Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: bWI8mURnGhnXuXwvyYVsvwGl/FkbUGc0C8lsn0Y0wOU=
Subject key identifier: 55:99:42:FE:42:B3:E6:47:37:E6:77:2F:87:C6:A4:85:F9:44:B1:33
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 0196C0B82496BE0092E6ED737DF8C1E167E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 19:00:15 +0000
Manifest this update: Sun 11 May 2025 19:00:15 +0000
Manifest next update: Mon 12 May 2025 19:00:15 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: oyS7/gAqbOIHui3l7DCNq1NJ7bYGdkK8rp4y7fs4fGk=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:24:96:be:00:92:e6:ed:73:7d:f8:c1:e1:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: May 11 19:00:15 2025 GMT
Not After : May 12 19:00:15 2025 GMT
Subject: CN=559942fe42b3e64737e6772f87c6a485f944b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:12:b9:52:b0:f6:5b:4f:af:64:d8:b8:a7:
0a:6f:83:b4:25:f1:7f:11:78:8e:41:af:e9:cc:3f:
a6:93:ea:d6:9b:3c:56:71:2b:02:36:45:c5:e9:a3:
12:c5:e4:16:97:c4:c4:f0:73:39:c6:5d:5b:e3:5f:
f0:d0:81:fd:3d:4d:a1:0b:64:b7:fc:25:62:fa:e2:
c9:8c:85:55:2f:0b:9b:7a:46:d6:9e:14:a4:89:60:
ea:40:4d:5b:4a:b1:b3:4b:3f:2e:cc:94:ac:9b:24:
32:08:14:ee:81:e9:b1:cb:a0:35:b7:9f:d1:e0:ba:
a6:91:8a:e2:c8:7f:64:2a:86:9c:ef:60:77:dc:0c:
c9:d9:d9:fb:ff:1c:ee:03:e0:cf:35:fb:bf:c3:fa:
c9:65:20:e4:f5:12:0e:4d:14:29:78:50:fd:02:7c:
e8:4e:bf:0b:09:fd:88:f9:7e:e3:0b:71:9c:24:b8:
72:7c:76:aa:5f:54:d7:54:68:77:8b:78:0e:a3:ff:
44:a1:69:a3:12:f6:e8:b1:cf:05:79:17:1c:16:47:
11:69:c7:f2:55:12:d6:13:e8:2f:b3:a9:fb:05:1a:
43:2a:df:80:72:c2:1f:2d:55:79:97:3a:6f:98:4b:
54:d7:88:bd:92:cc:9a:d2:c1:46:f7:dd:7a:10:d9:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:99:42:FE:42:B3:E6:47:37:E6:77:2F:87:C6:A4:85:F9:44:B1:33
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:fd:a2:43:e0:26:9e:0f:ef:7c:c6:95:1b:18:a0:7b:99:
16:52:f6:5e:4f:b0:3e:00:2c:39:a6:cf:c4:38:3f:e1:4b:66:
b7:5f:e2:2f:72:52:65:f0:2b:4a:a5:ff:d6:83:87:14:8d:12:
8d:e5:0f:ef:ac:a2:57:53:43:40:78:fd:5d:f5:fb:05:0d:fc:
79:a1:92:dd:b7:2b:e0:88:b3:bc:9e:ae:e4:2c:40:f7:6b:b6:
33:49:c0:6a:0c:09:42:53:c7:63:13:50:b1:80:29:e9:de:ff:
62:ed:6b:d1:38:3a:af:5f:63:3b:80:80:54:74:d4:5b:58:11:
07:10:c9:17:e1:24:c0:19:ae:9f:b5:19:ff:fc:90:e5:23:b3:
1c:fb:7c:9e:a5:50:93:4d:da:72:f2:ce:93:03:d5:af:ff:6e:
ae:fe:be:fa:e2:90:91:8e:2f:fe:79:b5:ad:0a:93:78:71:bb:
dd:65:84:47:f5:aa:f3:ea:67:61:99:e1:04:79:00:16:71:56:
78:3c:40:09:60:46:b4:ee:11:f4:ca:4d:ab:c7:05:ea:06:71:
9c:11:c4:8c:fd:92:41:d7:5c:b1:46:14:21:8e:c7:20:44:49:
43:8b:26:20:a9:4c:be:c5:a0:46:cf:94:1a:23:ef:ea:d7:2d:
45:5d:43:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:13:29 2025 by rpki-client