Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: beemZRvguccGzDKQ/CcVYKlIGWLMapY5Augm/Xt44P4=
Subject key identifier: 88:5A:51:46:DB:4E:AE:4A:61:41:7F:F5:60:76:0E:29:16:67:1E:68
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 0196A0F6A197005FAE80A75E778D47F79210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 0EF1
Signing time: Mon 05 May 2025 15:00:39 +0000
Manifest this update: Mon 05 May 2025 15:00:39 +0000
Manifest next update: Tue 06 May 2025 15:00:39 +0000
Files and hashes: 1: JUMv7Yi2cpE5n4jH_daU8-Wkj_s.roa (hash: 8Ur2YBrwEIHwiqas+AFAXGNfkZXPANsLJAnLoARlVGk=)
2: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: arKPRSB6AaKYc1TAawGR+U/Z+8sN5EaJsF8N3rvjFC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:a1:97:00:5f:ae:80:a7:5e:77:8d:47:f7:92:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: May 5 15:00:39 2025 GMT
Not After : May 6 15:00:39 2025 GMT
Subject: CN=885a5146db4eae4a61417ff560760e2916671e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:3f:79:01:8b:e2:a1:3d:ad:37:f3:82:e6:
3a:a1:7f:f7:35:f5:a4:56:41:14:0f:85:c4:1b:54:
a1:96:b9:7e:2a:ea:52:c7:81:77:54:54:b7:c0:4f:
3b:7d:e2:c4:3b:73:a2:5c:77:b4:9d:2c:2b:f8:a8:
f1:a2:d3:62:97:e5:83:4d:61:bf:3b:43:f3:6d:76:
e1:55:46:a4:db:ff:6d:4b:7f:e7:b7:48:f2:c5:ff:
63:87:cd:07:39:6f:f4:70:2a:51:5f:82:6a:3f:9a:
b7:d6:6e:6e:57:67:d6:64:1f:f3:5f:a9:f4:69:7e:
3f:80:21:f1:5b:50:b2:f2:1d:d9:db:ce:59:e4:71:
84:4a:a7:b8:4b:b1:45:10:82:50:ad:8d:e2:f7:aa:
77:6e:df:47:37:36:49:1d:c6:72:9c:b2:91:42:55:
22:4f:74:0c:1c:13:d5:ce:ac:9e:58:bd:a0:18:bc:
99:dd:36:58:44:86:41:4a:a4:26:6c:a2:c4:12:28:
f8:ba:1e:da:d1:41:e9:a7:71:81:75:de:ae:d9:33:
fa:b2:55:b0:c1:d5:65:b8:67:0e:6e:83:e2:83:b6:
2a:fe:65:19:88:89:ae:67:06:9b:5d:26:f1:b1:1b:
d9:1e:97:c8:12:5b:bc:ce:16:2c:f5:4e:6a:10:a3:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5A:51:46:DB:4E:AE:4A:61:41:7F:F5:60:76:0E:29:16:67:1E:68
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:6c:96:71:cc:69:b8:74:83:0c:9a:7e:13:d9:08:65:e8:62:
14:48:f7:2c:c3:81:1c:04:db:d3:b9:9d:8c:22:f3:88:73:3b:
8b:86:96:e8:6b:48:24:81:92:71:ca:2b:15:56:fc:56:59:7b:
15:cb:1c:49:57:4a:df:ee:06:57:74:ab:74:b6:1e:30:33:da:
ba:88:d2:51:85:11:9c:f2:db:87:28:24:4f:9c:27:e0:c3:88:
76:89:c3:e4:7f:8a:33:ee:ad:e9:63:5a:6e:03:00:4d:15:d3:
60:22:67:cc:aa:1a:7f:70:63:8e:4e:20:fc:62:6b:2f:9d:a3:
f4:78:ea:a8:4d:46:51:0b:93:c9:75:62:78:ce:01:5d:78:eb:
e4:b8:04:fb:2c:b7:f6:53:84:6f:f9:bf:c7:76:07:2f:aa:bd:
9d:32:4d:76:2e:f4:4c:24:5c:07:7b:eb:73:62:6e:c0:71:d0:
e0:b9:0e:f5:18:6a:28:70:ee:65:be:fd:bf:68:d0:0a:a6:aa:
90:7d:f7:4e:52:bb:7a:59:31:f6:3d:33:c6:a1:5e:bb:ca:be:
77:82:67:e5:e7:c6:08:53:b4:ec:99:2d:f8:fb:80:66:50:52:
75:a1:07:e3:c2:f9:7e:00:3a:9e:15:c4:3b:81:3f:d4:0d:da:
fa:d1:45:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9qGXAF+ugKded41H95IQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl
OTc5NWMwHhcNMjUwNTA1MTUwMDM5WhcNMjUwNTA2MTUwMDM5WjAzMTEwLwYDVQQD
Eyg4ODVhNTE0NmRiNGVhZTRhNjE0MTdmZjU2MDc2MGUyOTE2NjcxZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhA/eQGL4qE9rTfzguY6oX/3NfWk
VkEUD4XEG1Shlrl+KupSx4F3VFS3wE87feLEO3OiXHe0nSwr+KjxotNil+WDTWG/
O0PzbXbhVUak2/9tS3/nt0jyxf9jh80HOW/0cCpRX4JqP5q31m5uV2fWZB/zX6n0
aX4/gCHxW1Cy8h3Z285Z5HGESqe4S7FFEIJQrY3i96p3bt9HNzZJHcZynLKRQlUi
T3QMHBPVzqyeWL2gGLyZ3TZYRIZBSqQmbKLEEij4uh7a0UHpp3GBdd6u2TP6slWw
wdVluGcOboPig7Yq/mUZiImuZwabXSbxsRvZHpfIElu8zhYs9U5qEKNfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhaUUbbTq5KYUF/9WB2DikWZx5oMB8GA1UdIwQY
MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt
NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj
LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2yWccxp
uHSDDJp+E9kIZehiFEj3LMOBHATb07mdjCLziHM7i4aW6GtIJIGSccorFVb8Vll7
FcscSVdK3+4GV3SrdLYeMDPauojSUYURnPLbhygkT5wn4MOIdonD5H+KM+6t6WNa
bgMATRXTYCJnzKoaf3Bjjk4g/GJrL52j9HjqqE1GUQuTyXVieM4BXXjr5LgE+yy3
9lOEb/m/x3YHL6q9nTJNdi70TCRcB3vrc2JuwHHQ4LkO9RhqKHDuZb79v2jQCqaq
kH33TlK7elkx9j0zxqFeu8q+d4Jn5efGCFO07Jkt+PuAZlBSdaEH48L5fgA6nhXE
O4E/1A3a+tFFgA==
-----END CERTIFICATE-----
Generated at Mon May 5 19:00:45 2025 by rpki-client