Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File: S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier: 7pEGPj5zaVasHIeqp/VFiZLuzpwAIOVtO+ps98AePMk=
Subject key identifier: F3:08:9B:3B:2F:7F:54:AF:86:6C:0A:39:BE:C9:DB:FB:C5:F0:12:9F
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer: /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial: 0196C2A6B40115CBBD26696FF9997252C22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number: 027B
Signing time: Mon 12 May 2025 04:00:26 +0000
Manifest this update: Mon 12 May 2025 04:00:26 +0000
Manifest next update: Tue 13 May 2025 04:00:26 +0000
Files and hashes: 1: A3eZlYEypGjwef6ovVTvAMEG2Sc.roa (hash: itiiU42XBZajUxpH3eQ5BL8/j+cYwxjPvYG7bJxrjyA=)
2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: ivbDTc0QulQGEZE+wjmDc41+6Ilgb+2AEDcoUG0477E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:b4:01:15:cb:bd:26:69:6f:f9:99:72:52:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Validity
Not Before: May 12 04:00:26 2025 GMT
Not After : May 13 04:00:26 2025 GMT
Subject: CN=f3089b3b2f7f54af866c0a39bec9dbfbc5f0129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:42:1f:2d:ab:6d:ee:57:ea:5b:7c:33:c5:
f4:53:26:04:e4:a0:37:c7:31:74:7d:ec:0c:13:03:
19:20:f9:8c:50:1d:40:d4:b9:91:55:c3:c1:ec:9c:
b4:51:98:c9:1e:06:46:7a:d1:90:87:37:e2:e6:85:
9d:c8:47:d0:ef:b4:2d:3f:1f:0a:be:7a:07:11:6b:
14:fc:ef:74:c0:f4:3a:43:5d:ef:cc:84:e8:93:c7:
ee:b0:52:4e:b0:c4:d8:53:73:db:30:a0:68:6c:8f:
86:2e:30:11:24:67:75:50:7c:20:84:b2:50:83:e2:
c1:16:5a:bf:65:2b:d3:2a:69:ad:9e:c0:09:fe:6b:
5b:0b:ff:c6:22:e7:d7:62:93:44:d9:26:99:13:53:
9d:a9:fc:d8:34:5d:25:2c:19:06:4b:e3:4d:b6:4a:
95:85:39:fe:ff:45:f1:cb:bc:93:46:6d:0b:47:4e:
cf:e3:f7:fd:e1:db:ef:12:23:c9:10:84:8b:e1:ca:
20:f5:c0:7a:49:10:9f:f8:17:aa:08:8d:bd:d7:63:
ab:8f:2a:51:52:b6:74:ef:69:eb:38:86:bc:08:08:
db:60:cf:d7:50:cc:83:de:1d:24:f8:3f:40:97:3e:
53:9c:02:45:ee:fa:5e:59:b0:9c:c2:49:51:15:22:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:9B:3B:2F:7F:54:AF:86:6C:0A:39:BE:C9:DB:FB:C5:F0:12:9F
X509v3 Authority Key Identifier:
keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:70:9e:5a:10:85:0c:1e:54:02:0e:ec:51:29:b2:1e:3c:b6:
21:bb:96:b4:7d:74:c9:bd:65:0c:56:00:ee:eb:f4:1f:74:f3:
65:3c:ef:89:50:21:8f:f2:63:bc:e1:19:0a:45:97:f8:5e:6d:
00:07:1d:ea:32:53:ff:7e:89:c6:28:f7:3d:19:b3:4d:60:b8:
c7:c1:7b:c8:e4:8b:68:e4:0e:18:fc:94:2b:5c:9d:d0:30:3f:
a7:68:d4:06:76:d8:70:1a:82:f0:7c:60:05:1a:95:35:e3:d1:
40:62:3a:02:e2:54:f7:84:cd:df:6f:ff:15:e5:07:69:31:ba:
41:af:10:77:58:e2:da:6e:1a:de:ad:39:ee:22:6f:e5:8f:44:
c4:37:98:4d:b5:b6:fd:25:4b:63:45:c4:be:2b:79:12:b3:cb:
15:d6:6e:55:3f:f5:85:4d:8c:4e:07:57:41:64:08:8f:dc:31:
1c:f5:63:49:24:12:73:18:18:0e:ea:f7:59:48:aa:a1:4d:7a:
85:e8:1c:83:31:36:d7:f1:c3:57:57:9e:d8:b1:10:12:12:41:
1c:a2:d0:aa:fe:43:2c:2b:01:6d:ca:d6:cc:dc:85:a7:06:a8:
b8:70:75:cf:7f:4e:32:2c:6d:62:c0:ca:12:3e:90:01:18:26:
08:73:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:23:02 2025 by rpki-client