Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
File: s7b1TqmxWovU8zglOGyyd7A0Od0.mft (raw, json)
Hash identifier: VOVnPrBtT1J2t8rwguWQj7PKtg4FuITeDAB3gNTh3PY=
Subject key identifier: 84:85:C0:C9:4B:77:09:E4:2D:6E:55:A2:58:98:6C:D5:27:79:CA:6A
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 0196C4CC54F1770D054ED051ACDA1A580359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 14:00:47 +0000
Manifest this update: Mon 12 May 2025 14:00:47 +0000
Manifest next update: Tue 13 May 2025 14:00:47 +0000
Files and hashes: 1: SpsqNCwISL1D7YWDs8MOUK4XUcQ.roa (hash: VKTdP32emCO1Alc2phplZ6z5V0MT3UL3VXfP0BBA76I=)
2: s7b1TqmxWovU8zglOGyyd7A0Od0.crl (hash: e3jhu4oOB25kP9i8oJDLI3+Fm9tuAfOEcuLnD13rLX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:54:f1:77:0d:05:4e:d0:51:ac:da:1a:58:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: May 12 14:00:47 2025 GMT
Not After : May 13 14:00:47 2025 GMT
Subject: CN=8485c0c94b7709e42d6e55a258986cd52779ca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:49:21:43:69:6e:c2:44:65:44:20:5d:63:
2a:90:9b:a7:01:21:5e:af:1d:d4:8f:91:a6:f6:35:
9e:c0:e2:f0:04:3f:31:69:e3:a1:98:9d:a3:ca:6c:
f0:d0:48:46:61:38:2a:11:a8:1c:18:ee:12:40:25:
28:97:27:6a:15:78:d5:72:31:14:b0:6e:d3:07:79:
2d:19:cf:d4:a8:24:c8:8f:d7:2b:4c:a9:75:4d:d3:
26:fd:34:d7:40:ab:a6:35:42:62:cb:79:e4:1b:a3:
67:4a:81:df:82:3e:4e:d6:6c:44:fa:da:75:4a:e5:
ab:6b:b6:58:a5:80:41:46:03:3c:98:d7:11:18:83:
52:73:3b:3c:6f:ef:25:fe:d1:56:93:7b:40:d0:2f:
22:5a:25:04:57:34:27:40:f1:d8:15:6c:93:f1:af:
df:f8:62:28:94:73:14:89:a3:64:ea:4d:43:f4:17:
7c:6b:d4:c5:df:e7:58:07:e4:48:6f:be:80:f9:a1:
a7:a7:06:c7:b6:0e:f5:58:6d:ca:f8:b7:c0:f4:8c:
66:2d:31:cc:87:67:e6:e2:92:50:70:2a:6e:1d:cd:
6e:d3:c3:71:42:60:17:bb:a4:e6:c4:6f:ef:ac:94:
a8:fa:96:e6:e9:8c:93:76:0a:af:30:9c:1d:75:f6:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:85:C0:C9:4B:77:09:E4:2D:6E:55:A2:58:98:6C:D5:27:79:CA:6A
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:37:d5:c5:a2:6e:66:33:f8:55:53:a4:62:3c:bd:f0:56:76:
c2:16:0e:0e:6c:54:9a:fa:92:c7:84:1b:6f:fa:c2:71:e5:36:
9a:42:42:ea:2f:b9:d0:00:e0:97:83:e4:48:4d:7d:07:fc:d8:
71:61:29:5a:9b:2d:ea:e4:47:ca:56:a1:6c:1d:04:40:56:e2:
36:03:16:8a:f6:f1:97:54:4d:fb:17:d2:17:d6:1d:7e:32:54:
c2:90:73:b4:9c:8e:d8:27:ba:fe:c6:50:3d:77:f1:6f:0e:31:
6f:2e:61:01:b2:25:7d:d8:4e:9b:7c:a5:25:78:e5:11:31:cf:
e3:1f:87:5f:ad:03:7a:5c:6e:0b:03:e0:55:69:e7:c5:68:b8:
6f:c8:e1:73:8a:6d:be:35:58:03:db:f4:3f:5f:67:e4:eb:00:
7a:68:28:85:80:66:1d:88:46:af:7f:0b:1a:71:b0:ca:11:ec:
7f:dd:8c:0b:32:4f:15:78:d7:8b:ff:90:0e:02:16:40:cc:69:
1e:87:85:86:bb:f5:07:7e:80:69:36:75:c6:74:70:03:8f:a1:
af:b8:cd:cf:5b:d1:2a:45:18:3a:aa:74:7e:89:a5:a0:40:db:
c2:f5:77:72:c9:56:47:2e:1a:a8:fb:f1:09:7d:c1:93:f8:30:
ea:bb:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:49:03 2025 by rpki-client