Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: AQrvM7SD8s9ONZGCoSUZKAfPNi4JBl2tNHfKyu0cm7I=
Subject key identifier: 22:3F:D1:E8:C3:2E:1A:3F:01:E2:00:27:68:A3:4A:DE:82:9D:98:31
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 01967B69EA707DFF1D1CA4B5CB916020FB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 08:01:00 +0000
Manifest this update: Mon 28 Apr 2025 08:01:00 +0000
Manifest next update: Tue 29 Apr 2025 08:01:00 +0000
Files and hashes: 1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: SGKTthC1ZtFevQjgiNNoExl6rRTFYmxswlJx8sIC1ME=)
3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:ea:70:7d:ff:1d:1c:a4:b5:cb:91:60:20:fb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Apr 28 08:01:00 2025 GMT
Not After : Apr 29 08:01:00 2025 GMT
Subject: CN=223fd1e8c32e1a3f01e2002768a34ade829d9831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:88:00:65:09:7c:01:f8:da:78:3d:9b:86:
6c:b7:42:3a:a9:32:2b:7c:fe:c7:2c:74:c6:2c:9a:
5f:a7:63:9e:25:eb:b0:d3:2c:a5:67:1b:a2:c6:a5:
96:e8:c1:80:b1:7c:69:58:3a:7b:af:4c:eb:4f:c2:
89:fd:a1:25:a5:28:af:16:9c:c1:7a:75:2e:da:89:
be:c5:88:f1:bd:57:78:ef:31:0d:b9:2a:c3:28:4c:
4f:f3:d1:fc:51:f6:0c:01:6c:93:af:cf:bf:63:1a:
55:14:30:7a:21:09:bb:23:8b:ce:5a:60:a8:d7:90:
a3:6f:8f:a7:75:f7:06:03:b7:aa:83:ac:10:c8:73:
e3:98:74:34:01:da:6b:51:99:1d:48:1f:f4:3e:cc:
2a:cd:bf:bc:e8:3f:c4:32:65:ca:3e:09:cb:98:b9:
aa:61:d8:f2:4e:91:34:ea:48:25:56:15:5e:24:46:
39:1e:0a:f7:8e:c9:69:4d:5b:30:a6:8a:cf:21:45:
48:5c:25:6d:ea:99:7e:5a:65:0d:c2:9e:14:cf:44:
da:20:72:05:d0:d9:6e:f7:da:39:a9:6f:76:ab:1e:
04:6b:32:cf:da:96:b0:b1:07:33:07:86:46:b6:ff:
38:80:59:3a:58:4d:2c:df:e3:28:fb:dc:41:d2:35:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:D1:E8:C3:2E:1A:3F:01:E2:00:27:68:A3:4A:DE:82:9D:98:31
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:50:d0:95:ff:a2:05:34:d5:c0:99:a0:d5:ac:96:f6:fd:ba:
3a:85:a6:c3:c4:22:da:11:33:c4:48:7b:a6:a3:d9:b6:b6:75:
a6:32:e5:d2:a6:f4:c7:35:ae:dc:a5:8f:f2:9f:36:f8:fb:39:
2f:72:2f:b7:1c:57:d3:47:76:5c:00:a7:c9:55:ad:80:3d:13:
34:b2:60:01:6b:fc:3f:ac:31:e7:ac:60:82:9f:23:d9:2e:d6:
06:82:5b:a1:63:b7:e6:21:bb:81:db:0b:87:bb:4f:d0:f5:9f:
35:98:40:00:be:70:e4:b3:84:7d:aa:9a:18:c8:76:0c:e3:f6:
b2:f7:a2:17:17:47:c7:43:9b:14:7b:2f:ef:c4:75:06:f1:96:
64:f8:6b:c4:de:35:d7:71:eb:9e:9f:99:b8:d5:3c:42:1a:a2:
18:0b:fa:3b:25:51:c9:ee:cd:c1:4e:3d:59:26:29:6e:5f:32:
02:77:2b:12:cf:ef:3b:d2:1c:b3:57:e3:b7:1c:ab:cb:9b:26:
10:18:d9:e1:2b:60:c1:91:f0:23:6f:55:aa:7a:c5:f2:f5:d2:
61:e8:ff:73:67:5e:a9:c8:05:2b:86:58:a0:c7:1f:a1:ac:84:
f0:3b:0c:e5:3f:c0:56:d8:4f:f8:05:2a:3c:a4:dc:4a:55:c1:
cb:40:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:53:15 2025 by rpki-client