Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: 0QdMQ5jdA9SXUpNSmL0a/2Fxy01qy65sLHjvtWAFgmY=
Subject key identifier: 11:5B:6F:8E:A6:49:B6:B1:10:6E:6D:A1:9D:B0:0B:EC:7F:27:76:87
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 0196BB5AF8DE0352A2DF9DF10AE947E221CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 18:00:23 +0000
Manifest this update: Sat 10 May 2025 18:00:23 +0000
Manifest next update: Sun 11 May 2025 18:00:23 +0000
Files and hashes: 1: BlllPFfwzBleeaMQKYCQ6F0B17E.roa (hash: NVG+8qMR5/CCZ9iBnkVvx5PPkG8viGMGtVWfLcED+Ug=)
2: HIJyCiEY4m0B-4I_1fcHAj8ZYfQ.roa (hash: KWAcJ6WMXGoAu/XkPymhO6ZdbPiSQfc1wyZmSQYSlQE=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: atRmi+d21KhSL7EbOXHYgRGyH5AZLWqXv0A+ozBKwvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:f8:de:03:52:a2:df:9d:f1:0a:e9:47:e2:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: May 10 18:00:23 2025 GMT
Not After : May 11 18:00:23 2025 GMT
Subject: CN=115b6f8ea649b6b1106e6da19db00bec7f277687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:8d:88:02:d8:aa:d5:1e:e1:09:34:75:1b:
4b:f2:92:b9:b1:89:62:07:5c:82:c9:a6:54:a7:05:
50:fc:01:c3:09:4f:e7:57:99:e0:bb:be:14:3c:e4:
04:41:04:51:e7:d0:9c:99:8c:17:d1:ca:df:0d:ac:
f1:ac:30:7d:dd:ee:6e:ad:5e:98:4d:60:f8:e7:74:
a4:d9:c0:bf:ee:2e:30:6a:15:80:47:3c:f3:b4:a9:
95:d5:c4:1b:63:cf:d7:85:46:b4:c2:5d:81:25:2b:
08:5d:3b:a1:d5:c0:44:92:0d:14:20:96:c9:4e:5c:
88:48:40:64:0a:f2:85:06:ec:17:5e:88:fa:7e:e2:
41:82:ca:6c:9b:f2:4e:6f:08:9b:ce:4d:3f:01:07:
e1:bd:7f:21:42:9e:b7:14:e6:2d:1b:bf:c3:b3:9e:
98:b6:4b:fb:e6:2b:64:a0:79:68:ee:de:55:04:dc:
b2:87:6b:b0:cf:44:6a:24:b6:dd:61:3a:fe:77:de:
4b:87:c3:1e:d3:bc:60:35:0d:db:76:a4:ce:e7:7d:
ea:a6:bc:40:88:f4:83:27:8b:ba:3a:49:af:74:f1:
8b:6b:95:97:89:56:39:d8:be:f7:09:34:da:2d:e4:
8a:b6:fd:ca:fa:d3:28:95:53:a4:cd:db:75:d9:26:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:6F:8E:A6:49:B6:B1:10:6E:6D:A1:9D:B0:0B:EC:7F:27:76:87
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3e:64:0c:3b:d2:00:01:45:aa:ca:59:89:31:2a:4d:6d:d9:
32:c5:ed:ac:e1:57:00:02:62:0a:63:ca:e4:5c:d9:b9:16:62:
da:18:61:a1:04:d8:e8:ce:5f:a3:57:88:a3:67:89:a5:5e:d8:
28:5d:2f:60:f5:61:d9:7c:51:25:07:47:90:15:54:c7:02:70:
ed:94:1f:0c:86:c2:9e:cb:75:e5:a2:e3:06:60:e1:9b:f3:d9:
2b:af:92:4f:30:8c:c8:5e:26:f5:75:ec:76:39:0c:ff:80:4d:
fd:b3:3d:ee:28:7a:23:4c:12:2c:dc:22:80:ed:7e:f2:aa:f5:
71:fc:39:28:fe:bb:17:3f:55:c4:ce:e3:af:5b:2a:f7:89:3c:
d0:0e:60:56:a3:4f:68:af:6f:c8:b2:c4:fe:37:10:3c:43:b2:
6c:f1:dc:67:bc:e4:c5:b0:b1:6d:dc:e8:fa:26:f7:5e:03:19:
25:34:a2:cf:f2:02:dc:08:2e:cd:71:82:5e:6f:ae:7e:4b:4f:
44:bf:c4:e9:75:74:0f:d7:ec:ba:6e:65:a3:bd:41:27:01:c0:
95:c0:0e:c9:34:1c:f4:91:16:fc:ce:fc:b1:27:7a:c0:76:2b:
f8:37:9c:8c:f8:57:3d:82:b2:aa:e9:90:d7:23:a5:4f:2a:c7:
de:2b:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:14 2025 by rpki-client