Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: izcGRUD3wOpGTa5mzRGx4tmamIaw3c9Yg+/uzLVpIQA=
Subject key identifier: EC:DC:5B:A6:F7:A0:B8:CF:34:FD:CA:AA:07:AA:3E:AB:87:4B:82:B6
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 0196A088771CB6D292935DB867C01EDA291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0DFA
Signing time: Mon 05 May 2025 13:00:19 +0000
Manifest this update: Mon 05 May 2025 13:00:19 +0000
Manifest next update: Tue 06 May 2025 13:00:19 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: 0FVpK1VXANfo5KnafNzNE0BnOB7HGyQ/ty9rP4MkcSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:77:1c:b6:d2:92:93:5d:b8:67:c0:1e:da:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: May 5 13:00:19 2025 GMT
Not After : May 6 13:00:19 2025 GMT
Subject: CN=ecdc5ba6f7a0b8cf34fdcaaa07aa3eab874b82b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:0d:f9:b8:76:d5:a9:b2:24:fe:d0:e5:85:
32:64:35:20:24:6f:7a:71:b2:0a:07:15:15:9e:db:
12:ad:26:ab:7e:ab:2a:e3:08:e9:80:83:a7:9e:1a:
31:7a:df:18:6e:ad:6d:a0:e3:54:d7:c0:f5:80:b3:
ff:94:38:1e:00:1b:01:3b:9b:8c:c9:0e:14:d9:e9:
ed:1c:2b:57:60:fa:2a:a9:58:cd:c6:46:98:62:16:
b0:92:6e:4d:2c:40:16:0a:20:c7:2b:a4:63:c6:b6:
c9:eb:25:75:36:34:bd:c7:92:01:38:20:72:5d:53:
a5:2d:f1:aa:fe:0b:54:52:04:c9:ab:25:06:84:d1:
e5:b1:7e:d3:e6:72:ac:2c:c7:b2:58:20:b3:7d:6b:
24:8f:8d:e0:62:23:11:34:64:60:31:25:40:5d:c0:
5c:ff:7d:7a:9a:83:58:f9:33:fc:e6:39:6c:4e:d6:
17:94:0e:03:31:89:ae:76:9f:fb:64:af:43:b5:c1:
c1:fa:b4:51:72:87:a6:33:3c:99:21:4b:a6:99:cd:
ef:b9:fb:c8:f8:c1:5f:21:70:f4:4b:02:21:a7:ee:
3e:41:14:25:d8:70:33:54:ea:65:5d:48:13:36:b6:
62:7b:28:6a:c7:dd:6e:56:bf:52:c3:cf:b9:0d:84:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DC:5B:A6:F7:A0:B8:CF:34:FD:CA:AA:07:AA:3E:AB:87:4B:82:B6
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:36:95:ac:fd:c4:7f:1a:8f:05:18:7d:df:66:ad:87:97:
14:9c:25:2f:b9:db:ec:f6:99:0f:93:01:ab:bc:40:97:a7:b0:
70:26:74:56:2b:3f:88:76:46:d3:6b:b1:26:f7:47:cc:9a:73:
49:29:9a:b8:98:98:0e:02:04:6e:cc:0e:f2:4a:04:e8:84:04:
1a:d5:39:9d:fb:c6:5c:51:bb:17:7a:e4:e1:c3:84:9a:8f:b9:
c2:c9:34:59:a8:d9:a8:eb:e0:fd:f3:f9:bf:43:f7:53:87:f6:
72:30:41:17:71:62:aa:ac:62:78:ef:4e:c4:1f:c3:ed:54:93:
28:40:2c:6c:d9:b1:53:a9:a3:29:73:2a:0e:36:b0:7b:9c:bf:
b2:b2:a3:0b:3e:ff:7b:0f:fd:88:f3:af:1d:69:f0:d0:19:8a:
b5:94:96:04:b0:4d:ff:12:f5:89:99:6b:f3:7d:2e:eb:f8:37:
e5:19:46:a0:14:8b:66:07:be:34:f9:6f:2a:e2:40:3c:26:37:
ef:ca:d9:25:1b:a8:78:1f:f9:66:62:7f:80:ea:dc:aa:d3:b5:
5d:d2:9b:26:62:d8:f8:a2:02:dc:4e:d0:ce:a5:9b:b7:1c:95:
bf:e4:2c:c2:6a:c7:ca:c4:48:eb:92:2d:d8:7c:5c:57:44:99:
5b:2b:51:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiHccttKSk124Z8Ae2ikcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2
MjUzNmMwHhcNMjUwNTA1MTMwMDE5WhcNMjUwNTA2MTMwMDE5WjAzMTEwLwYDVQQD
EyhlY2RjNWJhNmY3YTBiOGNmMzRmZGNhYWEwN2FhM2VhYjg3NGI4MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaoN+bh21amyJP7Q5YUyZDUgJG96
cbIKBxUVntsSrSarfqsq4wjpgIOnnhoxet8Ybq1toONU18D1gLP/lDgeABsBO5uM
yQ4U2entHCtXYPoqqVjNxkaYYhawkm5NLEAWCiDHK6RjxrbJ6yV1NjS9x5IBOCBy
XVOlLfGq/gtUUgTJqyUGhNHlsX7T5nKsLMeyWCCzfWskj43gYiMRNGRgMSVAXcBc
/316moNY+TP85jlsTtYXlA4DMYmudp/7ZK9DtcHB+rRRcoemMzyZIUummc3vufvI
+MFfIXD0SwIhp+4+QRQl2HAzVOplXUgTNrZieyhqx91uVr9Sw8+5DYQtuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzcW6b3oLjPNP3KqgeqPquHS4K2MB8GA1UdIwQY
MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt
NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5
LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjU2laz9
xH8ajwUYfd9mrYeXFJwlL7nb7PaZD5MBq7xAl6ewcCZ0Vis/iHZG02uxJvdHzJpz
SSmauJiYDgIEbswO8koE6IQEGtU5nfvGXFG7F3rk4cOEmo+5wsk0WajZqOvg/fP5
v0P3U4f2cjBBF3FiqqxieO9OxB/D7VSTKEAsbNmxU6mjKXMqDjawe5y/srKjCz7/
ew/9iPOvHWnw0BmKtZSWBLBN/xL1iZlr830u6/g35RlGoBSLZge+NPlvKuJAPCY3
78rZJRuoeB/5ZmJ/gOrcqtO1XdKbJmLY+KIC3E7QzqWbtxyVv+QswmrHysRI65It
2HxcV0SZWytR6Q==
-----END CERTIFICATE-----
Generated at Mon May 5 18:07:44 2025 by rpki-client