Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: oMIhZLE9VVAqZhpt9cxh6qdINxIqAM50hC0EReA1g30=
Subject key identifier: E2:5A:F9:48:1A:01:16:6B:59:45:FF:AD:FC:1A:B8:59:6D:CC:32:71
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 0196B590159A9A5E654DB1EF4C78FAF11DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 1535
Signing time: Fri 09 May 2025 15:00:40 +0000
Manifest this update: Fri 09 May 2025 15:00:40 +0000
Manifest next update: Sat 10 May 2025 15:00:40 +0000
Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: 8UKLjgt644HM3YXHM47a7C03SvCdvupWFo4qida7MYA=)
3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
6: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
7: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:90:15:9a:9a:5e:65:4d:b1:ef:4c:78:fa:f1:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: May 9 15:00:40 2025 GMT
Not After : May 10 15:00:40 2025 GMT
Subject: CN=e25af9481a01166b5945ffadfc1ab8596dcc3271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:34:7f:69:75:47:3e:0b:4f:be:64:bd:72:
b0:4e:ab:35:03:be:6c:bf:10:df:e2:2e:aa:e2:a2:
2d:b3:c7:88:c6:66:7c:d2:e0:e0:1c:a5:8d:98:79:
cd:dd:45:ab:a0:d8:cd:4e:a2:27:f0:d7:e1:73:90:
4b:3f:df:15:39:d1:a9:cb:0b:16:5a:f1:bd:fc:5a:
fe:53:4f:e0:0b:f5:31:0b:ec:a2:0c:98:15:64:42:
ad:b3:b7:8f:b8:c2:f1:be:0b:4b:ac:20:a2:0f:0c:
3c:15:84:52:b2:43:75:77:8b:ca:0c:1f:14:4e:c4:
e2:0d:1f:06:15:36:e5:76:7a:76:a7:86:be:1b:95:
72:2d:54:c7:89:9a:f0:b2:8f:e4:0c:a4:20:5e:81:
5d:6f:bc:b0:12:3b:22:5e:b9:57:46:90:78:e5:88:
cb:83:52:0a:68:ef:cc:e6:af:a8:4e:23:7b:e2:88:
f0:95:ef:c0:6e:05:5d:d3:b8:b9:89:f0:77:6c:93:
e2:ba:f7:03:a7:c8:f4:95:3e:88:ee:f4:b7:9c:ee:
f8:aa:74:dd:62:d8:9d:53:e9:86:d4:2c:3e:30:92:
76:d9:03:31:bc:ad:e7:27:2b:0a:6e:10:e0:e2:52:
dc:9b:3f:aa:6e:72:25:b0:87:c3:69:8a:05:19:85:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:F9:48:1A:01:16:6B:59:45:FF:AD:FC:1A:B8:59:6D:CC:32:71
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f8:49:ef:6e:f0:31:2a:49:96:6a:67:69:a1:37:de:33:79:
a7:ac:ea:f8:2c:a2:32:f3:5a:b1:2f:18:c8:40:00:97:5e:6f:
8f:05:70:c9:ac:12:9f:05:70:52:c6:7e:ce:f3:16:28:c2:47:
12:3d:94:20:92:4c:9f:94:70:92:2e:e1:7a:37:11:76:e8:92:
53:a5:26:57:83:c5:bb:3d:aa:11:f0:a1:9b:cb:e3:7e:86:75:
2e:ed:84:e7:94:44:60:1d:7a:cd:b5:9e:00:40:94:3c:30:d0:
7b:2e:8f:e2:2d:2f:c7:ff:f5:3a:16:28:45:e4:cd:70:8d:eb:
3e:49:fd:93:75:49:34:9b:c3:4f:a6:3c:d9:17:da:64:a0:64:
b3:a6:ab:ae:ee:16:a3:a1:23:40:7b:4e:d3:45:7c:79:31:09:
a6:53:e7:98:7a:89:5d:39:af:2f:47:ca:ca:23:94:67:6b:e0:
fd:d2:a4:2e:50:68:28:23:e6:91:49:a4:40:90:f1:40:c6:4f:
51:c5:4e:eb:5e:48:36:a2:73:04:ac:f3:45:e4:bc:2f:25:99:
f5:a7:99:d7:f3:3d:31:12:db:5d:1d:e5:7a:7a:c5:10:0d:c7:
11:4c:c0:04:0d:78:05:be:41:74:e8:d1:ba:40:39:05:3d:6c:
fd:f8:a3:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1kBWaml5lTbHvTHj68R3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj
NGZkMjIwHhcNMjUwNTA5MTUwMDQwWhcNMjUwNTEwMTUwMDQwWjAzMTEwLwYDVQQD
EyhlMjVhZjk0ODFhMDExNjZiNTk0NWZmYWRmYzFhYjg1OTZkY2MzMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVc0f2l1Rz4LT75kvXKwTqs1A75s
vxDf4i6q4qIts8eIxmZ80uDgHKWNmHnN3UWroNjNTqIn8Nfhc5BLP98VOdGpywsW
WvG9/Fr+U0/gC/UxC+yiDJgVZEKts7ePuMLxvgtLrCCiDww8FYRSskN1d4vKDB8U
TsTiDR8GFTbldnp2p4a+G5VyLVTHiZrwso/kDKQgXoFdb7ywEjsiXrlXRpB45YjL
g1IKaO/M5q+oTiN74ojwle/AbgVd07i5ifB3bJPiuvcDp8j0lT6I7vS3nO74qnTd
YtidU+mG1Cw+MJJ22QMxvK3nJysKbhDg4lLcmz+qbnIlsIfDaYoFGYV6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJa+UgaARZrWUX/rfwauFltzDJxMB8GA1UdIwQY
MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt
MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx
LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfhJ727w
MSpJlmpnaaE33jN5p6zq+CyiMvNasS8YyEAAl15vjwVwyawSnwVwUsZ+zvMWKMJH
Ej2UIJJMn5Rwki7hejcRduiSU6UmV4PFuz2qEfChm8vjfoZ1Lu2E55REYB16zbWe
AECUPDDQey6P4i0vx//1OhYoReTNcI3rPkn9k3VJNJvDT6Y82RfaZKBks6arru4W
o6EjQHtO00V8eTEJplPnmHqJXTmvL0fKyiOUZ2vg/dKkLlBoKCPmkUmkQJDxQMZP
UcVO615INqJzBKzzReS8LyWZ9aeZ1/M9MRLbXR3lenrFEA3HEUzABA14Bb5BdOjR
ukA5BT1s/fijVw==
-----END CERTIFICATE-----
Generated at Fri May 9 23:44:35 2025 by rpki-client