Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
File: S5o7nhAjIJXBjSZERAzlxYoTizU.mft (raw, json)
Hash identifier: yfmpJd/W+LeFN5sY68BSGcCmCOdk+btCpxLFX6yjOYg=
Subject key identifier: D0:F9:58:EE:AF:4F:7F:B3:CC:46:4E:50:6D:34:5B:24:96:02:7A:AD
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 01969FAD2D6E5334FD1DF59309F17C86951F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
Manifest number: 0CBC
Signing time: Mon 05 May 2025 09:00:48 +0000
Manifest this update: Mon 05 May 2025 09:00:48 +0000
Manifest next update: Tue 06 May 2025 09:00:48 +0000
Files and hashes: 1: AGFXaqT3BvJjfsfWKc-WZgyT260.roa (hash: otB7RONJ2iX79r/3n1UHcffodGPsIg2+hKNGewXNd5g=)
2: S5o7nhAjIJXBjSZERAzlxYoTizU.crl (hash: 0WEJ2CciMwuowiIz7aOWniFKyaX7DbI+np59EehkdB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:2d:6e:53:34:fd:1d:f5:93:09:f1:7c:86:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: May 5 09:00:48 2025 GMT
Not After : May 6 09:00:48 2025 GMT
Subject: CN=d0f958eeaf4f7fb3cc464e506d345b2496027aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:1f:5f:2d:90:28:18:3a:52:27:3a:d5:e6:
6a:40:7d:02:00:03:6d:94:59:2f:d1:f2:8b:b7:f5:
2a:7a:26:98:c7:1e:52:c3:4b:8f:38:39:ef:ff:2d:
28:c1:72:c3:19:14:6b:6a:fa:e1:eb:1c:03:08:d2:
d2:df:8d:6f:ec:5d:03:56:86:12:ea:eb:d1:ad:8c:
74:c4:28:0c:62:7a:f5:8c:b4:5a:3c:8d:ef:61:be:
69:fd:75:99:59:ad:c2:bd:d1:c8:f1:e3:a8:85:3e:
5e:79:ba:98:46:8c:3a:63:3e:68:32:18:e1:91:56:
44:3f:cd:79:cb:29:da:09:6e:e5:85:0c:22:3d:9e:
4e:2c:0a:f9:ea:3a:85:00:5c:5a:ec:42:1c:e1:55:
66:59:a5:0a:9e:92:53:76:e8:2f:24:b8:14:44:d6:
4d:93:48:36:82:c2:00:6c:f0:a3:b7:42:3b:cc:fb:
f1:99:00:27:8c:6f:56:61:83:a1:c0:e7:a9:02:17:
90:2e:a7:40:98:bb:eb:47:0e:86:36:5e:c6:71:53:
67:30:70:7e:a0:0c:a5:6a:76:c4:43:ca:63:09:62:
db:02:fc:54:99:66:66:a9:c5:90:55:36:26:9f:cc:
a8:4c:a8:a3:54:d9:68:1d:82:56:0e:f7:95:a0:e6:
1f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F9:58:EE:AF:4F:7F:B3:CC:46:4E:50:6D:34:5B:24:96:02:7A:AD
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e6:49:18:28:a5:d8:db:ae:ec:4b:ca:49:30:68:ff:85:01:
2d:ec:1e:40:f3:da:07:c2:01:9e:56:63:ac:bb:48:2d:09:9a:
7d:4b:eb:83:2b:10:b4:9d:f1:ad:cc:f3:df:09:52:aa:b5:53:
e6:0f:4e:0b:04:28:c1:36:0e:ec:7c:5a:78:a2:d9:87:e4:cc:
08:5c:d6:52:5f:c2:1e:4b:ce:e5:d8:3a:6f:a1:04:11:47:ce:
84:2f:cb:73:c5:47:7f:d8:63:b1:6a:bd:2e:ff:47:65:1f:20:
5a:33:59:9c:e7:d5:ec:b0:48:57:c4:e3:b7:ad:e3:60:65:f0:
4c:4a:81:80:e1:b9:8a:0b:21:22:76:5a:33:f8:f4:dc:fe:17:
3a:82:48:37:3d:3f:df:d1:6f:b1:88:f7:92:4d:44:1f:b3:a0:
60:7f:fc:20:fa:39:83:aa:e2:46:f3:ca:3e:fc:88:83:87:8a:
71:d3:cc:43:8c:ff:ed:50:3b:72:ca:03:a6:fc:0f:a5:e2:3e:
8e:8f:2a:fe:a1:6b:03:8e:ba:91:3a:f8:c5:09:20:4c:37:d9:
fb:fd:c2:5f:26:de:25:18:99:42:1b:92:0c:3c:fd:9c:c8:ae:
67:54:b2:a4:f6:73:20:d4:c8:1c:ca:13:9a:26:2c:38:e7:fd:
fd:64:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:42:06 2025 by rpki-client