Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier: 7ZL+JzkY6XHRSra8w0IxJoyrLueABy+b+7rBu2WsRgc=
Subject key identifier: E0:13:C5:BE:58:DE:70:3D:1F:DD:CB:3C:B3:F2:76:C3:F1:58:EF:4B
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 01967A56D2C3EA76028E622470CD4B13AB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number: 151D
Signing time: Mon 28 Apr 2025 03:00:32 +0000
Manifest this update: Mon 28 Apr 2025 03:00:32 +0000
Manifest next update: Tue 29 Apr 2025 03:00:32 +0000
Files and hashes: 1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: TbMEZYHE0bcB8Hj1csdHVjAJdy/EqfG0tuvY7seZey0=)
3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:d2:c3:ea:76:02:8e:62:24:70:cd:4b:13:ab:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Apr 28 03:00:32 2025 GMT
Not After : Apr 29 03:00:32 2025 GMT
Subject: CN=e013c5be58de703d1fddcb3cb3f276c3f158ef4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:18:8e:09:b7:d5:92:88:12:39:ca:79:a8:
cf:2c:34:61:98:f8:3b:97:6b:5b:92:7e:2f:42:88:
d5:83:36:48:bd:d2:37:e3:7c:ea:87:07:9c:7d:40:
76:ca:ab:3c:b0:c1:e5:e4:f3:de:72:48:f7:ee:a1:
e4:7c:46:7a:0d:f4:94:af:b3:6e:cd:af:b0:01:65:
9f:f7:7b:1e:02:68:ce:6f:9e:eb:93:ec:c6:b7:f5:
c6:be:07:58:cc:a6:60:40:01:ff:fd:07:d1:17:33:
d7:1c:3b:58:ae:c8:0e:1b:76:ca:4e:ca:6d:2e:64:
26:4e:15:e9:46:e8:c4:9f:ac:25:7c:c5:93:cd:3e:
a1:8f:7d:e5:eb:ff:b8:9a:36:f3:e8:23:d4:62:37:
98:1d:fa:b1:47:56:74:29:8d:e2:02:0a:27:ac:31:
c5:66:73:52:58:ac:ad:b3:94:2e:92:ee:bd:cc:35:
51:fc:4a:c8:34:a6:f6:fb:b8:47:90:24:37:f8:f4:
37:c8:57:30:b2:9a:b9:d7:30:82:f4:74:83:af:d2:
40:a8:0e:f9:95:d7:33:83:16:fe:05:d8:14:1c:f6:
cc:bf:ba:72:7c:87:00:16:fc:f9:09:88:e9:3e:b2:
04:17:63:0e:fc:f7:e4:37:f4:91:3b:81:e4:c8:a2:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:C5:BE:58:DE:70:3D:1F:DD:CB:3C:B3:F2:76:C3:F1:58:EF:4B
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:34:7f:85:93:bd:bd:27:e5:13:6f:a1:7a:f9:74:c3:49:53:
17:af:97:f2:be:d8:52:c5:d5:89:ae:9b:18:1d:6e:58:5d:5a:
89:89:56:4e:80:75:6c:9d:f6:61:51:e8:96:be:f6:a4:c4:99:
84:10:99:b8:71:75:0a:5f:27:2d:cb:21:1e:66:e6:86:f7:4c:
99:cb:eb:ab:c0:b7:48:26:61:90:d9:ce:7e:eb:9f:a2:03:80:
4c:b8:9b:7a:a0:5e:80:9e:fb:29:45:25:60:c5:c5:25:e8:a3:
e5:ca:be:f7:33:1f:92:4a:61:22:ce:45:4b:ed:04:4d:71:ad:
cc:f8:31:27:20:b0:1e:91:87:d2:0b:ae:f8:15:3d:72:3b:0c:
c1:27:94:43:12:fc:7d:37:9c:4d:02:e1:78:1f:b9:d0:33:af:
25:c1:3c:86:83:e4:8a:73:83:26:a2:c8:1e:e5:c3:fd:e5:50:
2f:8f:3e:66:2b:d9:9f:33:11:1b:be:76:71:12:4e:e4:06:d3:
8b:62:8e:8c:0a:46:cd:08:fe:e3:50:f8:b1:8c:ba:9c:8a:e4:
95:b8:88:23:08:8e:85:d7:d6:d0:07:f3:99:f2:e6:77:d1:69:
1e:da:d9:98:f1:89:98:e2:bd:8f:a2:fb:b5:7d:8a:e9:91:c0:
e5:e8:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:56 2025 by rpki-client