Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
File: sl2FaYjGKmAgc-wpOFgd1KWG-48.mft (raw, json)
Hash identifier: apM8Zd7sN9eXEPMQVjoLWYnxnVshVWXVXwqova2j/us=
Subject key identifier: F5:A7:D8:5E:82:9F:DF:51:ED:EF:EE:F8:4C:99:1A:78:20:E5:43:9C
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 01969ED102694B2B70B3A3BD74883D7CF238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:19 +0000
Manifest this update: Mon 05 May 2025 05:00:19 +0000
Manifest next update: Tue 06 May 2025 05:00:19 +0000
Files and hashes: 1: 7ywY44F6W0hS7hjw1JX0UehS46M.roa (hash: EOy9avDsf7nOFq98ToM6bXsJvV8/Sd2CzZitSl4gKrE=)
2: sl2FaYjGKmAgc-wpOFgd1KWG-48.crl (hash: l5LbLphVIEFfZ+eUsNNUOqaeQkhJw+Soa2Fta2XjRNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:02:69:4b:2b:70:b3:a3:bd:74:88:3d:7c:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: May 5 05:00:19 2025 GMT
Not After : May 6 05:00:19 2025 GMT
Subject: CN=f5a7d85e829fdf51edefeef84c991a7820e5439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:46:51:15:7e:87:bc:38:28:66:ff:3c:ce:
62:a7:96:9c:e5:3a:05:17:4b:db:76:43:95:19:df:
51:a4:20:5d:f6:fe:7f:92:74:cc:ab:d9:9c:9c:6e:
bf:98:bc:88:6c:72:cd:74:e7:92:6e:8b:7d:f1:d0:
a0:f4:ba:b7:13:58:f2:8d:26:09:f6:4b:f3:a2:ca:
cb:21:33:28:37:e2:c9:34:96:95:9d:8b:46:38:d5:
da:76:16:ef:3e:f4:e2:87:9f:72:04:75:9f:b4:bf:
e9:14:1a:df:74:44:4c:b0:9a:14:c8:37:c4:af:85:
0a:d6:b0:40:a6:1e:fb:19:3f:e6:e5:54:01:ca:98:
c5:34:a7:9a:a4:5f:0a:69:f8:38:c7:d2:34:b1:b7:
d2:3a:95:a9:85:4b:b4:b5:96:e8:a9:2f:e6:9d:43:
e5:d9:b2:64:c4:e0:c0:af:1c:c2:a8:a0:f3:3a:44:
c5:db:55:2e:11:f0:37:77:ff:36:58:10:db:f4:43:
da:19:c1:bc:03:d3:e6:b9:c8:7e:6c:16:c7:61:3a:
9b:a4:73:52:be:45:7f:05:73:e2:76:df:e7:d0:0e:
e5:d2:0e:b2:27:15:3a:b2:2a:8a:09:33:db:f3:8f:
75:8b:eb:68:b9:02:b0:f1:ef:f5:67:20:e4:b7:04:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:D8:5E:82:9F:DF:51:ED:EF:EE:F8:4C:99:1A:78:20:E5:43:9C
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:ba:81:7a:d1:10:70:14:4a:b3:37:77:60:a9:72:7e:c9:
04:db:42:8d:33:26:81:89:70:b1:24:b7:fa:41:64:1f:db:ae:
1c:8c:3b:35:4c:74:d5:96:46:7c:58:2c:9d:d9:60:5a:39:ce:
70:00:de:4d:eb:8f:1e:9b:af:55:c2:66:9a:f6:02:2d:1e:5b:
d1:40:a0:ed:42:a8:b8:f3:f2:58:7b:d3:9d:13:39:0b:91:57:
35:3a:f7:9b:f7:11:75:fd:5a:fc:d3:e8:3a:8a:7b:be:8f:2b:
5d:da:29:cc:3c:16:eb:45:2e:79:c6:34:80:20:00:2a:77:ab:
53:f0:d9:4e:71:43:40:00:a7:e0:13:b5:a3:a8:5d:46:26:90:
5f:f2:ee:b5:7c:bb:b5:37:6a:c4:d1:4d:d9:3b:45:dc:c3:60:
e3:af:ce:aa:46:e4:d3:49:c6:08:26:03:8e:cd:80:c3:06:94:
bb:32:e1:5a:b1:d9:42:d4:5e:42:21:64:a1:0d:4b:c7:43:8c:
f2:52:c7:9e:8f:f2:ea:2d:f8:eb:9f:84:30:96:78:39:46:0f:
99:16:cd:a0:8a:22:37:78:30:ce:c9:b4:57:43:6f:e8:39:b5:
07:98:c5:dd:ae:b0:a2:54:48:4d:ed:28:05:43:c7:04:8c:90:
57:76:c7:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0QJpSytws6O9dIg9fPI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWQ4NTY5ODhjNjJhNjAyMDczZWMyOTM4NTgxZGQ0YTU4
NmZiOGYwHhcNMjUwNTA1MDUwMDE5WhcNMjUwNTA2MDUwMDE5WjAzMTEwLwYDVQQD
EyhmNWE3ZDg1ZTgyOWZkZjUxZWRlZmVlZjg0Yzk5MWE3ODIwZTU0MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9BGURV+h7w4KGb/PM5ip5ac5ToF
F0vbdkOVGd9RpCBd9v5/knTMq9mcnG6/mLyIbHLNdOeSbot98dCg9Lq3E1jyjSYJ
9kvzosrLITMoN+LJNJaVnYtGONXadhbvPvTih59yBHWftL/pFBrfdERMsJoUyDfE
r4UK1rBAph77GT/m5VQBypjFNKeapF8Kafg4x9I0sbfSOpWphUu0tZboqS/mnUPl
2bJkxODArxzCqKDzOkTF21UuEfA3d/82WBDb9EPaGcG8A9Pmuch+bBbHYTqbpHNS
vkV/BXPidt/n0A7l0g6yJxU6siqKCTPb8491i+touQKw8e/1ZyDktwSTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWn2F6Cn99R7e/u+EyZGngg5UOcMB8GA1UdIwQY
MBaAFLJdhWmIxipgIHPsKThYHdSlhvuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYt
OWQwODIxMTdkOGMxLzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYtOWQwODIxMTdkOGMx
LzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLm6gXrR
EHAUSrM3d2Cpcn7JBNtCjTMmgYlwsSS3+kFkH9uuHIw7NUx01ZZGfFgsndlgWjnO
cADeTeuPHpuvVcJmmvYCLR5b0UCg7UKouPPyWHvTnRM5C5FXNTr3m/cRdf1a/NPo
Oop7vo8rXdopzDwW60UuecY0gCAAKnerU/DZTnFDQACn4BO1o6hdRiaQX/LutXy7
tTdqxNFN2TtF3MNg46/Oqkbk00nGCCYDjs2AwwaUuzLhWrHZQtReQiFkoQ1Lx0OM
8lLHno/y6i3465+EMJZ4OUYPmRbNoIoiN3gwzsm0V0Nv6Dm1B5jF3a6wolRITe0o
BUPHBIyQV3bHUA==
-----END CERTIFICATE-----
Generated at Mon May 5 07:06:14 2025 by rpki-client