Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: 3gMalsdp9YLvD377gKJKan9mzgpd7dTiJZXcSYdIgVk=
Subject key identifier: 33:AE:C1:76:31:E0:44:1B:F3:27:96:A5:5A:2B:53:61:5B:9F:1A:61
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01968247826B243331CE8BC258F73989A626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 16:00:46 +0000
Manifest this update: Tue 29 Apr 2025 16:00:46 +0000
Manifest next update: Wed 30 Apr 2025 16:00:46 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: CsBX7tZPQZTv6csGVkdD5hA6+zEzNDXtRZlbjDUbolc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:82:6b:24:33:31:ce:8b:c2:58:f7:39:89:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Apr 29 16:00:46 2025 GMT
Not After : Apr 30 16:00:46 2025 GMT
Subject: CN=33aec17631e0441bf32796a55a2b53615b9f1a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:f9:f5:88:57:63:3d:48:2b:60:12:f0:40:
4a:4e:e1:a1:e6:13:e4:5a:76:e7:79:78:30:d0:da:
a1:b1:9e:0f:04:bc:b4:f2:11:e8:d1:84:7b:6a:de:
b7:d0:c7:37:8a:18:fd:16:6b:f8:c2:e9:81:c3:5f:
2d:e4:7d:07:df:fa:30:3a:7a:e5:67:83:10:9a:95:
92:89:25:b9:28:4d:57:cc:42:d0:cd:31:0a:02:7f:
be:af:b3:ce:ce:ca:a1:fd:3a:ea:9a:f7:5f:19:03:
f6:f6:95:84:51:45:a6:8e:de:9d:77:0d:ab:8b:d9:
99:71:58:80:8e:28:e4:90:4a:c1:df:df:11:33:0e:
38:6c:c2:22:58:f8:11:08:f2:47:91:1d:1b:a1:a7:
fb:2b:24:c1:74:d6:74:98:5d:8d:b0:26:27:e5:d3:
39:d0:11:b4:6e:66:80:49:f7:01:22:56:35:3a:d0:
1e:3c:6b:9c:80:8c:2a:47:e4:d2:47:47:81:f3:af:
6f:ed:f7:b6:19:0e:39:9d:b9:59:b9:de:d4:34:e4:
ee:c3:39:56:8f:bf:6b:0b:32:df:4b:e2:39:ef:02:
5e:47:ab:9c:03:b0:39:7f:9c:90:a3:f7:0e:8b:ce:
6f:67:d3:e8:41:83:5f:28:b1:fc:e4:a2:7e:03:aa:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:C1:76:31:E0:44:1B:F3:27:96:A5:5A:2B:53:61:5B:9F:1A:61
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f2:d3:b1:4c:12:8c:3d:f9:a3:3a:b3:00:9e:59:65:b4:72:
9c:7e:27:3e:44:2d:fb:f6:dd:5b:48:0e:8c:77:35:bf:50:93:
94:a2:c7:62:76:ab:4a:f9:ff:46:ef:20:b2:f5:2d:6f:35:a5:
5f:cd:66:7b:a9:4c:50:8c:a4:b6:2c:0f:52:78:01:2a:0d:56:
98:79:98:54:70:7d:38:73:f7:58:f2:29:87:69:72:09:cb:f9:
76:1f:0d:f2:8d:15:24:8b:b1:0b:bc:8e:66:57:33:a9:3e:b2:
d5:ff:45:55:82:56:b7:c8:d7:df:bc:53:bf:ea:1f:91:1d:66:
83:86:77:60:74:cb:dc:44:bc:be:b6:d8:f4:b7:4b:15:13:52:
88:5a:a8:6b:30:e3:46:d2:f4:48:d2:c1:5b:b0:e7:81:45:eb:
f3:ba:3b:9b:1b:0c:9c:a4:5a:74:9c:dd:87:bc:ec:74:76:75:
0b:23:4e:47:cb:5d:ed:3b:78:2e:04:9b:93:07:fd:64:70:bd:
d6:f1:ee:35:4c:db:2f:bd:d4:c9:dd:0b:0f:35:db:67:b1:c7:
67:a8:e8:72:9b:77:1d:52:71:2b:c0:ec:a1:a4:ab:2e:50:48:
99:06:e7:9e:9c:5c:4f:fd:cb:d1:d1:0e:e7:7c:8a:7a:34:fc:
c2:59:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:48 2025 by rpki-client