Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: xPUTh7yb83FbCp0zJFUilC21qNm8NJ5t46q9ZczeUmA=
Subject key identifier: 4A:59:C8:15:3E:96:DF:46:FD:22:BA:53:14:97:3E:E7:18:5A:19:F2
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 0196C5DF0A9B58C1C5D76A0E208A5F6A6553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 04E1
Signing time: Mon 12 May 2025 19:00:50 +0000
Manifest this update: Mon 12 May 2025 19:00:50 +0000
Manifest next update: Tue 13 May 2025 19:00:50 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: ASECUEjQxDr0KtJx+0dgGPd8P1k8JNlfqX2Es9ZWZaE=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:0a:9b:58:c1:c5:d7:6a:0e:20:8a:5f:6a:65:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: May 12 19:00:50 2025 GMT
Not After : May 13 19:00:50 2025 GMT
Subject: CN=4a59c8153e96df46fd22ba5314973ee7185a19f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:cd:a0:fc:b1:11:ee:a7:3d:96:85:15:39:
7a:36:b8:a9:df:37:bf:39:f6:c6:16:41:89:54:02:
07:80:58:e0:e0:47:a4:8a:f8:d5:eb:ac:65:5f:cd:
6f:18:a6:90:a7:09:15:49:b8:ea:21:6d:30:69:69:
7b:7b:4a:dc:a5:0e:e6:15:4e:16:49:8f:46:98:63:
94:fa:1f:0c:e0:44:fe:cd:0d:ce:05:ee:a2:2d:a7:
84:e1:b8:75:6c:e1:b0:25:c7:55:4d:48:4c:57:57:
aa:d5:31:07:fc:d9:1c:48:99:bd:fc:04:24:c4:8b:
20:19:57:a4:c0:6c:4d:5c:50:c5:3f:e5:1f:65:e7:
ed:d9:9a:d2:d8:5e:81:0e:ed:ca:dd:c6:82:3c:f5:
60:ef:73:3f:c4:76:8b:34:a3:a3:86:fd:2c:59:ef:
ce:9c:53:21:07:da:50:e0:b0:62:34:c2:69:86:2e:
70:40:97:57:52:15:19:db:d8:f5:dd:2c:d0:fe:b1:
ec:ec:dc:ac:52:11:cc:86:7b:ab:41:53:ca:fe:f3:
51:17:18:d7:3b:f7:2a:85:8c:fa:4a:21:55:47:9f:
97:ee:87:60:d4:d2:04:4f:61:ab:94:52:20:20:1a:
7e:ac:22:41:a3:b6:a2:82:8b:32:c9:3b:31:0f:b5:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:C8:15:3E:96:DF:46:FD:22:BA:53:14:97:3E:E7:18:5A:19:F2
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:c2:bf:7f:5d:7d:b4:66:dc:73:28:f4:a6:46:38:23:38:
8b:5a:45:07:5a:84:72:f2:4b:77:31:29:1f:48:d4:83:10:5d:
40:9d:ff:b9:41:de:ef:6f:3a:55:2a:28:74:23:54:79:25:a3:
4c:f3:f5:7e:36:8b:ee:1c:62:6d:f8:93:d7:f3:20:7b:00:75:
d3:5e:ed:72:93:e8:a3:47:8c:f7:e6:a9:b4:d9:c7:43:c2:54:
03:5f:b3:45:66:e3:f7:fe:87:b7:5d:79:a4:65:86:39:17:68:
b9:c8:2d:cf:e4:f2:a3:90:0a:97:f3:03:d1:fd:c8:71:87:72:
c2:64:31:4d:6f:72:e4:c9:b1:c9:b7:af:1f:51:40:28:76:76:
13:dd:f1:82:47:7a:77:ba:d1:b0:33:0a:67:49:28:55:1e:36:
7a:df:0d:0f:77:7e:da:c4:c8:96:73:a1:f0:6e:30:59:e1:3a:
3a:00:b9:2a:6f:6f:99:4b:a0:8b:ac:11:27:c8:cf:2f:53:ed:
12:99:fe:ca:0f:84:75:d4:62:08:d6:ef:5b:65:73:da:19:b6:
31:59:79:62:c7:ba:41:09:a3:73:94:e8:a1:e6:65:3c:9a:0a:
ed:79:ed:96:b8:92:a6:b1:48:e2:68:f2:44:b9:f6:5a:a1:92:
2e:16:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:04:29 2025 by rpki-client