Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: dDa7nUvih1Q8Simlsk1fXIGALZKAjq1qcWMVipKwioc=
Subject key identifier: BE:92:B1:5C:F7:9B:42:8E:30:5C:21:42:3F:E1:69:B5:57:4B:28:2F
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 0196A9C2D896AC8A6C7C5405C4631806A67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 08:00:40 +0000
Manifest this update: Wed 07 May 2025 08:00:40 +0000
Manifest next update: Thu 08 May 2025 08:00:40 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: tRMVe+sRg+rnEmaVtnHc+9ehO8zCZGnkwxwCdfqOB4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:d8:96:ac:8a:6c:7c:54:05:c4:63:18:06:a6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: May 7 08:00:40 2025 GMT
Not After : May 8 08:00:40 2025 GMT
Subject: CN=be92b15cf79b428e305c21423fe169b5574b282f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:5e:60:4f:a7:bb:ad:55:4c:85:4c:6d:e0:
98:fb:19:d6:0d:a5:9d:7a:53:9b:7a:b3:04:fc:af:
33:bd:06:e9:ee:6e:5a:b1:70:28:f1:74:d5:a3:21:
6c:60:c6:fa:b4:be:e5:4b:4d:3e:2e:c2:b4:96:b0:
ce:b1:40:7c:ea:69:e4:9b:cd:62:f9:cd:b3:b5:1f:
07:a3:33:ad:be:77:12:9b:b7:82:eb:93:88:6a:89:
69:0c:89:49:59:f5:a2:a5:da:26:00:0f:b8:9d:a6:
c7:e3:ab:3c:60:de:0f:a2:c8:4e:30:24:3f:fc:1c:
27:31:c0:71:39:a4:18:98:b2:5d:96:3e:55:52:76:
be:60:d5:12:6e:3a:5e:f4:dd:3b:6b:72:0b:88:03:
40:19:09:a6:b9:13:38:28:11:70:fe:c9:9a:7a:dd:
d7:38:8a:c7:81:29:d9:91:3b:f1:29:a7:94:cf:57:
4a:0b:da:04:15:8f:61:05:cf:fb:bd:43:ab:cc:d4:
b8:d9:d5:3e:97:7f:69:a1:be:71:b6:d4:98:65:d4:
ac:25:b6:eb:fb:19:2c:41:5c:89:49:6e:79:85:62:
18:66:c3:8a:61:d8:1a:6f:09:d1:06:cd:7f:45:02:
80:e9:91:f1:38:f7:b4:0e:b4:ad:4c:21:c8:a0:28:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:92:B1:5C:F7:9B:42:8E:30:5C:21:42:3F:E1:69:B5:57:4B:28:2F
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2d:b0:1f:7e:86:55:54:72:95:58:1c:1b:22:a0:cf:d0:99:
1e:bc:23:84:26:89:fc:4d:cc:46:32:c3:86:19:1c:2f:f9:23:
52:7f:01:1a:33:e1:9c:f5:9d:23:c8:e5:5b:e5:20:5b:94:3d:
40:2b:bf:7c:83:19:da:b0:9d:9a:1f:e3:12:09:a9:41:53:56:
38:34:6d:28:7b:8a:49:87:70:9a:d4:36:8a:c6:75:a7:03:b8:
9d:53:b6:a7:94:f9:2b:a5:22:04:c4:15:e3:e3:bf:9a:25:cb:
29:6f:f4:9b:b0:a0:44:02:56:a5:12:38:57:92:15:8b:02:12:
8c:1a:9d:54:08:4b:fd:9e:db:ed:be:43:89:b4:e3:27:5f:54:
73:80:e1:f2:1f:27:cc:0a:42:22:81:73:1c:78:76:ef:63:bb:
8c:7c:b1:01:23:ba:ce:3a:a9:db:ee:98:6a:40:a2:70:48:76:
ec:78:2b:ca:46:31:24:89:a1:af:04:7c:37:5b:92:5f:de:18:
06:28:a1:74:0c:17:28:6a:27:2e:0e:1f:2c:dc:84:a5:ea:a0:
85:1a:10:74:2b:6c:5a:94:a5:22:e4:47:2f:0c:4f:c3:4e:33:
95:6b:cb:cc:16:f3:b5:00:b0:0d:45:1d:0f:a6:85:a6:61:f3:
2c:6e:e7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapwtiWrIpsfFQFxGMYBqZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmYzMmFiZjc3ZjQxMmMyMTBmNDA5ODIyZDEzOThlYzNi
ZWRhOWIwHhcNMjUwNTA3MDgwMDQwWhcNMjUwNTA4MDgwMDQwWjAzMTEwLwYDVQQD
EyhiZTkyYjE1Y2Y3OWI0MjhlMzA1YzIxNDIzZmUxNjliNTU3NGIyODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrxeYE+nu61VTIVMbeCY+xnWDaWd
elOberME/K8zvQbp7m5asXAo8XTVoyFsYMb6tL7lS00+LsK0lrDOsUB86mnkm81i
+c2ztR8HozOtvncSm7eC65OIaolpDIlJWfWipdomAA+4nabH46s8YN4PoshOMCQ/
/BwnMcBxOaQYmLJdlj5VUna+YNUSbjpe9N07a3ILiANAGQmmuRM4KBFw/smaet3X
OIrHgSnZkTvxKaeUz1dKC9oEFY9hBc/7vUOrzNS42dU+l39pob5xttSYZdSsJbbr
+xksQVyJSW55hWIYZsOKYdgabwnRBs1/RQKA6ZHxOPe0DrStTCHIoChxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6SsVz3m0KOMFwhQj/habVXSygvMB8GA1UdIwQY
MBaAFEm/Mqv3f0EsIQ9AmCLROY7DvtqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEt
MGJlNjMzN2JmNmI2LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEtMGJlNjMzN2JmNmI2
LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy2wH36G
VVRylVgcGyKgz9CZHrwjhCaJ/E3MRjLDhhkcL/kjUn8BGjPhnPWdI8jlW+UgW5Q9
QCu/fIMZ2rCdmh/jEgmpQVNWODRtKHuKSYdwmtQ2isZ1pwO4nVO2p5T5K6UiBMQV
4+O/miXLKW/0m7CgRAJWpRI4V5IViwISjBqdVAhL/Z7b7b5DibTjJ19Uc4Dh8h8n
zApCIoFzHHh272O7jHyxASO6zjqp2+6YakCicEh27HgrykYxJImhrwR8N1uSX94Y
BiihdAwXKGonLg4fLNyEpeqghRoQdCtsWpSlIuRHLwxPw04zlWvLzBbztQCwDUUd
D6aFpmHzLG7nIw==
-----END CERTIFICATE-----
Generated at Wed May 7 17:17:25 2025 by rpki-client