Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: SHIMjYiQ/9IJR3ZQweZZq5wwRZ95JuKWz4zEQ+iXflk=
Subject key identifier: E8:86:14:11:96:31:5E:E5:B5:89:90:A0:0C:B0:62:BE:A8:F7:A0:49
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 0196C5DF1C69196149B21CFF54F777D53974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 19:00:55 +0000
Manifest this update: Mon 12 May 2025 19:00:55 +0000
Manifest next update: Tue 13 May 2025 19:00:55 +0000
Files and hashes: 1: CXkACV-63YQsGoLAT_fjFmpIWrY.roa (hash: VrWjblsIWiGRBo5IbexwcD3xb4sOkqQVyxbnH8/frQ4=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: HqTbYAZFdD7Evq+lL6v0BJvXQBQ3T1eFpFhPmxiPsHk=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:1c:69:19:61:49:b2:1c:ff:54:f7:77:d5:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: May 12 19:00:55 2025 GMT
Not After : May 13 19:00:55 2025 GMT
Subject: CN=e886141196315ee5b58990a00cb062bea8f7a049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:b0:3f:3f:11:9a:8d:79:82:fd:7d:ce:58:
16:6f:7e:07:f7:11:b9:4b:9c:cf:eb:55:b5:dc:8f:
dc:b7:ff:e1:11:16:b0:09:ef:ed:59:46:ef:8d:78:
4a:fe:4e:f0:68:4c:31:a4:b7:7e:a6:d7:6f:1e:57:
ac:7c:94:ab:10:75:0d:aa:9c:5d:45:d8:a4:cf:f2:
e9:6e:89:39:43:f4:6a:c8:f4:12:00:7d:d8:82:09:
80:16:d7:c2:73:8a:a9:24:60:a2:4c:76:40:71:15:
43:f1:0f:af:76:6a:f0:86:d7:dc:71:d7:91:53:53:
de:e5:bd:34:40:31:f7:91:f5:90:3b:d3:7b:c2:31:
3d:bc:ea:65:50:36:6e:3c:5e:39:42:e6:82:aa:cd:
a3:d4:1d:86:12:91:ef:1e:53:db:ab:b0:e3:52:fe:
fc:4d:12:07:dd:9d:7a:c2:4e:d3:d0:cb:f2:a1:20:
97:19:61:07:6e:11:13:4a:68:52:cc:06:e9:c1:36:
70:19:21:56:d6:b6:53:ec:81:b6:46:09:b8:54:ed:
4a:0a:c2:43:fd:51:f6:20:cf:b7:52:92:76:ec:ff:
11:ae:a3:c4:ce:81:17:a1:28:10:f5:dc:42:ca:39:
1f:fe:c8:9a:7a:39:ec:19:9b:5f:dd:4d:e2:b6:73:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:86:14:11:96:31:5E:E5:B5:89:90:A0:0C:B0:62:BE:A8:F7:A0:49
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:85:ef:7a:44:c0:0d:0f:bb:f0:73:43:f0:9a:91:42:79:5d:
0f:3b:83:f4:cc:cb:d1:9f:8a:fa:09:8d:b6:d6:02:c0:05:e6:
7c:b9:5a:e1:cd:1d:c0:e2:b0:c0:85:49:5e:22:1d:a0:ee:c5:
92:b4:78:44:9f:ed:0a:c1:b2:a9:e0:32:a3:6e:1b:25:2a:7d:
26:97:b7:c3:b3:63:f1:c2:4a:bb:0f:9c:04:63:7b:2f:bd:d5:
2e:ee:2a:75:31:8a:06:53:f0:cf:3b:4e:b8:50:82:18:e9:91:
c8:a2:57:29:2b:24:90:98:b8:b2:39:87:0c:d9:2a:fe:8c:c0:
fe:4e:99:74:48:be:4a:6c:9b:39:5c:95:df:13:e3:2d:41:44:
db:f9:8e:b6:42:43:30:7b:39:0e:f7:c7:ee:bc:02:d2:86:41:
20:cb:c2:21:71:4c:e1:b8:f5:8a:71:4d:c4:e4:89:6f:98:f3:
7b:c1:fa:28:2a:e8:39:45:55:c5:c6:49:8f:ba:fe:68:e3:c5:
31:82:03:81:59:8f:ae:47:e0:0a:64:f3:95:51:35:53:d3:2e:
06:3c:16:f1:54:23:16:fa:63:4d:c3:62:da:64:76:cf:bf:cc:
dc:50:13:2f:9a:4d:11:a9:2a:17:79:9f:e7:c1:9f:56:77:b8:
b3:67:1f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3xxpGWFJshz/VPd31Tl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjUwNTEyMTkwMDU1WhcNMjUwNTEzMTkwMDU1WjAzMTEwLwYDVQQD
EyhlODg2MTQxMTk2MzE1ZWU1YjU4OTkwYTAwY2IwNjJiZWE4ZjdhMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TOwPz8Rmo15gv19zlgWb34H9xG5
S5zP61W13I/ct//hERawCe/tWUbvjXhK/k7waEwxpLd+ptdvHlesfJSrEHUNqpxd
Rdikz/Lpbok5Q/RqyPQSAH3YggmAFtfCc4qpJGCiTHZAcRVD8Q+vdmrwhtfccdeR
U1Pe5b00QDH3kfWQO9N7wjE9vOplUDZuPF45QuaCqs2j1B2GEpHvHlPbq7DjUv78
TRIH3Z16wk7T0MvyoSCXGWEHbhETSmhSzAbpwTZwGSFW1rZT7IG2Rgm4VO1KCsJD
/VH2IM+3UpJ27P8RrqPEzoEXoSgQ9dxCyjkf/siaejnsGZtf3U3itnMC1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiGFBGWMV7ltYmQoAywYr6o96BJMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4XvekTA
DQ+78HND8JqRQnldDzuD9MzL0Z+K+gmNttYCwAXmfLla4c0dwOKwwIVJXiIdoO7F
krR4RJ/tCsGyqeAyo24bJSp9Jpe3w7Nj8cJKuw+cBGN7L73VLu4qdTGKBlPwzztO
uFCCGOmRyKJXKSskkJi4sjmHDNkq/ozA/k6ZdEi+SmybOVyV3xPjLUFE2/mOtkJD
MHs5DvfH7rwC0oZBIMvCIXFM4bj1inFNxOSJb5jze8H6KCroOUVVxcZJj7r+aOPF
MYIDgVmPrkfgCmTzlVE1U9MuBjwW8VQjFvpjTcNi2mR2z7/M3FATL5pNEakqF3mf
58GfVne4s2cfUw==
-----END CERTIFICATE-----
Generated at Mon May 12 21:03:48 2025 by rpki-client