Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: UufY+vk+CLUuYerWXCU+vCu61a2S/3dy9BOhVSd9QSk=
Subject key identifier: D9:5F:E7:CC:F4:65:BC:1B:B1:B5:51:78:39:9F:10:08:A8:93:F9:73
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0196A19B487A4DC324121B5B27EB74BDDCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0504
Signing time: Mon 05 May 2025 18:00:30 +0000
Manifest this update: Mon 05 May 2025 18:00:30 +0000
Manifest next update: Tue 06 May 2025 18:00:30 +0000
Files and hashes: 1: 2lzpTnWikk5WyPAHzu93iaXar3c.roa (hash: HljhXM+lqmgD41OyNTeAyYHbVlBeWswT04btlhRf0Vs=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: OWu9x8prAAiP5po1AGzBnEgNOP6TGYXPBPStuQLh184=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:48:7a:4d:c3:24:12:1b:5b:27:eb:74:bd:dc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: May 5 18:00:30 2025 GMT
Not After : May 6 18:00:30 2025 GMT
Subject: CN=d95fe7ccf465bc1bb1b55178399f1008a893f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:c9:7e:5e:c4:e5:3d:6a:38:06:f3:db:04:
f0:40:49:f0:9b:d4:6c:b0:49:38:1c:40:56:64:04:
95:9c:1d:9f:a6:03:c4:66:9e:a1:7f:0c:32:93:53:
be:34:27:c3:13:93:06:57:0e:e6:85:14:53:23:be:
4e:ad:08:8d:7e:6c:b1:90:3f:f4:71:a3:c4:af:e2:
80:cc:cb:08:8e:c6:84:aa:89:5c:bf:3f:44:17:d3:
f1:0a:ba:1a:66:51:a7:4e:96:85:73:37:7a:c7:67:
d1:6a:e5:b5:96:b1:1f:35:cf:23:e0:fb:16:0d:36:
b3:79:18:f2:67:8e:6e:f6:f2:5f:cb:88:c0:f2:ac:
b6:b9:0e:f3:61:e2:1b:c2:e9:68:b4:d7:b0:56:68:
c0:12:95:20:fd:3e:d0:f5:3d:2f:fa:c8:ae:78:e6:
a6:01:16:b1:a2:5e:e1:83:0c:fd:67:a6:45:1e:e6:
fe:bf:fb:da:18:96:d6:b0:28:f2:26:ec:86:1f:1e:
aa:9e:fa:43:d1:f4:f7:ff:69:8e:d2:4b:4b:e6:c2:
10:15:e8:34:3d:23:05:f3:91:da:a7:eb:f9:a0:45:
d8:ff:d9:57:a1:3f:45:2a:f2:43:f3:9d:10:c9:8c:
86:e7:94:82:de:99:75:b6:da:3c:28:6e:cb:d6:75:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5F:E7:CC:F4:65:BC:1B:B1:B5:51:78:39:9F:10:08:A8:93:F9:73
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:67:1b:81:86:95:d4:45:80:64:c4:9d:ab:af:37:08:b1:5d:
90:6e:f9:86:f6:c8:91:d9:e0:5e:5f:54:1a:0f:bb:0d:fa:4f:
8b:1d:39:77:33:51:49:6d:21:51:4c:9c:28:fd:34:ed:86:41:
5f:39:8e:a4:97:83:04:16:75:e3:65:c5:62:83:b6:04:55:5a:
4e:b0:23:a3:58:95:ee:dd:51:5c:e9:96:1b:3d:7d:47:10:1a:
2e:a5:75:56:c5:2e:0e:e7:37:70:12:8f:5d:eb:4a:55:69:cf:
ca:92:82:4a:a0:57:65:08:31:41:9a:ef:a8:81:3f:21:0a:df:
34:a4:c4:e2:14:ed:e0:5a:1e:2d:4d:9b:44:4f:08:24:cf:9f:
a2:bb:8d:49:03:fc:d8:d8:d6:89:2d:bb:e4:ca:25:20:f6:64:
d7:60:1a:b3:36:ac:1b:51:9a:98:cd:38:de:6b:3b:ac:0a:20:
5c:b4:05:7b:87:76:b3:08:21:e0:ea:ae:0f:56:17:6c:ae:81:
b3:a3:bc:63:c6:95:36:45:fe:3b:29:10:b9:77:c3:92:4c:2c:
d2:63:9c:e7:0b:09:4d:65:78:44:c0:c9:96:33:07:1f:e2:72:
ca:9a:1c:fb:07:bd:43:16:d8:f2:3d:41:4c:b0:bb:8e:d2:9b:
5e:e8:7a:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahm0h6TcMkEhtbJ+t0vdzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjUwNTA1MTgwMDMwWhcNMjUwNTA2MTgwMDMwWjAzMTEwLwYDVQQD
EyhkOTVmZTdjY2Y0NjViYzFiYjFiNTUxNzgzOTlmMTAwOGE4OTNmOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PDJfl7E5T1qOAbz2wTwQEnwm9Rs
sEk4HEBWZASVnB2fpgPEZp6hfwwyk1O+NCfDE5MGVw7mhRRTI75OrQiNfmyxkD/0
caPEr+KAzMsIjsaEqolcvz9EF9PxCroaZlGnTpaFczd6x2fRauW1lrEfNc8j4PsW
DTazeRjyZ45u9vJfy4jA8qy2uQ7zYeIbwulotNewVmjAEpUg/T7Q9T0v+siueOam
ARaxol7hgwz9Z6ZFHub+v/vaGJbWsCjyJuyGHx6qnvpD0fT3/2mO0ktL5sIQFeg0
PSMF85Hap+v5oEXY/9lXoT9FKvJD850QyYyG55SC3pl1tto8KG7L1nV9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlf58z0ZbwbsbVReDmfEAiok/lzMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2cbgYaV
1EWAZMSdq683CLFdkG75hvbIkdngXl9UGg+7DfpPix05dzNRSW0hUUycKP007YZB
XzmOpJeDBBZ142XFYoO2BFVaTrAjo1iV7t1RXOmWGz19RxAaLqV1VsUuDuc3cBKP
XetKVWnPypKCSqBXZQgxQZrvqIE/IQrfNKTE4hTt4FoeLU2bRE8IJM+foruNSQP8
2NjWiS275MolIPZk12AaszasG1GamM043ms7rAogXLQFe4d2swgh4OquD1YXbK6B
s6O8Y8aVNkX+OykQuXfDkkws0mOc5wsJTWV4RMDJljMHH+Jyypoc+we9QxbY8j1B
TLC7jtKbXuh6gg==
-----END CERTIFICATE-----
Generated at Tue May 6 03:13:48 2025 by rpki-client