Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: zcJ9YasmdL/WjSyn0n5iOOiHLYkRdSAfxXauhe8jm/4=
Subject key identifier: 11:48:0B:C9:28:D5:6C:72:03:A3:EB:89:0D:D8:48:F7:9E:B0:A5:C7
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 0196AB0C04C8023C97BCC5DD78E00EEED929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 13F4
Signing time: Wed 07 May 2025 14:00:13 +0000
Manifest this update: Wed 07 May 2025 14:00:13 +0000
Manifest next update: Thu 08 May 2025 14:00:13 +0000
Files and hashes: 1: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: 4S0A3fsAIESX0Up/4cziTgRPfhcpjxKTtmPSUqchrnI=)
2: u4XkgPABKlmzAjFlFb35_bSOoZM.roa (hash: 5OhzujGDvwa+oBk89U1CXUeSGEyZAhhsIH31ZmjrM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:04:c8:02:3c:97:bc:c5:dd:78:e0:0e:ee:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: May 7 14:00:13 2025 GMT
Not After : May 8 14:00:13 2025 GMT
Subject: CN=11480bc928d56c7203a3eb890dd848f79eb0a5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:15:4b:e3:29:d2:9b:98:67:71:75:fe:ad:
c1:ac:36:8e:29:5f:4f:1b:cd:ac:3a:4c:14:95:fe:
14:f3:34:d9:38:53:90:58:b2:ce:bf:02:73:a8:3f:
2e:ee:92:c2:18:62:43:49:b8:fe:c2:29:a6:61:d8:
2d:08:88:47:e2:f5:4f:3e:f9:b0:d9:64:a2:f3:e5:
25:fc:fa:67:11:2f:e0:71:84:ba:06:2a:46:73:b5:
3b:47:cf:02:65:a3:76:92:a4:d8:da:60:8f:fb:ad:
c1:cd:75:5a:cc:00:a7:e8:a2:59:31:8c:42:45:e3:
a2:47:6d:e9:ef:af:61:0c:71:33:1b:d3:18:b1:85:
55:3c:1f:09:89:f0:93:0e:2e:08:d5:45:9b:c7:cf:
df:9c:0e:63:90:90:67:c4:2c:2d:57:63:d3:85:68:
80:ad:22:19:67:e3:51:57:56:7f:c3:86:bb:51:72:
80:30:e0:ef:f2:47:0a:5d:6c:88:45:9e:91:0b:73:
32:df:66:09:37:dc:8b:c1:91:48:b0:7a:18:68:13:
95:e7:4b:a8:f7:bc:2a:af:61:ea:b3:e9:c9:f7:57:
e7:e5:e4:36:6b:49:6e:f5:7a:52:63:88:25:c1:3f:
a5:24:58:de:9b:8b:c1:13:33:68:b8:75:37:a0:ca:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:48:0B:C9:28:D5:6C:72:03:A3:EB:89:0D:D8:48:F7:9E:B0:A5:C7
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:00:39:2b:24:cc:bc:10:da:a3:73:53:bf:e5:2d:1d:e6:4c:
29:96:53:0e:cd:5a:00:68:cf:85:85:17:d1:3a:21:f7:23:40:
54:ab:26:cc:03:6a:de:a0:51:e7:3f:37:4f:61:4a:30:bc:49:
2a:3c:0c:98:42:ce:16:99:1a:40:72:44:c9:d4:9f:48:02:7a:
48:38:78:c8:5a:aa:33:af:49:cc:c1:cf:53:5b:1d:5f:c7:21:
46:e4:dd:bd:46:e9:b7:5f:f8:99:00:f5:d4:c5:28:80:dd:ab:
16:58:df:d3:d5:47:ea:1c:29:95:48:7d:6a:58:d3:fe:9e:62:
19:b7:0b:b1:c6:63:1f:96:78:d6:c4:4a:da:40:a9:cf:c2:e9:
56:c3:4f:44:95:73:15:91:07:77:dd:b7:a0:a0:1e:55:f2:24:
31:71:58:58:79:8d:05:79:f0:e2:bf:d6:59:e7:0c:3c:45:fd:
05:6e:5c:a1:71:34:1e:03:c0:ee:49:7a:80:2d:6b:b8:09:6a:
c1:6c:f8:66:6a:3b:27:44:2d:df:8f:48:c4:ae:f6:e6:9f:65:
b0:00:96:87:51:9c:f7:ac:93:8b:56:8f:c5:7e:26:2c:cc:3b:
2a:81:d7:09:27:d6:34:ec:74:82:93:22:60:52:96:a7:ad:4f:
56:a1:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:03:22 2025 by rpki-client