Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: IELsomH0uigcRTrAj35kJWR1VgBpId+3/X3K7cL4ZcU=
Subject key identifier: A5:EC:89:05:9E:25:C7:FE:07:8B:72:5B:28:73:FB:77:3C:8D:73:62
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 01968D01F5B34F38EDCBB7F9FBE49E1BE6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0D8B
Signing time: Thu 01 May 2025 18:00:37 +0000
Manifest this update: Thu 01 May 2025 18:00:37 +0000
Manifest next update: Fri 02 May 2025 18:00:37 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: KGLGQ3DKXW1TRzFBVcQ84CvCbjP2d88PqWgNHfk8wj0=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:f5:b3:4f:38:ed:cb:b7:f9:fb:e4:9e:1b:e6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: May 1 18:00:37 2025 GMT
Not After : May 2 18:00:37 2025 GMT
Subject: CN=a5ec89059e25c7fe078b725b2873fb773c8d7362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:da:64:aa:49:48:9b:2f:c8:9b:46:26:23:
87:7c:df:dd:95:76:f1:56:68:e5:a6:44:bc:7a:ac:
77:e6:90:4d:8f:22:ee:d5:67:87:b3:f5:6a:b5:9f:
b1:fd:bb:32:bc:f5:d1:7d:6c:24:a7:df:3c:9a:d1:
60:d8:39:be:37:fb:2b:8b:27:85:97:fc:30:32:af:
61:39:a8:df:c5:f0:bd:8c:27:85:eb:c8:3f:e5:8f:
82:1e:d1:86:ee:37:ef:cc:31:7c:7e:3b:f5:7a:e5:
ef:89:d3:78:bf:07:a2:5c:3c:63:50:cd:c2:40:f3:
9c:52:06:51:e5:4b:73:4a:c3:18:6e:90:5f:d8:f8:
88:8f:17:19:76:09:c1:fb:78:9e:82:2a:87:15:83:
d5:be:a8:35:15:68:aa:ee:3b:5c:88:cf:31:17:ec:
7b:d4:40:b8:18:6f:31:25:a0:55:05:6d:b0:c2:d6:
ff:41:f8:d0:dd:c2:10:f7:a9:43:f5:fc:64:47:e2:
c2:d6:4b:5b:1d:05:24:d6:9b:c6:b1:34:aa:23:bb:
92:aa:f8:45:5d:51:e1:61:1b:21:4a:b7:c5:4f:a0:
4b:ff:e0:27:81:9a:63:0c:5c:d6:8f:e6:16:40:cf:
03:43:24:b3:a7:dc:b4:22:71:ff:3e:64:19:8a:e3:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:89:05:9E:25:C7:FE:07:8B:72:5B:28:73:FB:77:3C:8D:73:62
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6f:f6:16:20:be:63:10:47:23:aa:e1:a4:fd:3f:11:a5:fc:
fd:56:d4:17:e9:07:27:7d:14:9e:94:20:7c:e0:3b:b2:71:c2:
32:02:f0:24:3e:cb:02:e9:75:f9:fe:18:cc:b3:7e:92:82:58:
e0:f5:b1:ca:62:3c:cd:41:97:d5:d7:59:a9:91:4f:50:e6:24:
45:11:a2:d6:18:a1:a2:6c:ef:d1:8f:b2:66:d4:69:0b:4d:5f:
d5:20:6c:7f:fe:d2:65:c4:e1:73:df:56:d9:b8:cb:47:13:2c:
8e:27:f7:58:ff:f9:a1:90:8a:60:d7:d4:5f:94:03:b9:a7:d4:
c5:53:e4:b8:ab:2d:4d:3d:e9:1d:b9:d3:30:0b:26:7c:5f:8d:
05:fb:7c:b7:dc:0d:ce:8d:54:b5:e0:de:d9:d1:45:4e:dd:fd:
5f:4f:64:4c:fc:b7:f2:98:7a:fc:3c:4f:9c:72:79:15:67:c5:
16:c8:7f:a2:23:7b:a4:df:76:e3:3a:3e:98:da:1c:95:c3:d3:
4b:f9:56:e2:14:e6:e4:98:c5:9c:b8:47:86:bc:a2:3e:fa:53:
64:34:81:65:49:e2:c4:16:4a:2d:e5:3e:90:96:c2:de:49:6a:
0d:6e:2c:9d:e3:27:ab:b1:27:da:cd:b0:c6:6c:91:89:38:d1:
28:bf:18:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:25:18 2025 by rpki-client