Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier: fTMhXeMbTe6Acya+0HQMQA8kP9tl3A45rRlwNrxWKv4=
Subject key identifier: F3:7E:B1:D3:5B:4C:04:9E:E4:03:90:61:E7:82:F9:4D:56:22:2A:EC
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 01969AF483FE5252ED3839D1C2AED60DB9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 11:00:37 +0000
Manifest this update: Sun 04 May 2025 11:00:37 +0000
Manifest next update: Mon 05 May 2025 11:00:37 +0000
Files and hashes: 1: 3oQgBF8b0SlPmJhLRByZqFye4Kg.roa (hash: kYRYhVl9nNIlfjRJmfhpqtBDhLtp2pSGg+NrF/eLIP0=)
2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: BxHdoWJevcsi5o47dcGcwkBoZ55bIykpejbhOxx15+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:f4:83:fe:52:52:ed:38:39:d1:c2:ae:d6:0d:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: May 4 11:00:37 2025 GMT
Not After : May 5 11:00:37 2025 GMT
Subject: CN=f37eb1d35b4c049ee4039061e782f94d56222aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:18:20:f5:80:4e:2a:d4:9e:1f:22:0f:ef:
76:9d:5b:9d:be:67:bb:e9:9a:3e:a5:41:dc:5c:a6:
e7:c2:f5:d6:b6:39:40:7d:19:c1:3b:63:6b:df:2f:
3c:29:d7:f9:dc:83:18:fe:04:47:f9:22:00:58:9e:
e5:ea:1b:7a:45:56:31:82:5a:5a:1d:52:c3:67:ab:
1b:d1:9c:b3:0b:54:55:15:81:3e:a2:f2:35:7f:ca:
1c:eb:47:91:fa:74:1b:24:cf:1e:b2:4e:be:da:26:
88:66:de:9c:3f:c9:35:97:aa:59:6f:10:b8:7a:d0:
ff:a8:e4:d8:9d:ba:51:b4:75:01:f1:6d:15:5e:68:
b7:46:78:4a:83:40:49:1a:2c:3b:da:8a:33:bb:6e:
2c:be:ff:fd:e5:bd:5e:9e:9e:de:cd:f8:fd:ee:25:
a9:a3:76:7c:1d:6d:26:7c:01:9b:c2:f7:5d:4c:09:
c3:0b:41:b6:d0:50:01:0f:57:06:e7:55:f0:b8:b4:
97:7d:42:79:99:5f:ef:58:0e:bd:fd:b3:3d:27:79:
9e:ac:b0:7e:f4:1f:31:d5:aa:37:e4:42:b5:08:dd:
3f:0a:14:d7:8e:0c:ae:1a:97:62:10:4f:ec:20:70:
c7:eb:7a:0c:25:20:61:0f:d9:c2:91:40:5a:2f:6a:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:B1:D3:5B:4C:04:9E:E4:03:90:61:E7:82:F9:4D:56:22:2A:EC
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:8b:ce:65:9d:d0:ee:3a:9d:cf:5b:64:b2:96:25:ab:7c:
bc:fc:ce:93:5a:b4:75:0a:f9:49:f0:10:db:ad:2e:26:3e:5d:
2c:fb:d2:8a:6a:cf:3a:54:47:71:67:44:48:95:66:89:8b:ef:
0b:c3:b5:49:71:ec:bf:83:86:14:31:ac:c9:3f:4e:b7:5f:ac:
c0:44:d2:13:ab:de:59:4c:e0:38:a7:c6:3a:ac:80:24:a0:66:
a0:e6:b5:59:4d:5a:14:a6:89:03:60:39:81:b1:08:76:bc:8d:
12:8b:8e:4b:ee:50:f8:85:84:32:e5:b0:39:64:db:1f:b4:51:
4c:04:a3:c7:c6:b3:67:65:c8:9b:0e:f1:e5:30:40:d5:b8:0b:
dc:46:e6:b4:c2:50:af:fd:ef:14:fd:c0:b8:08:2a:e6:44:79:
15:61:de:9b:9a:81:95:1d:fa:47:3b:7e:e3:a7:b9:bc:d8:a2:
c4:4a:67:1d:9d:02:df:96:3e:f2:1a:14:84:3b:1b:3d:39:f2:
82:c5:51:b8:66:b9:1d:40:6f:59:09:92:92:fe:dc:a5:49:be:
f1:dc:d4:92:71:f4:6b:02:4b:e4:a0:f5:dc:aa:5d:b5:d9:4f:
86:f7:7a:cb:53:e3:ea:15:c4:17:63:82:31:63:9d:ca:f2:d2:
c8:56:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:24:07 2025 by rpki-client