
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: +xiBvOXcWkLSErwkeIU7adqNUZO1fCyW47XgNda72Os=
Subject key identifier: 01:AA:1B:FF:9D:E9:17:F8:B5:8F:4D:40:66:FE:D1:22:5D:04:36:45
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01968BB84351BA63FF8EF8F0DA4B088EF8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 0E38
Signing time: Thu 01 May 2025 12:00:30 +0000
Manifest this update: Thu 01 May 2025 12:00:30 +0000
Manifest next update: Fri 02 May 2025 12:00:30 +0000
Files and hashes: 1: 1-T8CKegBPOvx5rZQQVTHJ11NZfg.roa (hash: oTgrbLpJLd4bRqFVMFFivKpiZVrk/3YZuKNsOWKM6jM=)
2: 17xOhQoyIYZB59OnKrsT-dwllSw.roa (hash: KCMu12vyicYfkSRRUkeo8o3fEfjAYF/JgjW23i3oXrg=)
3: FsSFEoZYb3Nl-hkkgjVPUd2IvDA.roa (hash: Fqkp/m22ufWmmjenywmk6qhO70aCJ2/zGhbzol+bOEg=)
4: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (hash: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=)
5: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: SIamN/Gm+S+WXgYV6tzg8TLPZDEuoI1cP7NRyeF7OPM=)
6: sZB9qJRdylpTdvF1XtaqqpNl-OY.roa (hash: lRBjFzzRtx2AcctUxGDd+P1zYD8sp2IpXYC35kAzyFQ=)
7: vxhTN1By4lMiNMyOzxGwyr7QhR4.roa (hash: Ifos+E1fPLCwRcBMt2WCu8lSioPDUu6uUrn5J7VTK/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:43:51:ba:63:ff:8e:f8:f0:da:4b:08:8e:f8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: May 1 12:00:30 2025 GMT
Not After : May 2 12:00:30 2025 GMT
Subject: CN=01aa1bff9de917f8b58f4d4066fed1225d043645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:46:71:c9:1d:ea:ba:1a:6f:70:bb:71:2f:
6a:05:4a:82:ac:2a:ed:14:aa:cb:19:b8:8b:19:73:
80:e9:f8:c0:92:6e:4e:ef:9c:fd:e6:aa:e1:80:6c:
55:52:1d:f8:e9:cb:6b:88:b2:0e:4e:e9:4d:40:bf:
a3:36:f7:31:ee:00:9e:f6:48:8d:20:e9:87:21:83:
c7:a2:4f:d6:5f:c9:ea:69:bb:e9:56:6f:6f:52:75:
1a:b2:6c:83:6b:b7:79:30:9f:b8:92:db:fb:cb:27:
42:83:2b:86:8a:bb:5f:cc:e1:28:82:14:3c:d6:a3:
8a:41:2c:dd:d3:56:a1:86:82:fe:59:cb:b7:a7:1e:
00:91:c5:25:09:e1:00:45:21:be:01:d1:58:ad:1d:
ad:a6:40:02:85:6e:13:6b:e1:91:b1:27:1b:80:a1:
a5:44:38:d9:34:77:40:c0:98:9c:9f:c2:84:81:ac:
ac:e4:2c:c9:a3:37:2d:ba:b9:2a:c1:67:48:6e:ea:
87:6c:92:33:2d:40:74:5d:ef:d9:85:76:b4:53:9c:
cb:73:b8:08:8b:f7:b6:64:14:fd:61:d8:2c:14:61:
46:ff:2a:d2:0a:8f:df:16:a8:cf:cb:b9:78:0c:02:
01:18:26:11:a9:86:b9:42:d2:9b:f9:be:9d:96:64:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AA:1B:FF:9D:E9:17:F8:B5:8F:4D:40:66:FE:D1:22:5D:04:36:45
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d4:97:59:0e:7c:0f:bf:f3:ba:d9:09:f7:c7:60:ad:1b:9e:
1c:ca:e2:63:77:8d:9e:f7:52:ac:ed:b0:a4:7b:8b:81:b9:d0:
15:f1:cf:32:e4:a6:ef:cb:b4:a4:8f:98:2e:48:a2:31:c7:3f:
41:25:42:b5:16:9e:97:4b:2a:28:53:52:a7:77:26:05:60:d8:
e1:da:5f:01:2e:11:38:ee:9b:39:c7:b6:83:b4:36:b9:a1:96:
f8:f7:e0:7e:30:c6:24:ce:39:cd:0a:58:e8:6b:ed:16:98:cf:
52:36:7e:e1:49:17:fa:ad:1d:6d:2c:55:85:cf:c5:39:f8:bd:
a7:c8:ca:58:ae:07:c8:6b:2a:ff:ef:d3:b6:b8:39:e0:98:50:
77:4f:90:c5:42:a5:78:aa:bf:a8:0f:cb:3b:c8:0d:37:b4:69:
0f:4a:0d:c5:01:bc:18:1c:7d:3a:f2:1f:10:80:6d:43:fc:91:
2a:bf:cf:a8:3f:60:3f:5e:83:a5:91:54:4d:4a:6c:dc:1a:4d:
37:14:e7:0f:ae:b6:9d:aa:98:dc:3d:b6:5d:82:d5:ba:fc:16:
94:fc:09:e7:df:f0:c8:8a:55:a2:db:e4:a7:9c:ea:83:de:77:
bc:25:0a:2f:af:15:6d:05:19:e1:20:df:cf:f7:8f:7a:4d:8a:
61:b9:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:02:40 2025 by rpki-client