Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: u7QiV5PzQ6/5AoJlNlkPZ1Uy0BKIBRdmSJjjbobp7Wk=
Subject key identifier: B4:E7:3B:F1:2C:2F:05:4F:B2:92:FC:2A:65:BD:A8:CA:C1:B0:8D:DF
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 019676434ECA3CA4E3EA5438F21815E3E0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1232
Signing time: Sun 27 Apr 2025 08:00:44 +0000
Manifest this update: Sun 27 Apr 2025 08:00:44 +0000
Manifest next update: Mon 28 Apr 2025 08:00:44 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: 3irDIDDU0ZAiJ6aOsLRRkePY5g5FrTbsyn0ktXKYURQ=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:4e:ca:3c:a4:e3:ea:54:38:f2:18:15:e3:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Apr 27 08:00:44 2025 GMT
Not After : Apr 28 08:00:44 2025 GMT
Subject: CN=b4e73bf12c2f054fb292fc2a65bda8cac1b08ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:d8:3d:20:93:73:78:fa:33:82:a6:50:04:
b3:09:97:a4:1a:b9:d2:83:18:8f:b8:69:6f:4c:5e:
97:8f:0c:79:b6:c1:01:5d:78:68:3f:40:58:d1:b6:
1c:a5:40:7e:7a:e6:41:9b:93:59:30:6b:30:09:be:
67:dd:d9:84:32:ea:a1:71:98:b3:1f:81:66:23:ad:
bb:d0:aa:89:d6:d4:b0:3c:07:83:74:2e:b7:b3:3e:
c9:bc:f7:32:01:55:38:71:69:e1:2b:1e:d6:4c:3a:
f0:cd:b2:0a:d5:33:5e:40:5b:2e:66:75:c7:5a:b6:
ca:35:06:f4:c7:44:0a:93:9b:32:50:12:f3:bf:7b:
3c:1e:5e:84:14:3b:2e:84:bf:f3:b3:46:46:3a:60:
de:d6:21:e6:64:7b:14:63:60:b9:b8:0f:a4:fb:65:
71:37:e3:0a:5b:31:00:ac:c8:34:cc:bb:40:16:c8:
9e:e1:bb:03:e2:d9:ac:0f:04:01:b5:b5:b9:30:be:
41:3c:f0:e3:df:22:e4:97:d2:b0:63:22:73:a5:af:
a3:1f:d2:c2:9f:15:ad:2b:1a:4c:b2:12:f1:cc:cb:
7f:45:57:16:94:ef:d2:29:48:a0:60:2e:69:2c:63:
ce:a2:4f:e1:44:9d:a8:48:58:56:bb:55:35:ab:10:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E7:3B:F1:2C:2F:05:4F:B2:92:FC:2A:65:BD:A8:CA:C1:B0:8D:DF
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1c:fb:f0:22:34:d5:3f:68:76:61:92:fc:f3:2c:e9:61:65:
bd:41:5e:43:67:d9:6f:4b:a4:3d:ec:80:12:0e:50:0f:87:4b:
2d:cc:f8:f4:c2:37:58:12:da:a5:33:08:87:e3:f9:aa:c1:8a:
8f:4f:ef:90:4f:28:fb:31:0d:2f:d3:cf:f4:de:2f:cf:12:25:
5d:bc:5a:88:2d:78:f9:84:2d:2d:fb:dd:03:1a:d9:a3:2e:63:
0a:2f:21:ad:a2:2b:c1:db:58:6c:4c:83:52:57:6a:f5:d3:94:
1b:a1:44:96:5e:75:4f:ea:54:73:cb:2c:8f:5b:9c:33:00:c1:
b2:31:5e:cd:42:cc:dd:8a:45:28:bf:0e:f2:d7:d8:28:ad:3f:
fd:bb:b2:6c:5c:d1:03:0c:b7:a7:11:00:0f:80:81:37:a3:55:
1b:6d:2b:06:f0:e0:ff:e3:ff:03:12:8e:0d:c7:d2:e9:8d:4d:
f8:08:2c:77:a2:ac:7b:a7:7a:99:a3:6d:c6:3c:de:7e:ff:c6:
9c:1a:70:0d:4a:8d:a6:44:c5:02:76:7b:65:8f:0b:eb:52:45:
d7:dc:4e:26:40:a3:0f:2f:33:d9:d4:2a:5b:5c:db:69:76:f6:
13:b0:c8:cd:7b:db:02:3c:62:03:b5:bb:a7:70:a7:90:ec:12:
ce:ff:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:30 2025 by rpki-client