Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: u7PsMAGjk+UhoI53FM1dKM+1tTa9eu/cyg9jfwR5FXw=
Subject key identifier: 67:E9:EC:58:AC:67:8F:D8:BF:C6:57:88:49:C3:82:A2:C7:D4:F0:47
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 0196BF01001F79AA7A805B9EADA1B98E4AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 11:00:35 +0000
Manifest this update: Sun 11 May 2025 11:00:35 +0000
Manifest next update: Mon 12 May 2025 11:00:35 +0000
Files and hashes: 1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: ThUPeHj9lg9GrGMx5TExYWrfK58odsnhGXXwhqy3kXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:00:1f:79:aa:7a:80:5b:9e:ad:a1:b9:8e:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: May 11 11:00:35 2025 GMT
Not After : May 12 11:00:35 2025 GMT
Subject: CN=67e9ec58ac678fd8bfc6578849c382a2c7d4f047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:da:cb:fe:7c:96:ea:91:f1:63:34:77:d8:
3f:28:00:51:0d:25:e7:7d:32:21:14:c2:5f:68:59:
16:b9:aa:ed:bc:46:d6:9b:3c:16:bb:51:ce:7d:de:
43:88:7f:45:64:0b:64:80:66:b9:e3:91:2f:01:5b:
88:f7:23:a9:95:29:8b:da:2f:73:5e:23:29:4e:18:
04:99:a6:2e:e1:75:07:ef:af:a4:d5:3a:df:2a:e9:
5a:24:92:09:75:2b:21:f9:b3:54:8e:fd:71:c4:0c:
9a:f7:75:f5:86:27:8e:65:73:8f:e5:64:96:59:dd:
80:2c:4e:47:87:94:e6:d8:af:15:81:04:e1:6a:a3:
ca:be:30:3e:7d:2e:13:e6:f1:ec:d5:14:d4:32:ca:
d3:5d:2b:97:91:a3:d9:ab:0b:27:0f:04:aa:ef:e8:
8f:b9:b2:77:17:b1:04:2d:e7:d1:7f:37:24:50:1a:
88:8a:ec:d5:77:dc:e0:35:61:09:4e:50:1c:5d:91:
ad:9c:a3:ab:b4:d8:c4:f4:6c:9c:8c:c4:39:3f:82:
9a:6c:bf:a4:04:23:6e:ad:4d:54:1a:3f:1e:18:c9:
9c:46:43:eb:f2:c3:95:da:61:d9:fe:a7:02:0c:ea:
79:9e:0d:da:09:54:88:a2:5c:9b:b3:f8:b5:21:fd:
ef:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:EC:58:AC:67:8F:D8:BF:C6:57:88:49:C3:82:A2:C7:D4:F0:47
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:93:17:a3:dd:bf:30:e3:2e:28:63:0f:5b:56:24:98:8c:
07:46:bc:e7:7a:2f:55:74:d9:c2:4c:f6:82:a3:17:c7:c6:23:
93:95:b7:a8:f0:f4:ae:09:ea:73:76:3d:d6:17:5e:99:ec:7a:
24:06:3d:b2:78:ca:05:f6:a5:53:1b:f7:69:3a:66:eb:4d:93:
f2:95:57:46:62:c7:2d:81:34:af:51:7f:1a:08:7a:48:81:50:
7f:bb:7e:c7:7c:53:d3:c4:0e:70:8f:58:41:36:a5:41:52:d4:
da:69:fa:ab:aa:c5:af:0f:0e:bb:f9:0b:bb:43:1d:7b:43:1d:
8f:be:a6:a6:c0:2b:0d:a3:cd:d9:74:91:ec:64:5a:c1:f0:2f:
78:35:a2:f1:56:59:bd:23:32:48:02:36:50:5c:05:54:a5:8e:
6f:22:54:cc:cf:0c:26:d0:e0:e6:ca:2b:7b:c0:68:e6:f4:c6:
d2:6a:c7:cd:71:28:43:f8:2f:a5:9b:b6:c3:f5:f1:05:41:a4:
47:de:a5:6b:a9:bf:df:cf:4d:57:b7:74:e5:65:06:54:00:a4:
1d:ea:61:81:f7:e0:0a:e0:9a:74:b5:f6:bc:8e:e7:a3:ac:a4:
7c:21:35:de:ee:26:07:a2:6f:37:48:1d:9c:d7:d4:a5:c2:62:
31:2d:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:47:17 2025 by rpki-client