Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: mJK+bFR7v7MYul8do3uWo+GWWxsogRGit4XpUPAnzHo=
Subject key identifier: 33:54:E5:65:A8:CC:32:7B:0D:0A:F9:AF:00:BF:B2:30:50:50:8C:03
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 0196BF009D19C4126873C1F24A2DD5C9E7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0E85
Signing time: Sun 11 May 2025 11:00:10 +0000
Manifest this update: Sun 11 May 2025 11:00:10 +0000
Manifest next update: Mon 12 May 2025 11:00:10 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: 9H9awGkXJKPiZFBRzhs3yMkn+moUpxx9o2COahJr/Mo=)
2: Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa (hash: BXNYaUB0Zfc7mvCgmarWMLrgrg5dZOzYs8T6+u6yFW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:9d:19:c4:12:68:73:c1:f2:4a:2d:d5:c9:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: May 11 11:00:10 2025 GMT
Not After : May 12 11:00:10 2025 GMT
Subject: CN=3354e565a8cc327b0d0af9af00bfb23050508c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:3e:08:4a:88:64:83:c9:ea:61:fa:45:76:
7e:33:1f:a2:36:85:ec:35:6a:e1:19:13:d2:9f:87:
29:a3:8e:de:b0:c2:56:5b:04:d0:6e:fa:e9:3b:02:
46:21:31:59:8d:3a:e8:e7:ff:32:9c:3b:1c:ca:0f:
e4:70:78:70:63:45:68:d0:af:ec:77:35:d5:46:c9:
61:c1:15:4b:f5:6e:77:b2:7a:e6:6d:c7:13:6e:7d:
4e:4e:25:7f:a0:5d:5b:52:35:3a:a9:85:f5:fb:58:
71:c0:4b:7a:81:bc:10:02:00:3c:a1:33:6b:2c:e1:
c5:c7:78:b0:e9:96:24:82:f5:80:83:7f:37:c8:93:
50:7d:8f:7b:0c:31:d9:ef:e4:4f:69:0f:33:fc:1e:
58:9d:7e:e0:ed:1a:07:f0:a9:dd:7d:95:94:37:33:
21:f4:c5:dc:11:71:58:ca:93:3e:42:5e:ab:44:6d:
5e:30:e5:de:2c:86:4c:4d:c3:50:09:4e:32:f6:77:
59:4c:84:8a:29:26:41:19:7a:ee:1b:32:7b:92:8f:
44:40:fa:b1:60:c8:e6:58:5a:bd:21:5b:ca:97:c2:
06:9b:c6:1d:07:72:cd:bd:88:92:f1:39:58:c8:fd:
59:42:c6:20:ba:f2:b1:c9:dc:4f:02:30:91:91:4b:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:E5:65:A8:CC:32:7B:0D:0A:F9:AF:00:BF:B2:30:50:50:8C:03
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2a:a3:69:71:41:7e:12:67:22:52:30:77:c1:79:7f:3c:23:
be:20:17:b1:cd:b5:fc:11:7e:9f:53:fc:a1:cb:11:f4:d6:a0:
9f:b7:75:b5:5b:37:24:df:a2:6d:6e:74:97:bb:0f:f3:31:0b:
cb:b0:b3:7b:0b:5d:25:8f:4c:75:a1:e0:07:97:b1:43:e2:8b:
cd:d7:ca:08:11:e3:47:d4:2e:10:bc:29:62:bc:2d:4a:4a:7d:
56:13:ce:bf:e3:96:90:b8:21:65:ad:ce:ea:b2:9a:52:e5:26:
06:77:f7:57:32:4c:fa:6e:59:5f:dc:aa:06:a4:78:84:b3:24:
12:49:9a:01:97:ae:09:be:d0:f0:9d:e3:ae:a8:01:f6:23:2b:
7b:b2:0e:d4:3d:bd:31:de:86:f7:56:97:fb:81:e2:d0:01:12:
5d:b3:68:f0:b7:00:fd:6d:21:79:ac:c6:51:12:3e:b8:ba:4a:
b2:58:83:89:26:7e:73:a8:1f:04:5f:01:a3:9a:b6:10:fb:11:
4e:06:1e:bf:5c:5d:53:1f:a5:49:a0:c8:ed:29:b3:34:15:dd:
80:cd:d3:3f:c6:04:09:b4:7e:2d:e0:9a:53:90:39:f3:9e:e7:
eb:48:64:13:7d:49:af:79:7b:66:10:fe:b7:5e:a4:1f:3f:59:
7b:b6:7c:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/AJ0ZxBJoc8HySi3VyefvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWRjNTQzNWEyZGM5N2UzNjVmZjQ5NTcwYzA0ZDUxM2Y2
ZmNlZDIwHhcNMjUwNTExMTEwMDEwWhcNMjUwNTEyMTEwMDEwWjAzMTEwLwYDVQQD
EygzMzU0ZTU2NWE4Y2MzMjdiMGQwYWY5YWYwMGJmYjIzMDUwNTA4YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NA+CEqIZIPJ6mH6RXZ+Mx+iNoXs
NWrhGRPSn4cpo47esMJWWwTQbvrpOwJGITFZjTro5/8ynDscyg/kcHhwY0Vo0K/s
dzXVRslhwRVL9W53snrmbccTbn1OTiV/oF1bUjU6qYX1+1hxwEt6gbwQAgA8oTNr
LOHFx3iw6ZYkgvWAg383yJNQfY97DDHZ7+RPaQ8z/B5YnX7g7RoH8KndfZWUNzMh
9MXcEXFYypM+Ql6rRG1eMOXeLIZMTcNQCU4y9ndZTISKKSZBGXruGzJ7ko9EQPqx
YMjmWFq9IVvKl8IGm8YdB3LNvYiS8TlYyP1ZQsYguvKxydxPAjCRkUvcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNU5WWozDJ7DQr5rwC/sjBQUIwDMB8GA1UdIwQY
MBaAFOedxUNaLcl+Nl/0lXDATVE/b87SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTUzRlExb3R5WDQyWF9TVmNNQk5VVDl2enRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jZTk1YmUtYTM3YS00YzIzLWI5Y2It
NzA2NTU0Zjg4MDQ2LzEvNTUzRlExb3R5WDQyWF9TVmNNQk5VVDl2enRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jZTk1YmUtYTM3YS00YzIzLWI5Y2ItNzA2NTU0Zjg4MDQ2
LzEvNTUzRlExb3R5WDQyWF9TVmNNQk5VVDl2enRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSqjaXFB
fhJnIlIwd8F5fzwjviAXsc21/BF+n1P8ocsR9Nagn7d1tVs3JN+ibW50l7sP8zEL
y7CzewtdJY9MdaHgB5exQ+KLzdfKCBHjR9QuELwpYrwtSkp9VhPOv+OWkLghZa3O
6rKaUuUmBnf3VzJM+m5ZX9yqBqR4hLMkEkmaAZeuCb7Q8J3jrqgB9iMre7IO1D29
Md6G91aX+4Hi0AESXbNo8LcA/W0heazGURI+uLpKsliDiSZ+c6gfBF8Bo5q2EPsR
TgYev1xdUx+lSaDI7SmzNBXdgM3TP8YECbR+LeCaU5A5857n60hkE31Jr3l7ZhD+
t16kHz9Ze7Z8GA==
-----END CERTIFICATE-----
Generated at Sun May 11 20:00:39 2025 by rpki-client