4F:EF:D5:61:5F:A9:A9:1A:DE:F7:05:F2:FC:7B:C1:1E
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 0196C0139BDFF2761DF19E3CCED439256DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 16:00:32 +0000
Manifest this update: Sun 11 May 2025 16:00:32 +0000
Manifest next update: Mon 12 May 2025 16:00:32 +0000
Files and hashes: 1: EbOu1qDq7ZlN0le3FwRJ22JwUEc.roa (hash: 9DLeiprUkEPr3xfx5ncHn6G4kT050WW6ahOVAnuzCHg=)
2: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: SoIiWllm9PcBYP1jRoGvC3JwZnqwQuPz7qOL4Qtti+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:9b:df:f2:76:1d:f1:9e:3c:ce:d4:39:25:6d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: May 11 16:00:32 2025 GMT
Not After : May 12 16:00:32 2025 GMT
Subject: CN=a5cd70164fefd5615fa9a91adef705f2fc7bc11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:7c:d8:7c:d3:7b:f6:c9:e2:92:0a:64:3c:
50:de:83:29:98:04:b7:e3:35:fe:47:43:e0:ec:c2:
1c:ab:50:30:ff:81:5c:32:a3:f1:4e:73:b9:2d:35:
4f:d7:33:db:8b:e2:08:0e:dc:90:fe:bb:81:07:ec:
ad:80:a6:56:5c:af:c6:12:50:03:7a:8a:13:84:9b:
cb:01:4d:cc:07:67:fa:e6:4e:a4:80:b6:cf:2e:e9:
33:80:a5:4f:53:dd:7a:74:6c:fc:c7:21:21:39:42:
e0:b5:4f:4b:bc:4f:46:70:a7:1d:47:fb:c3:58:7d:
c0:de:79:d5:e2:02:02:3c:17:8e:bc:49:f2:56:2a:
b5:94:1d:1a:b5:ad:f6:b3:dd:9a:d4:e2:ad:1e:49:
85:3d:9a:ab:6e:da:67:1b:59:22:63:5b:29:ac:9e:
da:ab:f3:f6:cf:6e:1b:d4:9a:74:65:c4:98:c3:66:
7f:46:13:03:df:2b:f7:dd:f7:85:4d:8f:c2:29:fd:
ee:2b:db:cf:b3:b5:55:63:bf:05:26:28:47:f9:ec:
46:f2:a6:73:0d:12:af:92:65:4e:48:b3:40:c5:7b:
29:ae:57:a7:cc:ab:f8:4e:3f:e7:36:c6:8c:c9:89:
c1:40:e4:6f:7a:f8:1d:86:f1:f5:7f:37:cf:37:e6:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:70:16:4F:EF:D5:61:5F:A9:A9:1A:DE:F7:05:F2:FC:7B:C1:1E
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d7:54:bd:c8:92:fc:31:62:a9:97:2d:84:90:77:9a:0a:1f:
88:22:01:9d:c9:3b:d2:75:72:7c:e5:1b:e5:cc:5a:bf:17:60:
87:86:0f:b2:ab:b5:dc:55:4f:c9:32:92:0a:99:9f:ea:82:09:
73:ab:92:8e:e0:a7:df:4e:1d:1b:e4:56:b6:5a:c3:f5:05:6b:
24:3c:1d:ab:11:e0:51:34:72:ed:90:75:8a:75:68:48:d7:40:
b3:4f:95:36:a1:05:43:34:4e:15:1d:d3:14:85:32:9b:bf:5c:
cd:3b:62:d1:9c:d6:b3:0a:90:ae:7a:eb:fa:05:5f:eb:79:5f:
96:81:0c:d9:2b:4e:37:76:fc:3c:a5:50:fb:33:2f:f8:37:c8:
40:17:d2:c1:c0:e8:99:79:a4:4e:f0:38:b3:74:ee:6e:17:1e:
5e:84:55:cb:4e:15:16:08:4e:d1:76:db:ff:ec:13:b2:5c:67:
88:e3:e1:69:20:b7:32:a7:30:38:f0:7e:b9:d1:7c:b3:f2:19:
1f:f4:34:5c:64:e4:02:99:7b:e7:c0:d3:bf:6f:16:82:d3:f5:
f2:44:d9:a3:f2:db:05:89:07:0a:ab:0e:56:b0:2f:09:80:ad:
62:cc:aa:87:3a:24:40:9e:66:89:ca:e2:aa:4f:c4:6b:2d:1e:
25:5c:52:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAE5vf8nYd8Z48ztQ5JW3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDk3M2MxZjQ0M2VjNGE4Mzg3YWFkN2FjYTc1ZDA3YjZm
YWE5ZGEwHhcNMjUwNTExMTYwMDMyWhcNMjUwNTEyMTYwMDMyWjAzMTEwLwYDVQQD
EyhhNWNkNzAxNjRmZWZkNTYxNWZhOWE5MWFkZWY3MDVmMmZjN2JjMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX582HzTe/bJ4pIKZDxQ3oMpmAS3
4zX+R0Pg7MIcq1Aw/4FcMqPxTnO5LTVP1zPbi+IIDtyQ/ruBB+ytgKZWXK/GElAD
eooThJvLAU3MB2f65k6kgLbPLukzgKVPU916dGz8xyEhOULgtU9LvE9GcKcdR/vD
WH3A3nnV4gICPBeOvEnyViq1lB0ata32s92a1OKtHkmFPZqrbtpnG1kiY1sprJ7a
q/P2z24b1Jp0ZcSYw2Z/RhMD3yv33feFTY/CKf3uK9vPs7VVY78FJihH+exG8qZz
DRKvkmVOSLNAxXsprlenzKv4Tj/nNsaMyYnBQORvevgdhvH1fzfPN+aWAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXNcBZP79VhX6mpGt73BfL8e8EeMB8GA1UdIwQY
MBaAFEoJc8H0Q+xKg4eq16ynXQe2+qnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMt
MTIxNzcyOWFmMWM4LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMtMTIxNzcyOWFmMWM4
LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9dUvciS
/DFiqZcthJB3mgofiCIBnck70nVyfOUb5cxavxdgh4YPsqu13FVPyTKSCpmf6oIJ
c6uSjuCn304dG+RWtlrD9QVrJDwdqxHgUTRy7ZB1inVoSNdAs0+VNqEFQzROFR3T
FIUym79czTti0ZzWswqQrnrr+gVf63lfloEM2StON3b8PKVQ+zMv+DfIQBfSwcDo
mXmkTvA4s3TubhceXoRVy04VFghO0Xbb/+wTslxniOPhaSC3MqcwOPB+udF8s/IZ
H/Q0XGTkApl758DTv28WgtP18kTZo/LbBYkHCqsOVrAvCYCtYsyqhzokQJ5micri
qk/Eay0eJVxSfA==
-----END CERTIFICATE-----
Generated at Sun May 11 18:42:47 2025 by rpki-client