Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: c/KvbwV4vQ+zM9fvc6txcit2EoXyysLpoyN+EjBe+mQ=
Subject key identifier: F8:8C:A3:2D:40:98:84:99:FF:ED:DD:AD:F8:FF:3C:BF:A4:4A:7C:E1
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 01968A6EACFA05A6D4104FB9449800A8282B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 06:00:31 +0000
Manifest this update: Thu 01 May 2025 06:00:31 +0000
Manifest next update: Fri 02 May 2025 06:00:31 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: Ds4/72ncixC+8C8MyqjqSizjM+iIpDS5TUzgngf0nBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:ac:fa:05:a6:d4:10:4f:b9:44:98:00:a8:28:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: May 1 06:00:31 2025 GMT
Not After : May 2 06:00:31 2025 GMT
Subject: CN=f88ca32d40988499ffedddadf8ff3cbfa44a7ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:a8:9d:d6:e1:ed:e1:66:f6:5a:7c:47:a6:
bf:c1:d5:43:5a:17:c7:ea:36:a9:86:74:16:71:cd:
fd:82:10:ac:85:c2:62:a5:c1:52:00:50:52:38:ec:
ef:80:91:66:c8:cd:5f:af:51:1e:eb:bc:40:23:63:
9a:c4:ea:e0:86:e6:59:34:77:92:5e:36:d4:d6:2e:
c6:b8:3e:b0:ba:1b:04:3a:8c:0b:c5:72:e8:a1:38:
09:72:f6:88:ba:cd:94:70:34:a9:b0:f1:65:c5:09:
07:88:b2:23:41:f4:48:20:31:98:6a:be:c5:23:0e:
1b:f7:15:a4:20:f9:50:95:71:c8:43:a4:6f:ca:04:
6f:28:8f:f6:35:47:de:8d:84:ff:55:6d:0b:55:79:
bd:5e:8a:fd:19:bc:14:d0:11:5a:43:ec:ed:a0:be:
88:a9:8f:af:d9:28:c5:a9:c9:b0:eb:bd:9d:93:50:
45:60:21:b9:a9:76:27:9b:52:b6:2b:bd:54:12:27:
a9:81:3a:9f:5e:58:d5:14:ae:6a:2d:e7:d8:ae:d9:
fe:26:c5:ed:7b:3d:e5:7b:30:ff:49:b4:c3:b4:54:
92:3f:14:8a:eb:63:e9:f5:b0:28:d5:fc:32:f2:0e:
ff:6a:10:d9:b6:81:65:9a:e4:44:2f:24:8b:dc:88:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:A3:2D:40:98:84:99:FF:ED:DD:AD:F8:FF:3C:BF:A4:4A:7C:E1
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ed:21:d2:25:60:d0:f5:99:0c:f7:7f:f5:67:d0:ac:85:24:
af:35:0f:d1:0f:6f:09:39:3b:2f:13:67:69:42:d8:0f:a6:89:
1b:a6:ac:dc:3a:b4:b4:f4:62:50:80:4f:b2:a5:dd:4e:62:6a:
84:53:05:dd:41:6d:a8:4a:83:79:57:8c:89:f3:c3:71:3d:2f:
5d:cf:6a:d0:6d:48:a4:cd:ac:9d:de:1b:f7:fd:c4:24:e9:dc:
11:bf:6b:b7:50:c3:e3:8e:f9:5f:dc:4f:b9:68:ab:54:b7:32:
90:70:82:8a:d0:37:ca:d5:27:73:95:7d:bb:3a:6b:0c:f1:78:
69:8e:eb:21:54:33:e3:ac:05:1e:c5:a8:66:a8:34:06:36:cd:
3a:d2:a4:2e:cc:32:f9:c6:4e:2f:ce:57:c0:46:57:50:85:b0:
be:13:b1:a4:05:5c:9f:e2:1f:b7:09:f0:42:c9:d3:35:66:5e:
f9:a5:f2:97:54:89:6b:82:0d:72:3d:e5:3b:a1:16:7c:c1:6e:
da:8e:20:9d:f5:40:1c:6c:52:78:2f:fc:25:d6:af:11:6d:2f:
d1:ef:0e:62:da:ae:fb:3e:92:13:cb:8a:65:43:f7:4f:ac:47:
15:37:1b:40:b4:7d:45:27:bd:a2:b4:1b:e9:5e:12:3e:bc:93:
88:de:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:00 2025 by rpki-client