Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: cvtMa7qBtOrizZ2SlJm4kvvtFmNfRTnzFCvDA9M53QQ=
Subject key identifier: 0F:79:FD:E2:B1:28:49:0B:4C:F5:77:3A:5E:36:E4:79:84:A0:E0:4E
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 0196CC4ECEBD6EAE5DD046C740E4B85BEF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 153C
Signing time: Wed 14 May 2025 01:00:38 +0000
Manifest this update: Wed 14 May 2025 01:00:38 +0000
Manifest next update: Thu 15 May 2025 01:00:38 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: QeUbBl1RgPv4xxTHQwle2O3HJ68XYiTLbRU5uEsy8cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:ce:bd:6e:ae:5d:d0:46:c7:40:e4:b8:5b:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: May 14 01:00:38 2025 GMT
Not After : May 15 01:00:38 2025 GMT
Subject: CN=0f79fde2b128490b4cf5773a5e36e47984a0e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:80:8a:cf:9d:b8:b0:3c:91:1f:0d:65:22:
ca:b9:08:f7:7f:e5:82:98:f6:07:58:6c:8d:bf:15:
0c:68:8d:ec:51:84:cf:ae:14:cd:c2:b5:c5:eb:40:
2c:df:2f:00:d3:00:56:0b:26:e6:5a:2b:05:4a:5d:
39:72:12:d4:1f:99:53:f4:7d:45:71:5b:19:7c:c5:
4e:c5:ed:b5:b5:25:54:47:8c:e3:88:5d:e5:63:d6:
60:12:2d:cf:7a:50:20:48:db:c8:ca:72:c7:fd:a2:
43:f4:4d:da:32:e1:a3:61:9d:a9:89:00:19:7b:07:
d3:5b:9c:76:ac:ab:f6:53:6c:2f:1f:b2:6f:66:9a:
76:15:ad:4e:71:ce:e7:1e:3a:2f:70:49:5d:28:3b:
f1:2b:d4:42:81:d9:5d:b6:03:54:50:8b:d8:a7:eb:
8e:0a:2c:fe:0b:06:53:6d:d3:12:7c:50:17:0b:2e:
1c:fe:fe:d7:ce:4b:ac:52:0a:3a:43:2e:f0:59:a8:
5b:97:7f:4a:8f:9b:50:e1:59:88:5e:a3:78:20:2a:
80:c6:84:8d:53:78:be:7a:89:3d:1a:11:4a:76:9b:
e0:6b:61:73:26:80:4a:95:9c:69:68:25:4d:fa:51:
a7:a6:8b:02:f9:25:83:bf:e4:20:ea:da:bb:97:95:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:FD:E2:B1:28:49:0B:4C:F5:77:3A:5E:36:E4:79:84:A0:E0:4E
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f7:1d:6e:34:73:49:0c:9b:f8:c1:2a:a4:6c:c8:00:73:7c:
7f:84:bc:e5:de:27:16:bc:78:9b:6b:8e:57:f5:35:a4:b4:fe:
d5:42:11:c6:cc:ec:1a:14:77:2a:72:9a:ef:44:cd:84:7c:4f:
24:e6:b3:ac:88:4f:54:7b:bb:7c:46:0c:31:66:3f:27:ff:cd:
63:d3:fe:12:b6:33:92:d7:d3:4c:8f:a3:7d:7f:b7:47:4b:a5:
86:53:d7:8b:45:58:d3:54:f6:eb:4c:d6:af:f7:6f:08:a6:26:
ef:54:c1:21:3e:15:1d:ce:23:4a:3c:96:66:21:41:64:ed:ea:
d0:85:7a:60:04:90:cf:51:be:9a:34:8e:c5:6b:ad:28:6b:83:
fe:5d:4d:7e:79:d8:c9:33:da:96:30:e0:2d:a6:6b:60:d6:68:
91:79:27:d7:33:8d:7e:c0:23:21:ff:7b:a8:a7:72:ab:69:dc:
0d:90:56:3f:60:92:71:4c:08:26:9a:91:08:40:dd:b3:e9:39:
0a:8b:ba:64:70:73:8b:65:34:f7:ec:f9:88:48:7f:b5:ed:1a:
35:eb:bc:51:27:f6:7d:a3:1d:34:a5:36:d3:89:2a:d7:4c:fb:
57:3d:b7:58:7a:3b:0e:4e:7d:22:0e:cf:69:c4:79:bd:f6:c9:
9e:f2:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:18:33 2025 by rpki-client