Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: Zp8uLcxJgYzRQFu/stHUWd5+Lrb4HHkv/UQqjAegGw8=
Subject key identifier: 21:77:45:09:B0:85:34:83:1C:C9:10:85:74:38:0F:30:64:7D:C4:5C
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 0196C503339A07B219BB23155A294EDB67CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 15:00:43 +0000
Manifest this update: Mon 12 May 2025 15:00:43 +0000
Manifest next update: Tue 13 May 2025 15:00:43 +0000
Files and hashes: 1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: wZjmYDrc/mxid3tXVmCD1GrzCvAililgzA77N5DxQps=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:33:9a:07:b2:19:bb:23:15:5a:29:4e:db:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: May 12 15:00:43 2025 GMT
Not After : May 13 15:00:43 2025 GMT
Subject: CN=21774509b08534831cc9108574380f30647dc45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:1b:c6:56:72:01:9c:32:30:bb:1c:a0:bb:
64:fd:df:d4:1e:e5:89:a6:5b:ef:6d:b4:23:49:a5:
9f:a0:63:dd:93:0d:67:b4:b3:9b:97:50:ac:01:83:
cf:b2:81:90:54:a4:26:8e:54:c0:95:8e:29:b7:c8:
dd:fa:2f:5d:14:5c:ef:ea:8e:ff:d0:2f:c8:02:d1:
1f:ac:ce:51:a7:f8:2b:9b:da:9e:5b:20:50:82:81:
73:6b:c0:41:a6:e0:af:d9:55:ec:ff:60:e2:14:14:
1f:58:a9:0d:fe:2f:34:ff:4a:8f:e1:db:e6:1f:5a:
80:74:0b:18:a2:56:c9:4e:52:57:f1:b2:79:8e:b7:
71:56:a1:4d:10:4e:26:1d:95:6a:98:ff:17:0d:17:
39:02:67:0d:7e:fe:ee:fe:98:e8:b9:37:f9:f4:dc:
f7:1b:bd:f8:9b:bc:bb:e5:03:3f:88:d3:7c:f9:00:
74:c4:80:75:2f:6a:31:d1:be:1d:0d:3b:df:9f:f4:
59:0b:bc:41:fc:06:8d:6a:94:a7:ca:b5:bc:61:1c:
8e:09:11:53:2e:79:cb:34:f1:1f:ee:ce:d9:d1:cf:
1a:25:a0:16:0c:e0:e0:69:82:6d:91:ae:cb:cb:bc:
6f:56:3f:74:d7:57:15:ad:02:d5:21:c7:35:22:66:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:45:09:B0:85:34:83:1C:C9:10:85:74:38:0F:30:64:7D:C4:5C
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4c:a6:0e:f4:58:f7:44:08:64:75:9b:d1:24:9e:71:ed:c8:
4e:34:3e:a9:65:8b:1f:7c:c9:06:77:07:26:8e:26:a9:0d:5e:
63:92:c8:a9:03:24:25:e9:2b:dc:b4:b4:a2:63:d0:25:b5:b4:
e1:ef:4d:d0:cb:ad:99:be:b3:fa:30:4a:7d:f6:f0:3d:e7:cc:
33:97:64:cc:bb:57:c2:60:00:1a:39:0e:97:f2:f7:40:52:2b:
f9:75:dd:d3:7f:d6:85:45:f0:b8:c8:c8:ce:fa:99:70:10:f5:
c7:d4:96:35:65:f1:da:48:1b:4f:08:1c:85:29:fa:31:39:14:
9a:68:49:c9:07:46:54:f2:48:94:94:f3:e5:85:3f:7d:cc:8b:
e6:09:64:ea:34:8f:37:36:1c:9d:53:e0:6f:86:79:8b:f1:64:
a0:41:04:b7:fd:8d:7a:18:33:d6:6f:6e:34:9f:41:d1:fc:e9:
ed:00:48:09:48:ea:13:df:cd:e1:09:91:8b:3b:bf:85:16:c6:
ad:c9:2f:7e:4f:f7:41:39:07:f1:a3:99:46:1e:da:c3:bb:d2:
c3:23:ae:04:c8:ec:3f:05:90:cf:2c:64:05:8e:2d:a5:6c:34:
4b:16:86:95:44:bf:e3:27:60:90:90:a7:e5:b6:5f:1c:9d:0d:
a4:11:63:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFAzOaB7IZuyMVWilO22fNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx
OTk1ZGIwHhcNMjUwNTEyMTUwMDQzWhcNMjUwNTEzMTUwMDQzWjAzMTEwLwYDVQQD
EygyMTc3NDUwOWIwODUzNDgzMWNjOTEwODU3NDM4MGYzMDY0N2RjNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYMbxlZyAZwyMLscoLtk/d/UHuWJ
plvvbbQjSaWfoGPdkw1ntLObl1CsAYPPsoGQVKQmjlTAlY4pt8jd+i9dFFzv6o7/
0C/IAtEfrM5Rp/grm9qeWyBQgoFza8BBpuCv2VXs/2DiFBQfWKkN/i80/0qP4dvm
H1qAdAsYolbJTlJX8bJ5jrdxVqFNEE4mHZVqmP8XDRc5AmcNfv7u/pjouTf59Nz3
G734m7y75QM/iNN8+QB0xIB1L2ox0b4dDTvfn/RZC7xB/AaNapSnyrW8YRyOCRFT
LnnLNPEf7s7Z0c8aJaAWDODgaYJtka7Ly7xvVj9011cVrQLVIcc1ImbjfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF3RQmwhTSDHMkQhXQ4DzBkfcRcMB8GA1UdIwQY
MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt
NDgwYzMyZjQwMGUxLzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx
LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkymDvRY
90QIZHWb0SSece3ITjQ+qWWLH3zJBncHJo4mqQ1eY5LIqQMkJekr3LS0omPQJbW0
4e9N0Mutmb6z+jBKffbwPefMM5dkzLtXwmAAGjkOl/L3QFIr+XXd03/WhUXwuMjI
zvqZcBD1x9SWNWXx2kgbTwgchSn6MTkUmmhJyQdGVPJIlJTz5YU/fcyL5glk6jSP
NzYcnVPgb4Z5i/FkoEEEt/2Nehgz1m9uNJ9B0fzp7QBICUjqE9/N4QmRizu/hRbG
rckvfk/3QTkH8aOZRh7aw7vSwyOuBMjsPwWQzyxkBY4tpWw0SxaGlUS/4ydgkJCn
5bZfHJ0NpBFjAw==
-----END CERTIFICATE-----
Generated at Mon May 12 17:43:22 2025 by rpki-client