Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: tM2L52PSFLZkw7Hx9kbrrWH8hCCTPxIIX8E0OJ+2Y2w=
Subject key identifier: 18:D1:D6:4A:EA:27:0E:51:63:26:B7:DE:C2:4E:B6:F5:90:99:C9:74
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 01968E145093BCAC4A21F78E2F304FA816C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 151E
Signing time: Thu 01 May 2025 23:00:18 +0000
Manifest this update: Thu 01 May 2025 23:00:18 +0000
Manifest next update: Fri 02 May 2025 23:00:18 +0000
Files and hashes: 1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: ekGMO8BLiXYsQ8wgq7cbZcwZnPPSZdR5xpG+JrTVYxY=)
4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:50:93:bc:ac:4a:21:f7:8e:2f:30:4f:a8:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: May 1 23:00:18 2025 GMT
Not After : May 2 23:00:18 2025 GMT
Subject: CN=18d1d64aea270e516326b7dec24eb6f59099c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:98:c5:ed:23:a5:64:1c:45:c7:2b:9d:8d:
fd:08:04:1e:78:12:8a:6d:b6:33:bf:b3:e5:5f:d8:
50:65:9d:47:17:ed:02:03:cc:0d:2e:d0:3c:fb:95:
7d:4c:d8:5c:11:2c:00:cc:fe:c0:46:c2:9a:b5:1f:
fa:b1:e9:6f:fe:24:8b:2e:a1:56:a9:cd:9d:f9:77:
60:a8:79:48:ef:b7:5e:7c:12:69:0c:81:44:10:78:
35:15:40:df:a5:d6:c2:96:53:36:7f:c9:c2:c4:a5:
eb:6d:a3:1a:33:51:2f:1e:15:72:1a:c6:13:9e:73:
b8:1c:cd:84:8a:17:20:54:db:8a:aa:91:ac:93:eb:
10:4a:81:fb:80:e3:a1:bb:4a:de:c8:cf:81:d4:c9:
04:c6:98:23:02:e0:4d:a4:a5:89:83:24:93:a3:39:
4c:63:92:c5:e1:06:27:be:e2:c6:ad:70:55:ac:a9:
28:a6:f3:ee:d3:8e:4a:5b:29:a5:1f:01:1d:01:b1:
73:4f:3e:89:38:a7:fe:95:f7:08:41:2a:52:77:f0:
bb:71:a9:41:3f:e9:ba:08:db:1d:4b:6b:61:e1:7a:
8f:b5:8c:f5:34:41:a7:49:5e:2b:0f:60:6c:3e:80:
c5:52:e8:c3:2d:8e:14:c4:1c:a4:09:6a:91:c0:b3:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:D6:4A:EA:27:0E:51:63:26:B7:DE:C2:4E:B6:F5:90:99:C9:74
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7b:c2:75:ff:63:50:8c:3f:bb:ed:80:d6:e9:02:30:2c:82:
27:e0:a5:0e:5f:2d:09:74:ec:db:51:8a:86:61:50:a9:e7:ce:
85:d4:8a:45:94:5c:07:33:08:b6:af:f6:7d:89:b6:8c:6e:0d:
51:e6:f4:47:dd:5a:82:99:9d:52:3e:66:4b:b8:d4:bd:f2:99:
8d:91:b1:a9:74:2c:11:e0:c2:79:3e:08:7a:c0:e2:81:c2:39:
9d:d9:ee:c3:34:20:6c:57:11:5d:ae:16:79:5c:b9:59:aa:21:
fd:f1:a2:46:7c:e5:e7:ad:32:f4:55:0e:84:c1:08:a8:36:60:
f8:5a:b8:9a:5a:aa:fd:01:0c:51:e3:48:44:b7:7b:34:05:fb:
b3:4f:3e:d1:13:99:58:b4:36:89:e5:04:d4:23:7f:a7:6b:6b:
74:57:c6:b7:cc:6c:50:a5:1f:51:39:09:81:3b:ef:c9:91:7d:
ae:a7:1f:24:d7:8f:4b:6c:13:aa:d0:6e:8b:14:12:f2:b8:6a:
e8:4d:de:ce:30:0a:08:01:e5:61:ee:62:e4:3d:6e:2f:59:2a:
8a:6c:aa:73:c3:64:5e:5a:b1:57:63:aa:d2:79:4d:0f:ac:19:
dc:2d:c8:ff:c1:bc:1e:3e:d1:00:2f:09:72:56:eb:cf:28:0d:
5e:7e:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:41:15 2025 by rpki-client