Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: jcYwpnze3OSgRlZvP6pzqFEhEJusWlIlu0JvNjPEskM=
Subject key identifier: CA:44:A1:2C:14:F5:02:5A:F7:C1:8C:58:35:B0:B6:C4:07:84:B5:26
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 0196A3C0907483AFEDE328BCC959B1E1D086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 06FD
Signing time: Tue 06 May 2025 04:00:28 +0000
Manifest this update: Tue 06 May 2025 04:00:28 +0000
Manifest next update: Wed 07 May 2025 04:00:28 +0000
Files and hashes: 1: 1fEhDLG2T1y1zCMSekjeKTFgEiE.roa (hash: qkZRZL3uEJ/IofMfb0sGApiJ8jObyAIyttVh0abUKHc=)
2: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: npEN6KZ5Y5AsdRGBvnlGq/taeUkMutGqXL8o6sQXwN4=)
3: Ungcud01aQHgTMIDHqxKgOj76qo.roa (hash: vzFsWzaNMb5tmpdLeHM9BlzRIek6QkO8MJb/yx40U/I=)
4: aNjEb5eKDyYkgeaI_pw6s6Nyxio.roa (hash: LXIG7QItKisSD3lO6v16i6iN7S5ddhKshFToQIqNXAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:90:74:83:af:ed:e3:28:bc:c9:59:b1:e1:d0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: May 6 04:00:28 2025 GMT
Not After : May 7 04:00:28 2025 GMT
Subject: CN=ca44a12c14f5025af7c18c5835b0b6c40784b526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:88:37:88:2d:fe:9c:d6:90:fa:7d:8c:ff:
d3:1d:23:a0:c9:5f:43:d9:af:09:e5:b7:03:26:2c:
87:35:6a:30:79:9a:42:b2:f2:12:cc:39:96:ea:dc:
a3:7c:41:bd:bf:3a:74:d7:a4:f9:c1:4a:f6:c5:3f:
1a:e1:7e:01:00:fa:95:99:06:ee:4e:a6:5b:e4:03:
fb:6b:76:da:54:ec:c7:75:59:51:6f:b8:7a:fe:11:
ab:ca:5b:a0:ab:26:2b:37:b8:bc:97:12:15:4a:91:
a3:6b:fe:00:82:81:4a:7f:19:ab:5b:b5:d9:d2:43:
dd:ea:05:59:45:44:b9:9a:ae:b2:39:9e:75:32:e7:
fc:a2:e3:f1:c3:c3:2d:fe:08:88:10:07:8b:30:e0:
f5:dc:f1:70:0a:bd:37:d9:29:e7:13:40:82:e3:d2:
eb:17:56:ae:52:53:93:be:44:01:a6:99:82:10:94:
c8:bb:97:ef:cc:4c:fd:23:42:ce:87:f8:24:f4:69:
14:cf:88:27:a4:32:09:f2:82:92:aa:6a:06:fe:88:
af:62:13:37:7c:b4:b5:f0:7e:60:30:c2:52:79:4e:
2e:a0:ba:ea:0c:7a:95:76:d7:cd:22:c1:8e:ab:bb:
6e:22:f8:e2:e6:1b:86:87:4a:16:34:b5:42:c7:a8:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:A1:2C:14:F5:02:5A:F7:C1:8C:58:35:B0:B6:C4:07:84:B5:26
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f0:6c:75:9b:ef:76:cf:a8:07:7b:4c:16:33:7e:02:25:47:
15:c2:9a:b6:d5:7d:11:6a:e0:70:81:8a:eb:ac:82:22:51:cb:
d7:83:3b:93:64:5d:4f:5d:2a:17:91:4f:24:0b:25:83:ad:f6:
e4:74:05:2e:a8:df:79:03:b4:b8:8a:82:bf:e3:71:e0:00:34:
96:c5:6a:7c:f3:7d:db:43:d5:ae:6b:e9:e0:68:af:50:16:22:
84:8e:05:9c:03:5b:27:a3:5a:7c:7f:aa:4f:4d:6d:dd:13:bb:
21:9c:65:eb:03:37:2e:d5:1c:dd:18:d6:f7:c1:70:e0:3c:d6:
b8:5d:48:2d:45:64:e3:02:a4:f1:a8:66:1e:5a:04:2c:8c:e2:
c7:3a:2d:3d:38:e6:2e:91:ab:93:a4:17:e7:df:a4:a9:12:18:
55:36:db:9f:b2:8a:99:fa:80:16:72:bf:76:ac:5e:ab:78:b6:
53:64:98:68:62:5f:d7:d7:42:34:9a:73:c3:f0:57:40:13:ff:
0f:57:91:5d:66:d3:a1:e4:61:5a:60:36:af:28:26:a2:24:30:
5d:43:8f:71:84:a2:2b:ab:e2:98:c2:a1:4d:86:3a:98:a6:e0:
85:41:d8:2c:a8:48:0e:05:99:ac:31:49:a7:45:16:fd:c0:b6:
7f:73:89:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajwJB0g6/t4yi8yVmx4dCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjdjMWE0Njc3ZWI3ODI2ZGFlNjlkZTAxYTY5OWI2MjAx
ZDYyNDQwHhcNMjUwNTA2MDQwMDI4WhcNMjUwNTA3MDQwMDI4WjAzMTEwLwYDVQQD
EyhjYTQ0YTEyYzE0ZjUwMjVhZjdjMThjNTgzNWIwYjZjNDA3ODRiNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtKIN4gt/pzWkPp9jP/THSOgyV9D
2a8J5bcDJiyHNWoweZpCsvISzDmW6tyjfEG9vzp016T5wUr2xT8a4X4BAPqVmQbu
TqZb5AP7a3baVOzHdVlRb7h6/hGrylugqyYrN7i8lxIVSpGja/4AgoFKfxmrW7XZ
0kPd6gVZRUS5mq6yOZ51Muf8ouPxw8Mt/giIEAeLMOD13PFwCr032SnnE0CC49Lr
F1auUlOTvkQBppmCEJTIu5fvzEz9I0LOh/gk9GkUz4gnpDIJ8oKSqmoG/oivYhM3
fLS18H5gMMJSeU4uoLrqDHqVdtfNIsGOq7tuIvji5huGh0oWNLVCx6iOkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpEoSwU9QJa98GMWDWwtsQHhLUmMB8GA1UdIwQY
MBaAFEn3waRnfreCba5p3gGmmbYgHWJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEt
NTBjMTZiZGQ1YzI0LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS80ZGJkNjMtNzZiMS00YjAzLTlkZWEtNTBjMTZiZGQ1YzI0
LzEvU2ZmQnBHZC10NEp0cm1uZUFhYVp0aUFkWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/BsdZvv
ds+oB3tMFjN+AiVHFcKattV9EWrgcIGK66yCIlHL14M7k2RdT10qF5FPJAslg632
5HQFLqjfeQO0uIqCv+Nx4AA0lsVqfPN920PVrmvp4GivUBYihI4FnANbJ6NafH+q
T01t3RO7IZxl6wM3LtUc3RjW98Fw4DzWuF1ILUVk4wKk8ahmHloELIzixzotPTjm
LpGrk6QX59+kqRIYVTbbn7KKmfqAFnK/dqxeq3i2U2SYaGJf19dCNJpzw/BXQBP/
D1eRXWbToeRhWmA2rygmoiQwXUOPcYSiK6vimMKhTYY6mKbghUHYLKhIDgWZrDFJ
p0UW/cC2f3OJaA==
-----END CERTIFICATE-----
Generated at Tue May 6 07:48:04 2025 by rpki-client