Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: 9bBd971YeDFuWyPRr7tcYAcqK/8FXeQlTVov45gdW3M=
Subject key identifier: 54:A8:1A:02:13:D9:4B:BB:12:48:65:80:38:6D:5E:6F:D8:3A:01:BD
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 0196B7105D7878DBE33AC0F4475244C9E035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 22:00:24 +0000
Manifest this update: Fri 09 May 2025 22:00:24 +0000
Manifest next update: Sat 10 May 2025 22:00:24 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: 4tJfshh6zXUP2XBh/gOwZ5w86LK/mJEaXqBEC4inWCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:5d:78:78:db:e3:3a:c0:f4:47:52:44:c9:e0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: May 9 22:00:24 2025 GMT
Not After : May 10 22:00:24 2025 GMT
Subject: CN=54a81a0213d94bbb12486580386d5e6fd83a01bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:8f:3a:a0:4d:49:b5:36:bd:0e:22:9a:30:
72:38:3d:3b:32:7b:3a:90:10:65:e2:01:54:d9:6c:
d5:49:e0:68:a2:a3:f0:97:d1:45:63:ed:55:41:3e:
d4:1f:e4:9f:cc:d9:d9:d3:5f:3a:fe:43:66:4d:0d:
64:83:c8:8f:d7:e8:95:d5:88:b3:9a:28:34:d8:6b:
66:88:0c:ab:aa:df:95:06:11:21:7e:75:8d:9a:f1:
5c:4c:b6:f2:c0:e8:a7:7b:90:e4:b2:b2:97:83:65:
ea:94:c9:82:81:d2:04:8d:c1:be:f9:71:a5:1c:1d:
cd:e4:40:97:8a:4c:f7:53:eb:ab:22:01:1a:07:12:
75:4e:fd:40:40:b8:7d:f9:fe:9c:2b:97:3c:a1:ab:
45:a8:89:1a:67:55:e3:56:c8:dc:e7:c2:d9:61:29:
c0:10:21:60:a2:4d:2d:90:36:43:3a:44:4f:a8:5f:
e3:ad:32:de:3f:58:4f:58:87:9f:60:71:c5:e5:15:
f8:26:e0:f5:f2:8c:0b:db:a2:81:e0:65:cb:cd:71:
1d:d9:43:4d:b7:38:09:f7:15:2c:cf:b2:9d:6c:2f:
82:8f:4f:23:3d:05:bc:60:eb:f7:78:da:1f:3c:84:
e7:6f:55:85:7d:65:85:90:d4:24:65:4e:63:2a:0b:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A8:1A:02:13:D9:4B:BB:12:48:65:80:38:6D:5E:6F:D8:3A:01:BD
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a7:7e:d5:51:52:a8:9b:a6:0f:13:61:be:fa:a8:7d:db:61:
a6:0d:be:42:85:a3:44:7f:06:57:56:79:80:b4:c7:a7:90:55:
ae:96:78:ba:38:c6:f6:d0:bd:d3:a6:f5:ec:d1:a3:ad:12:c8:
eb:26:df:b2:5c:38:06:28:6a:15:3c:4a:ae:e7:08:35:dd:ee:
0a:d3:41:cf:8b:de:09:31:44:17:9f:c8:37:4e:31:69:95:7f:
2f:bd:4f:9c:88:da:f3:f5:43:6a:4b:83:d4:36:ab:30:ff:b5:
03:23:0c:40:f2:a7:10:de:71:d2:80:f5:84:6b:6a:87:d7:7c:
18:82:99:23:cd:8c:7a:cf:f6:2b:5a:93:44:89:4f:09:ab:8d:
ae:20:e9:81:6d:2d:fc:df:ee:82:b8:e8:18:16:d2:77:e5:ec:
83:81:95:4e:60:bc:77:68:a5:87:4a:eb:19:51:57:fb:7e:07:
e2:90:b9:88:34:c1:16:5d:42:f8:0d:59:f7:16:f0:95:6d:6f:
d6:b1:c4:7a:88:31:13:13:cc:6b:d2:52:4d:93:b0:3b:d4:d7:
b9:6f:13:b8:d0:9b:2c:d2:82:ca:60:1b:8c:eb:12:41:01:02:
66:11:2a:35:77:8a:e2:9a:a0:47:4e:26:bd:53:8c:d6:56:6c:
76:0e:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:37:51 2025 by rpki-client