Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: RatobYrbBHh6iq9yw3WOXcbmRkECEdRflpVIFdmwgVU=
Subject key identifier: A7:E6:02:9C:33:5F:2D:9A:6F:E3:C4:20:5B:6C:0E:EE:58:6C:10:3F
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 0196B7B53D086A284B6D865811CF6E2B2220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 121E
Signing time: Sat 10 May 2025 01:00:30 +0000
Manifest this update: Sat 10 May 2025 01:00:30 +0000
Manifest next update: Sun 11 May 2025 01:00:30 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: R91g1c1JsqSg4Fw/aPuBi2hopGD0f+wN+tIq7NNzdYE=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:3d:08:6a:28:4b:6d:86:58:11:cf:6e:2b:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: May 10 01:00:30 2025 GMT
Not After : May 11 01:00:30 2025 GMT
Subject: CN=a7e6029c335f2d9a6fe3c4205b6c0eee586c103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:ef:3b:af:b3:78:2c:90:40:50:1b:4a:2a:
40:5b:2b:b4:50:70:5a:10:6a:0c:61:b0:29:46:0c:
58:75:b4:71:eb:a3:2c:ad:d3:c3:43:61:5e:ad:43:
18:b2:4f:da:ad:75:56:53:b0:c4:9e:fc:31:38:2e:
cb:c0:af:a3:73:c1:93:7d:cf:c2:d6:9f:fd:39:f9:
31:f4:9e:08:f8:51:32:38:99:a3:3e:fa:a8:de:9a:
ec:c6:57:2d:1e:2d:0e:98:17:02:57:86:19:d3:c6:
cb:18:c8:69:f1:0e:a4:bb:4c:63:3d:b0:1c:6e:3d:
02:bb:5f:b6:65:08:32:76:ad:e7:3a:60:de:4c:50:
f0:20:74:69:99:57:11:46:65:42:9b:62:92:2c:28:
b0:4a:75:54:b1:ff:77:3e:f5:d1:a0:61:2e:28:74:
af:d0:2b:9a:a9:00:7a:da:2e:51:39:b7:47:cc:08:
e5:de:4d:8e:16:51:14:4a:dd:f9:f4:d6:b4:e8:91:
77:0c:2e:37:7e:16:9a:29:7a:21:e5:23:b3:82:94:
18:94:8f:b1:cd:e9:2c:d1:62:49:5c:1f:4c:7e:a4:
10:89:12:73:66:b3:72:76:8f:32:fe:9e:bf:ff:e8:
e6:94:87:72:43:08:07:3e:6e:ab:bf:09:91:0f:38:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:02:9C:33:5F:2D:9A:6F:E3:C4:20:5B:6C:0E:EE:58:6C:10:3F
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:90:3d:28:e3:99:e1:cc:32:97:f4:d9:22:bc:d2:73:6f:e6:
94:33:36:02:a9:8d:9b:c5:23:09:ac:d5:55:cd:f0:76:c1:cb:
cd:8b:f5:49:19:bf:e2:56:10:40:1f:35:ab:db:45:9c:d3:dc:
66:b4:99:7a:5f:22:d7:75:f5:44:1b:e4:06:59:d7:ca:a5:c6:
1e:b2:c9:bd:c0:46:f3:ed:29:09:e1:f6:c2:56:a9:c2:d8:62:
4e:91:2c:4a:16:f4:a4:7e:68:fd:67:50:9b:f4:f9:d9:98:b9:
fb:d5:d7:0a:52:b1:d1:d4:72:01:28:60:1d:ad:8d:1f:c2:96:
86:17:8b:eb:a3:36:56:5d:52:f0:6e:43:cc:70:40:9a:87:6f:
13:3b:32:c8:3b:80:cc:ca:dc:0f:14:e4:98:71:cb:8c:08:40:
0c:ae:c1:a0:43:cf:c8:cf:91:43:c9:fc:82:42:d2:ac:58:e5:
00:dc:ff:88:0c:48:b5:71:f7:e7:02:41:63:7a:6d:9d:01:d3:
f2:f3:b9:a8:fb:2c:9b:3d:fc:a3:fb:82:dd:ab:1e:9b:32:a6:
67:cc:a4:85:27:16:07:b0:2c:61:71:86:6b:d8:d3:9f:83:8e:
8b:16:34:2f:9e:d9:ce:98:b4:61:e1:f9:33:d8:4f:17:45:5c:
41:83:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:33:50 2025 by rpki-client