Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
File: sUiB-j51o4Uc9wQZE1q91SnS9oI.mft (raw, json)
Hash identifier: FlK6P4RleV/aKTrQLb+mdprnkYbOuFaUhym42vUxdbs=
Subject key identifier: 86:F0:8C:39:1E:7C:68:8B:35:C0:69:A3:E5:76:FE:8F:7E:17:62:D4
Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682
Certificate serial: 019692282C1B67703E5F47BB84FC5857C93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 18:00:28 +0000
Manifest this update: Fri 02 May 2025 18:00:28 +0000
Manifest next update: Sat 03 May 2025 18:00:28 +0000
Files and hashes: 1: VTdOF6vt4DJ2gAE9-rspP9YAtwY.roa (hash: 1siesNie5rYzgdzSW4S1a0o9vqGP6HXUGewmb9Xhzlk=)
2: sUiB-j51o4Uc9wQZE1q91SnS9oI.crl (hash: Y0PyoB8KiHmncFJY+rEg/MP2pJohKbpbJIkxc7cdkeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:28:2c:1b:67:70:3e:5f:47:bb:84:fc:58:57:c9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682
Validity
Not Before: May 2 18:00:28 2025 GMT
Not After : May 3 18:00:28 2025 GMT
Subject: CN=86f08c391e7c688b35c069a3e576fe8f7e1762d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:fe:48:f9:49:4a:70:43:7f:ad:04:ed:4d:
05:9a:28:e3:50:a7:9c:eb:d8:05:a2:12:6c:5c:b9:
4a:d7:33:3f:1d:13:4c:a7:6c:8d:79:95:60:f1:7a:
3c:db:18:61:8e:9f:78:16:d0:41:91:29:5f:de:76:
72:34:84:b4:67:d6:d4:01:4c:c2:6a:4a:ae:13:94:
62:07:6b:fe:08:32:73:32:70:19:8c:37:92:01:9a:
62:37:1a:74:7b:02:d3:1e:a0:fa:08:b6:28:01:be:
36:ae:c5:07:c8:54:f1:58:9a:fa:a8:43:8f:11:1c:
8b:9d:88:3b:65:81:ad:33:dd:f0:b4:4b:35:d8:1f:
16:36:79:b1:fd:95:87:7b:21:fd:41:b4:4e:90:4b:
d6:b0:92:c6:19:93:06:e2:a6:c7:2f:83:c5:4d:90:
2c:4d:9b:b9:34:3e:e4:70:50:23:2b:89:a4:93:31:
9d:e7:95:d2:49:a1:a1:54:1a:51:c4:73:70:b0:c8:
f0:09:d1:55:fb:f2:00:2d:0f:46:6e:87:c5:d8:a4:
bd:a3:0f:ac:70:9b:2c:f8:37:ba:01:70:f9:f6:96:
71:3f:66:36:5d:72:4f:57:4e:3d:c2:7f:88:ba:7f:
f4:b4:75:c7:3e:2c:35:0b:d9:34:ff:a2:9d:da:8a:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:8C:39:1E:7C:68:8B:35:C0:69:A3:E5:76:FE:8F:7E:17:62:D4
X509v3 Authority Key Identifier:
keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0d:c9:d2:9c:f8:d1:0f:27:11:7b:27:94:1e:b9:63:9d:4a:
66:35:98:d6:75:4f:78:ec:d4:19:b5:e5:ac:59:1c:f6:35:a9:
e3:3c:d0:dc:52:de:f4:46:b6:40:69:72:69:0f:a0:74:55:01:
57:ff:55:f1:c1:0f:3d:25:60:6b:c7:e6:51:1b:52:e3:91:f8:
02:d4:7c:11:e2:81:d8:f7:93:c2:01:d8:05:b8:a4:bf:1f:cf:
f3:bd:97:62:6c:f1:59:0e:fd:b1:fb:77:96:cd:56:54:5f:4b:
69:56:90:49:17:df:93:6c:f1:a1:56:86:c2:22:6c:8b:a3:10:
5a:f3:ed:09:02:0c:86:26:e2:08:93:cb:7c:1d:53:82:35:1a:
78:01:61:ad:9e:b3:6c:e3:c8:35:7f:74:9e:bf:d7:ce:08:a2:
f4:b6:1f:8e:ff:b6:ff:b8:88:50:af:21:55:61:b8:cd:47:4d:
dd:7b:6f:88:03:1d:23:b8:6a:a1:a7:18:a5:88:3e:59:77:4c:
93:62:9c:81:3a:9c:c5:d9:b3:7c:d1:a6:8b:84:ed:24:41:f5:
b8:2b:8b:02:f0:a6:11:ef:a5:bd:93:aa:b7:d0:07:f5:68:22:
52:d9:03:c4:bb:6e:71:2a:bb:e7:34:44:07:1e:cb:cd:dc:c7:
c9:c1:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:54:32 2025 by rpki-client