Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: fC39RJHJeoAYYGIiTTnag0RUFW/gfKLth91iPsBHs8k=
Subject key identifier: B3:24:E6:21:01:DF:3F:EA:E5:E6:28:7F:18:A8:8A:D3:6D:55:2F:BA
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019680FDED0D2BD38333D5490CFF41B801BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0DEB
Signing time: Tue 29 Apr 2025 10:00:47 +0000
Manifest this update: Tue 29 Apr 2025 10:00:47 +0000
Manifest next update: Wed 30 Apr 2025 10:00:47 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: l7a4Mg5gKPFvxzX5YthSQoLNczLlKqqVx/btWWFCLuE=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:ed:0d:2b:d3:83:33:d5:49:0c:ff:41:b8:01:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Apr 29 10:00:47 2025 GMT
Not After : Apr 30 10:00:47 2025 GMT
Subject: CN=b324e62101df3feae5e6287f18a88ad36d552fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:5d:fc:31:6b:c0:59:3a:a5:8c:61:6c:8d:
8b:5e:79:bf:55:49:03:11:b7:50:43:6d:c8:73:7e:
5b:6a:ff:0b:aa:aa:1d:ab:9e:d2:d4:a1:d0:e0:a8:
5c:8e:a9:b3:17:30:2d:49:a9:7e:ac:ab:22:c3:71:
92:67:a2:68:0f:25:6c:fd:2b:ad:aa:e6:af:6c:4c:
14:d4:5a:87:3a:67:2c:e9:e7:e3:c1:e8:e3:fe:36:
82:09:4f:fb:af:70:54:00:11:cb:c2:ad:4f:22:b0:
2a:3b:90:5c:18:d8:87:14:d4:cd:c5:bb:c9:a8:fd:
05:41:05:3f:5d:d7:1e:58:70:9c:f0:26:35:c0:41:
ef:f2:ea:48:52:ee:27:01:3f:0d:a3:95:b1:4a:a1:
e3:b2:ac:36:ed:a3:ea:93:7d:a0:04:08:48:f9:a7:
54:ac:1a:34:ea:96:a8:db:89:6d:d9:bd:00:11:47:
1d:db:9b:8e:05:56:38:32:b0:8b:6e:25:27:a5:57:
8f:f0:7b:80:46:35:7b:4b:db:a9:29:4e:c2:80:2c:
7f:6c:67:29:5c:8d:f4:09:79:d4:33:26:36:08:e3:
ba:8b:64:88:7a:66:11:28:53:25:fb:fb:cd:23:4e:
92:c6:c6:74:95:ed:c8:77:da:61:f6:45:69:27:dd:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:E6:21:01:DF:3F:EA:E5:E6:28:7F:18:A8:8A:D3:6D:55:2F:BA
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:06:85:59:03:a1:b1:39:3d:51:4b:81:88:a1:8a:f4:6a:ca:
56:4e:71:73:e0:e9:db:e9:b9:c0:07:33:e5:c1:74:05:f3:0f:
18:9f:ff:c8:49:67:4c:ce:d9:62:e6:d6:ae:ae:2d:5d:20:ec:
ab:ef:f4:06:6b:21:e0:fb:93:90:ab:20:9e:1d:9a:3a:b3:1f:
bb:8c:5e:fd:44:29:7b:4b:e3:50:1b:d1:d0:80:bd:b8:4c:c6:
cc:8f:6f:62:2e:5f:20:12:b7:13:7d:c7:66:d6:92:a4:69:85:
53:3b:db:89:3c:6d:3f:53:d6:e0:de:78:b1:08:a0:f9:d4:b9:
5e:76:b5:82:d6:5f:98:10:ba:d2:22:ab:5a:13:7f:ae:82:59:
3b:d8:c7:b5:90:d0:ce:19:b0:18:af:f2:42:b8:a3:30:c4:b2:
e4:8c:ec:de:f8:f9:22:cc:5d:1e:b1:de:28:0b:25:a4:69:7e:
48:db:a7:b1:ed:41:08:3b:98:63:db:ae:cc:7a:d0:23:8c:e3:
9b:f7:67:21:aa:5e:ae:fb:10:5d:87:8a:4c:b7:d0:68:e6:fc:
3e:3e:bc:97:8d:ab:03:2a:df:ce:41:36:bd:26:e5:c5:79:4f:
a7:4b:e5:4a:31:f8:64:5e:c7:1f:9f:f3:62:04:cd:69:57:7f:
ad:b0:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:30:53 2025 by rpki-client