Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: eHPDKJgWSgY2AdD4p+0oLwcdnjQ/N4LZB50kWRvjTIs=
Subject key identifier: 52:9D:34:EC:15:5C:92:31:D1:2D:67:4F:A6:FA:7E:10:40:39:8D:C2
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 019694166D17DCD4794A83E1A3075DCC8692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 03:00:19 +0000
Manifest this update: Sat 03 May 2025 03:00:19 +0000
Manifest next update: Sun 04 May 2025 03:00:19 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: NN7E+Yh6ZDeY+NsQ6EIofz00ui+SG3uspaafLGbQhNk=)
2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:6d:17:dc:d4:79:4a:83:e1:a3:07:5d:cc:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: May 3 03:00:19 2025 GMT
Not After : May 4 03:00:19 2025 GMT
Subject: CN=529d34ec155c9231d12d674fa6fa7e1040398dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:70:15:25:25:48:22:94:aa:58:d1:31:74:
31:cd:b5:73:bc:d1:0c:85:a3:82:b1:0e:8c:66:61:
78:84:70:7f:c1:16:a0:6d:81:db:d3:e1:c4:64:fe:
35:67:00:3c:39:ee:60:05:84:3d:f4:df:0d:fd:30:
cc:a6:27:f4:bb:15:64:ff:70:89:72:34:54:7f:01:
68:64:5a:5f:e7:5f:b3:76:52:67:d5:3d:d3:50:1f:
87:c3:25:26:c8:61:33:ac:7c:cb:a6:48:52:af:ee:
0d:bd:0f:f8:be:f8:0e:68:68:6f:4b:03:ec:7a:5a:
b6:71:16:e2:cd:f8:7c:0a:85:22:f2:f1:89:6e:b1:
b7:7d:d9:9b:1d:72:6d:18:74:32:8e:ad:d3:d9:d3:
d1:5b:f0:5e:b4:b8:8d:b8:04:77:5b:b3:8e:3d:35:
5a:ec:2e:d3:3e:39:c9:3c:76:11:d6:7c:16:0f:8e:
90:84:5b:4c:a2:7d:b3:b6:5b:43:04:33:83:d5:66:
cd:14:6d:5f:75:84:bc:1d:de:42:2c:14:50:e0:de:
72:ba:e3:9c:43:23:f9:7c:46:bf:6b:83:7a:d4:4b:
5d:fd:72:6f:3e:11:86:01:41:3c:d1:9d:68:13:75:
c6:76:b6:f7:54:97:24:10:f4:40:61:d0:dc:73:06:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9D:34:EC:15:5C:92:31:D1:2D:67:4F:A6:FA:7E:10:40:39:8D:C2
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:80:c3:94:81:10:50:ff:7a:a7:e7:db:a5:17:af:0e:92:03:
e1:45:a7:41:cc:89:80:98:df:47:e7:36:6f:f5:92:fd:01:e7:
95:e6:78:ca:ea:4b:74:c0:79:dc:a3:53:e6:11:74:5c:79:6b:
0b:8b:94:be:b8:94:50:a5:33:91:62:af:6b:50:13:b2:67:83:
08:c1:3b:3e:02:0a:84:9a:3d:f9:f7:8c:8c:df:44:9d:93:07:
54:7a:70:4c:0c:bb:c9:6f:ba:36:aa:86:7f:f5:26:4e:a2:7c:
f6:12:fc:f5:c6:83:2f:c8:a3:c7:59:e8:a4:65:d4:c3:f1:9d:
69:55:a2:73:8d:f5:f0:95:7e:7e:e0:37:c1:50:53:d2:bb:30:
49:72:8a:a7:7e:00:72:27:c6:eb:a6:f4:d0:11:dc:4f:d9:3a:
8e:44:e2:44:01:b7:53:6b:61:1f:5c:ee:ba:cf:c8:2e:f2:1b:
94:e5:aa:81:65:bc:0a:dd:f1:36:ec:4e:3a:41:c4:ee:99:89:
36:28:76:f1:bd:89:dd:9d:10:65:c2:68:56:d8:57:c4:0d:a7:
8b:98:52:2c:6f:6c:a0:ca:c8:65:5a:30:3a:49:df:6b:2e:c2:
f3:ad:57:43:ff:c6:06:8b:d9:4d:b7:0b:cf:c3:6e:ba:32:fe:
00:10:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:36:51 2025 by rpki-client