Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: ABjTkV4+KhRsgPbNdRXilHr6zvGQGUifK7BBwASUqj4=
Subject key identifier: 17:6E:1F:60:D9:1E:3B:4B:1C:CD:73:1F:09:05:57:C7:FF:B8:99:2B
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 0196AC8D02F9489C56A6F71DCD2265AF4B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0C9E
Signing time: Wed 07 May 2025 21:00:44 +0000
Manifest this update: Wed 07 May 2025 21:00:44 +0000
Manifest next update: Thu 08 May 2025 21:00:44 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: SeI6W4GL0YDLme+cXX6qeNu8voMtfCNHyx1edjtWgoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:02:f9:48:9c:56:a6:f7:1d:cd:22:65:af:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: May 7 21:00:44 2025 GMT
Not After : May 8 21:00:44 2025 GMT
Subject: CN=176e1f60d91e3b4b1ccd731f090557c7ffb8992b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:7e:a1:86:24:66:3b:d6:c5:ae:78:d4:78:
08:6e:5e:7a:9f:2d:8c:6f:c1:36:91:8a:0b:b8:a9:
67:e8:e4:99:c1:f7:55:0e:66:d9:2a:82:68:e2:10:
cd:53:c3:33:8e:55:96:cb:75:db:dd:ab:28:77:9e:
56:e8:25:66:99:19:fc:53:1d:56:8e:8f:a9:22:c0:
df:7e:7e:d1:bc:41:49:bc:92:0d:86:b6:12:7f:a8:
3b:a2:07:cf:e8:42:8a:fd:d2:34:2d:1b:f7:46:d7:
3c:e9:37:8e:07:a5:a8:b0:81:cb:8f:5b:c7:f6:dd:
7a:3d:d2:14:c0:72:20:1c:63:2c:b0:ff:22:5f:64:
21:1a:4c:17:dd:ff:ed:a9:0e:19:8b:30:3d:18:dc:
23:89:98:a2:26:ab:90:8c:79:9a:07:37:62:fc:48:
4d:45:02:62:07:a4:c1:15:0e:83:31:e2:13:ce:a9:
8b:ab:1a:3a:f3:4b:7e:96:f7:5e:82:9d:71:96:95:
9e:2d:e4:06:cd:3d:c3:f0:e9:f2:d2:99:77:5c:3a:
f3:39:e2:12:38:08:48:63:f8:c3:4b:af:26:2f:84:
44:b1:f6:42:10:e9:79:68:06:19:66:f2:cf:91:42:
4b:2e:c8:1e:8f:6a:03:4b:82:76:87:14:db:b7:f4:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6E:1F:60:D9:1E:3B:4B:1C:CD:73:1F:09:05:57:C7:FF:B8:99:2B
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:64:58:dc:76:8f:d6:be:32:6e:a5:1a:dd:f8:7e:20:7c:52:
6e:f9:c2:5d:2e:ca:f6:17:7c:0f:7d:25:f0:9c:b7:c1:9d:ba:
b2:8b:8d:4d:ce:a6:48:c3:55:fd:35:a2:a2:16:17:84:ca:c4:
40:14:ed:de:40:0f:94:e3:da:db:a7:a0:3a:67:e0:00:a0:4d:
4d:4b:14:db:28:d3:cb:ae:a4:7a:e0:b8:dd:7a:fb:63:81:e5:
c8:53:b7:1e:ac:a2:4c:73:91:b5:ad:ff:6c:f2:d9:84:cb:f5:
88:05:84:2d:51:50:51:9e:12:4c:3d:3c:12:50:bd:ea:b6:ab:
b9:da:47:23:e4:88:1f:c2:e8:62:d1:8f:6f:8e:5b:42:e1:93:
bd:3d:2d:82:82:12:66:04:89:c8:51:db:df:35:5d:e1:66:22:
2f:39:7a:a7:d1:f1:fb:ea:9a:de:26:05:62:09:f2:ee:36:3d:
ee:cf:64:58:be:59:6e:a2:da:d8:f5:6d:4b:83:95:e3:57:79:
97:44:24:ac:28:19:fe:28:c1:65:55:d3:09:83:93:b8:a1:c2:
17:3c:5e:86:40:b2:24:85:66:d9:eb:8d:59:a3:0b:63:d6:06:
e9:8e:aa:54:00:5d:12:de:2e:43:ef:58:b2:1e:7b:49:8b:19:
1f:cf:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:07:18 2025 by rpki-client