Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: TBK3qcMHtEOT+6weEPZQFqjz4r4B7Gl4NoxuMMCR7l0=
Subject key identifier: 49:6F:63:A8:6E:0A:70:92:B5:07:17:7A:10:19:85:5F:EB:82:8B:5A
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 0196BCDBBFB8FED35E43ED930767C5ED415E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0B3B
Signing time: Sun 11 May 2025 01:00:40 +0000
Manifest this update: Sun 11 May 2025 01:00:40 +0000
Manifest next update: Mon 12 May 2025 01:00:40 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: LMTnzIYsFaKE7USdZ0Q9VIrOGNZgjBetQWwi0JwJIZ4=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:bf:b8:fe:d3:5e:43:ed:93:07:67:c5:ed:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: May 11 01:00:40 2025 GMT
Not After : May 12 01:00:40 2025 GMT
Subject: CN=496f63a86e0a7092b507177a1019855feb828b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:f2:bf:d4:80:60:64:06:af:f8:41:84:c7:
47:c4:44:ee:2c:9c:0d:02:cf:5c:0d:c3:e4:71:07:
89:93:0d:f4:b0:47:a5:3b:be:ca:83:b9:86:d4:ad:
84:70:c4:1e:50:0e:59:4c:a7:b3:8d:a6:55:cc:fe:
a8:c2:2e:c8:7d:07:eb:6c:7b:c3:a8:56:25:2b:9b:
bf:80:bc:3f:29:fd:0e:b2:84:d4:08:04:45:47:18:
f1:45:c6:11:a6:18:ee:b9:13:7a:8d:48:7b:e6:eb:
c6:c5:6d:9d:85:d3:53:33:94:4e:1a:74:cc:fa:58:
d6:09:87:43:28:9f:a8:af:08:c6:56:48:3e:cf:62:
5b:b4:e5:3d:26:98:ef:cb:9f:38:a0:f9:7a:ea:33:
43:37:a4:0d:fe:be:64:5f:6a:f4:a2:7e:8f:3d:ea:
27:30:1c:a6:7a:e1:b0:48:b9:9d:af:7e:39:50:2e:
a6:2d:a4:41:c0:07:03:99:83:d1:d9:84:cf:ba:82:
c0:d2:b8:52:0f:15:b5:3f:dc:4a:51:7b:d6:82:59:
3a:96:e9:df:42:9f:23:e9:f4:36:c1:45:65:e8:49:
89:98:fb:6f:f6:80:5e:94:10:e6:43:54:cc:fa:60:
43:2a:00:bc:8c:df:21:e7:96:96:03:c8:f7:12:d3:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:63:A8:6E:0A:70:92:B5:07:17:7A:10:19:85:5F:EB:82:8B:5A
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:d2:33:bc:37:28:76:09:1c:8a:4e:74:83:3d:87:21:7c:
66:0f:46:db:d5:16:8c:19:31:88:dd:b8:5a:07:f2:92:84:48:
b4:0f:02:22:08:61:d2:4b:ca:25:c0:7c:c6:18:28:7f:28:9e:
04:9f:9b:92:cf:6c:cd:a0:58:d1:c7:4e:f9:e0:a9:14:5a:fd:
7b:62:5f:5b:d3:c6:8e:36:1b:87:41:7d:6f:c9:03:2a:c9:d1:
7d:3e:88:40:8a:b0:62:bf:e7:07:85:d2:df:46:07:43:ef:65:
0e:31:ce:d2:7d:0a:fa:54:f7:77:2c:ef:72:cf:d0:06:aa:da:
0f:bd:72:87:34:a6:8a:59:8e:42:f7:2a:d4:ea:3a:e2:6f:10:
ee:0a:64:68:4e:47:98:1c:2d:b4:09:ce:51:c2:4c:1f:b9:d9:
fc:7d:ff:62:0a:7b:71:91:42:bb:ad:e1:b3:24:d3:0a:86:69:
00:1f:ec:38:74:2d:dc:75:4e:be:4d:3c:e8:ae:a5:ff:7f:a2:
64:f3:0d:10:c7:39:3b:93:91:ea:42:d7:88:02:5f:bf:8d:e0:
49:bd:3d:aa:7b:31:8b:46:a4:d3:24:cf:ba:dd:59:79:33:4a:
67:bb:ff:d6:99:b4:54:ad:67:0b:8b:4a:7a:6b:a8:21:ab:a9:
91:8a:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:29:51 2025 by rpki-client