Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: 0/nir1vxb/YPQOIC3AWiAZRP88k0dypb6AVKukTrX/0=
Subject key identifier: EB:B4:4D:18:67:04:5B:36:5C:5A:AD:E2:7C:D3:C9:FE:EF:A1:7A:3A
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0196BB926AC5F7BB8FE22F5AE35293981D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0871
Signing time: Sat 10 May 2025 19:00:56 +0000
Manifest this update: Sat 10 May 2025 19:00:56 +0000
Manifest next update: Sun 11 May 2025 19:00:56 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: IdWSjjLsT6MB/D2tmyIV+iwD5Af0wwDxvLDLn7ZYFlI=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:6a:c5:f7:bb:8f:e2:2f:5a:e3:52:93:98:1d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: May 10 19:00:56 2025 GMT
Not After : May 11 19:00:56 2025 GMT
Subject: CN=ebb44d1867045b365c5aade27cd3c9feefa17a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:85:22:d6:8a:db:4f:03:5c:c8:06:93:a5:
43:aa:c6:fa:b8:b8:35:c5:c0:c2:4d:03:b9:bc:e6:
f6:3e:ce:4a:40:38:32:58:30:c3:14:a6:d8:03:d4:
ea:2c:80:db:ee:4e:00:50:40:69:e3:15:dc:93:5a:
15:ba:7b:50:ee:e1:4d:f4:71:68:5f:de:8e:99:b9:
0f:b6:4a:d2:65:91:46:df:2a:8d:08:4b:41:3a:84:
16:b3:2e:c7:60:ed:32:dc:af:67:82:4b:b5:7d:8b:
8d:5f:9d:d6:f7:32:76:fc:25:51:77:0a:0c:c3:d2:
e4:33:7c:ad:03:95:1d:2e:4d:0b:54:5f:04:cf:41:
04:33:9a:c3:31:14:2f:c8:dd:24:aa:f4:9e:cb:ac:
23:d5:34:82:7e:31:5e:62:e4:62:9e:7a:f1:9e:75:
4c:9c:c9:cd:71:78:99:4a:44:92:19:de:f8:51:f0:
6e:8b:c4:b5:77:50:dc:fa:b0:5a:49:94:07:a4:b4:
63:d6:92:4f:1e:34:67:64:59:61:f2:70:10:85:4a:
de:5b:55:93:b9:7c:fc:7d:e5:c7:e9:a9:dd:3c:f3:
35:e1:0a:30:fd:ec:65:e5:75:2d:b5:6b:46:0d:b5:
50:e0:2a:84:6e:fa:1d:54:42:f5:72:fd:ab:e6:63:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:4D:18:67:04:5B:36:5C:5A:AD:E2:7C:D3:C9:FE:EF:A1:7A:3A
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:d9:4b:e5:17:5f:52:a8:34:6b:61:8b:6c:c2:60:38:cc:
ff:bf:c1:af:41:75:47:7a:a0:c3:67:3d:71:97:e2:bf:6f:75:
4e:02:7d:5e:b7:01:88:26:03:59:50:c9:d9:45:1f:7d:26:3c:
84:1a:de:67:c7:ae:69:10:9f:bb:71:73:28:7e:a5:2b:b5:db:
73:28:95:c5:c9:ca:94:31:c5:84:d2:c2:db:c4:9c:8f:63:28:
9e:fa:b4:8c:74:a7:60:04:7c:0e:8d:26:25:3a:2a:94:f3:cb:
05:2c:5f:72:88:38:9d:cd:e5:73:f2:fb:a7:2b:fd:50:30:52:
d6:ec:2f:62:c0:92:5c:d0:6d:f2:8f:3e:16:9a:fd:32:2d:89:
37:f3:f5:5c:b9:79:ee:2c:cc:0a:ff:35:04:31:6c:b0:e2:e5:
af:0c:90:84:08:be:a2:d8:60:95:33:07:d0:e9:8b:96:eb:3d:
20:9d:81:d1:54:63:33:46:88:78:a7:92:6a:eb:26:74:1f:11:
f0:78:2e:48:3a:ce:9d:91:89:1a:3a:96:df:20:b9:f5:c0:ba:
93:b3:2d:e9:e9:90:b6:cb:d4:bf:37:56:4b:bc:df:79:6e:1c:
6b:f1:40:98:89:d2:44:57:44:6d:79:e9:67:93:b6:dd:ab:b2:
55:bc:c7:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kmrF97uP4i9a41KTmB0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4
YTdjODEwHhcNMjUwNTEwMTkwMDU2WhcNMjUwNTExMTkwMDU2WjAzMTEwLwYDVQQD
EyhlYmI0NGQxODY3MDQ1YjM2NWM1YWFkZTI3Y2QzYzlmZWVmYTE3YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBiFItaK208DXMgGk6VDqsb6uLg1
xcDCTQO5vOb2Ps5KQDgyWDDDFKbYA9TqLIDb7k4AUEBp4xXck1oVuntQ7uFN9HFo
X96OmbkPtkrSZZFG3yqNCEtBOoQWsy7HYO0y3K9ngku1fYuNX53W9zJ2/CVRdwoM
w9LkM3ytA5UdLk0LVF8Ez0EEM5rDMRQvyN0kqvSey6wj1TSCfjFeYuRinnrxnnVM
nMnNcXiZSkSSGd74UfBui8S1d1Dc+rBaSZQHpLRj1pJPHjRnZFlh8nAQhUreW1WT
uXz8feXH6andPPM14Qow/exl5XUttWtGDbVQ4CqEbvodVEL1cv2r5mP4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu0TRhnBFs2XFqt4nzTyf7voXo6MB8GA1UdIwQY
MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErrZS+UX
X1KoNGthi2zCYDjM/7/Br0F1R3qgw2c9cZfiv291TgJ9XrcBiCYDWVDJ2UUffSY8
hBreZ8euaRCfu3FzKH6lK7XbcyiVxcnKlDHFhNLC28Scj2Monvq0jHSnYAR8Do0m
JToqlPPLBSxfcog4nc3lc/L7pyv9UDBS1uwvYsCSXNBt8o8+Fpr9Mi2JN/P1XLl5
7izMCv81BDFssOLlrwyQhAi+othglTMH0OmLlus9IJ2B0VRjM0aIeKeSausmdB8R
8HguSDrOnZGJGjqW3yC59cC6k7Mt6emQtsvUvzdWS7zfeW4ca/FAmInSRFdEbXnp
Z5O23auyVbzHAg==
-----END CERTIFICATE-----
Generated at Sun May 11 04:33:51 2025 by rpki-client