Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
File: sKclKqZD0NvELaQQ6cIPVwM2jNg.mft (raw, json)
Hash identifier: +qijT88BqsN7Ux9pGd678cXawzHWLnmE3fZY4gz+HlI=
Subject key identifier: 6A:B5:B6:9F:AA:0D:78:15:7B:BF:9C:00:A3:F6:93:78:0B:14:C0:50
Authority key identifier: B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
Certificate issuer: /CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Certificate serial: 01968247252F9623D74E9EC4DC9552F33190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 16:00:22 +0000
Manifest this update: Tue 29 Apr 2025 16:00:22 +0000
Manifest next update: Wed 30 Apr 2025 16:00:22 +0000
Files and hashes: 1: n60UwFRR1GBkJeWW6TyEPviSqRg.roa (hash: 1Igyo5YmuM6qjLho9mnJYZI0b/XVpfl/12bJjKoYl+o=)
2: sKclKqZD0NvELaQQ6cIPVwM2jNg.crl (hash: j4QT65Dyi2yTaLv8I7AHwtx1d6jtpwxadkKDbk4AxVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:25:2f:96:23:d7:4e:9e:c4:dc:95:52:f3:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a7252aa643d0dbc42da410e9c20f5703368cd8
Validity
Not Before: Apr 29 16:00:22 2025 GMT
Not After : Apr 30 16:00:22 2025 GMT
Subject: CN=6ab5b69faa0d78157bbf9c00a3f693780b14c050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:5f:74:ae:c0:f3:ab:5a:70:ac:54:7f:9c:
6a:27:da:3d:16:4b:a7:63:10:da:b3:3e:97:2f:48:
d8:f5:d3:b0:7c:1a:eb:4d:3e:0e:e7:cf:3a:c1:1c:
48:15:39:dc:21:30:be:31:be:95:3a:15:67:ea:3f:
4e:a9:37:1a:8f:7a:40:6e:2f:ba:80:19:23:90:a1:
b9:2e:90:f9:12:21:f6:d2:24:19:b4:21:74:58:c7:
4f:98:ae:cd:52:06:8f:0e:f2:4e:05:e8:66:bd:4b:
79:7c:b5:62:72:d4:7b:2a:c6:76:c1:03:e1:af:b4:
7c:76:0b:17:0c:a5:1b:c7:7f:45:5b:20:44:89:31:
cf:82:06:18:d7:83:ad:96:ca:1b:ed:9a:59:32:11:
f4:ce:2d:3e:64:58:40:48:39:62:dd:0a:a6:bd:50:
88:53:9e:72:c2:59:7a:85:6b:0f:e8:af:70:e1:9c:
51:89:91:bf:7a:9f:17:3d:50:97:0e:cc:df:bc:ba:
b5:b6:8e:ff:0b:e7:a2:ab:9b:54:9f:56:65:96:bb:
95:b0:64:3f:e6:1c:42:c6:92:92:2e:b6:be:40:a7:
46:2d:9a:4a:6f:9a:93:8b:a9:d7:ba:a8:e7:2f:e5:
b0:15:35:ce:f3:d4:08:2b:b6:4b:d3:7a:e7:68:52:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B5:B6:9F:AA:0D:78:15:7B:BF:9C:00:A3:F6:93:78:0B:14:C0:50
X509v3 Authority Key Identifier:
keyid:B0:A7:25:2A:A6:43:D0:DB:C4:2D:A4:10:E9:C2:0F:57:03:36:8C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKclKqZD0NvELaQQ6cIPVwM2jNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e4f3ef-7bfc-4055-b798-028a2b0a53d5/1/sKclKqZD0NvELaQQ6cIPVwM2jNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:5e:ed:e2:ca:42:12:26:b9:98:e1:f6:a9:32:ec:2d:5d:
c7:7b:0b:15:fa:e1:cd:58:df:61:d0:e7:e6:12:42:7c:77:2c:
b6:4c:7e:9a:b9:3f:92:cc:06:93:0a:14:2d:5c:fd:c1:d3:79:
72:ac:9d:64:8a:d5:24:d9:8d:07:b1:dd:ca:04:ce:ad:0b:39:
f3:27:d7:b7:76:a6:14:9a:6d:ce:d2:a8:83:b0:79:34:14:3a:
91:4b:f5:5e:9b:c0:8e:28:7d:83:b0:f8:37:f0:90:c0:8a:ba:
3e:4b:4c:40:20:13:65:3c:a8:a0:96:1e:0b:83:7a:a3:79:fe:
18:e8:66:c3:21:09:b8:a8:b9:47:c9:97:c5:44:59:14:86:07:
71:ad:36:66:93:03:e7:bb:bc:06:af:3d:02:d6:08:30:84:9f:
1a:fc:63:d8:56:49:55:64:ac:69:4d:86:c3:e2:9f:7a:f5:b6:
cb:90:09:96:2c:4b:de:9c:14:94:aa:ad:5b:27:20:8d:21:1e:
3b:22:02:70:c5:2a:ad:eb:49:2a:ae:6d:4c:c5:09:d2:11:71:
ff:07:b9:31:89:4d:61:f1:db:46:88:12:fd:c4:1f:25:e9:b0:
1e:48:ee:89:17:1e:91:50:19:74:d0:4b:d6:9d:9b:ad:56:2e:
1f:bb:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:04:10 2025 by rpki-client