Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: ac0bHjXdfOyHWb8hcQ4nYEn5h0KFLxlQfIVRmV45R44=
Subject key identifier: A7:EB:C5:46:A6:9B:36:A9:10:FB:DE:5F:BC:88:65:0C:41:3D:52:1A
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 01969D87D139C36FFD6E3EED45F58DBD8BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 14B6
Signing time: Sun 04 May 2025 23:00:45 +0000
Manifest this update: Sun 04 May 2025 23:00:45 +0000
Manifest next update: Mon 05 May 2025 23:00:45 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: mUmmb+XXb9/66D1OKDP+dzQF7CQajZdaFdE+ivohE7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:d1:39:c3:6f:fd:6e:3e:ed:45:f5:8d:bd:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: May 4 23:00:45 2025 GMT
Not After : May 5 23:00:45 2025 GMT
Subject: CN=a7ebc546a69b36a910fbde5fbc88650c413d521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:02:b0:83:01:e8:20:46:dc:30:f7:12:19:
57:51:17:b9:ff:54:df:57:ca:ae:0e:80:1e:a3:3d:
ff:68:2e:01:33:65:f4:2b:7b:b6:a0:b1:26:15:88:
eb:bf:33:6c:77:6e:11:3a:3a:7c:12:ce:dc:e6:56:
81:84:71:e1:17:20:33:ab:d1:57:ee:9c:e1:b9:cf:
a6:f4:6a:0c:16:6f:04:a9:2a:fd:ca:8e:b4:e5:cb:
69:ff:fd:88:d5:4d:30:23:c0:50:39:a9:c6:80:9e:
1b:d0:6a:40:a9:a0:ca:fb:c9:90:a6:f3:e3:3d:4e:
17:f5:de:e6:39:65:15:6f:fe:d6:7c:fa:2d:32:39:
ec:1b:e0:0f:38:12:e0:76:bd:66:48:9f:ad:ce:0a:
09:01:34:26:cd:3c:44:bf:7a:50:16:b2:e6:1b:22:
73:c5:71:81:4f:f2:7e:4b:af:eb:24:67:cd:9b:f5:
80:ac:2a:6f:8f:1b:d2:60:47:f6:b1:73:c9:e1:ac:
6b:a8:1a:21:71:54:12:01:26:52:57:ae:9f:59:fc:
06:ab:6c:92:90:bc:86:d3:a2:be:45:b4:97:17:39:
f2:22:3f:74:8c:47:2d:01:73:9c:08:ff:35:1a:a2:
12:0b:35:e1:bd:a2:7b:73:bc:3e:b2:21:e7:ef:31:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:C5:46:A6:9B:36:A9:10:FB:DE:5F:BC:88:65:0C:41:3D:52:1A
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:0d:73:58:df:e0:a7:ee:c7:32:9c:8a:9c:f7:fb:e2:7d:
75:2c:40:03:95:1a:79:c1:0f:9a:30:79:bc:19:e0:80:76:78:
84:10:0b:26:9d:0a:8a:71:89:80:fb:a2:9d:41:26:ef:cd:d7:
eb:be:1e:46:dc:65:94:9e:9e:d4:40:f1:fc:ca:4c:27:84:a7:
55:14:2c:01:11:d4:07:2f:53:39:5b:d9:eb:f0:e7:53:c1:b1:
30:4a:73:a0:d6:e9:8e:64:81:84:95:b5:c5:5d:f4:27:4c:49:
77:25:cc:3b:db:fa:3a:f5:f2:69:a9:ff:77:94:98:e8:b9:98:
5d:d4:9b:1b:f6:5e:f7:8a:b0:3b:25:36:3e:80:25:a3:57:81:
d3:b3:98:23:71:d8:0e:03:33:1a:2f:38:8f:3c:d6:f2:5f:d5:
da:61:53:b3:e9:27:de:3e:67:c5:88:72:b2:2a:99:93:6b:3b:
cd:7a:4f:3c:fb:b6:ff:c5:69:ab:db:05:7c:2d:4b:9a:cb:f1:
d3:b8:d0:23:25:4d:07:2e:73:bd:69:34:1e:94:53:c2:77:75:
4d:19:19:58:71:50:09:a3:44:6a:e1:fd:35:5d:65:7c:40:5e:
58:92:5a:09:2f:7b:3f:fb:ec:39:a0:94:10:7e:6d:3a:be:70:
7c:9c:1d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh9E5w2/9bj7tRfWNvYu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmI2ZDJhNWQ0MTMwNTYwZjYxNzk2M2Q5ZmJjOTM0NDJk
YzFjY2QwHhcNMjUwNTA0MjMwMDQ1WhcNMjUwNTA1MjMwMDQ1WjAzMTEwLwYDVQQD
EyhhN2ViYzU0NmE2OWIzNmE5MTBmYmRlNWZiYzg4NjUwYzQxM2Q1MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgUCsIMB6CBG3DD3EhlXURe5/1Tf
V8quDoAeoz3/aC4BM2X0K3u2oLEmFYjrvzNsd24ROjp8Es7c5laBhHHhFyAzq9FX
7pzhuc+m9GoMFm8EqSr9yo605ctp//2I1U0wI8BQOanGgJ4b0GpAqaDK+8mQpvPj
PU4X9d7mOWUVb/7WfPotMjnsG+APOBLgdr1mSJ+tzgoJATQmzTxEv3pQFrLmGyJz
xXGBT/J+S6/rJGfNm/WArCpvjxvSYEf2sXPJ4axrqBohcVQSASZSV66fWfwGq2yS
kLyG06K+RbSXFznyIj90jEctAXOcCP81GqISCzXhvaJ7c7w+siHn7zE9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfrxUammzapEPveX7yIZQxBPVIaMB8GA1UdIwQY
MBaAFEsrbSpdQTBWD2F5Y9n7yTRC3BzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMt
YzU3NDE1ODUwMmM4LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MGVmNDEtMzFmNC00MjBkLWJhZGMtYzU3NDE1ODUwMmM4
LzEvU3l0dEtsMUJNRllQWVhsajJmdkpORUxjSE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA4Nc1jf
4KfuxzKcipz3++J9dSxAA5UaecEPmjB5vBnggHZ4hBALJp0KinGJgPuinUEm783X
674eRtxllJ6e1EDx/MpMJ4SnVRQsARHUBy9TOVvZ6/DnU8GxMEpzoNbpjmSBhJW1
xV30J0xJdyXMO9v6OvXyaan/d5SY6LmYXdSbG/Ze94qwOyU2PoAlo1eB07OYI3HY
DgMzGi84jzzW8l/V2mFTs+kn3j5nxYhysiqZk2s7zXpPPPu2/8Vpq9sFfC1Lmsvx
07jQIyVNBy5zvWk0HpRTwnd1TRkZWHFQCaNEauH9NV1lfEBeWJJaCS97P/vsOaCU
EH5tOr5wfJwdrg==
-----END CERTIFICATE-----
Generated at Mon May 5 03:44:08 2025 by rpki-client