Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: odDc/12Qh77aHJmn7e8C22xBtzeCfKehjYzh+ir1foc=
Subject key identifier: EE:C9:30:59:80:BE:40:D4:45:F6:06:41:4E:22:30:82:2A:F7:04:56
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 0196B6352E071A055B570FB23D835FF761CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 1533
Signing time: Fri 09 May 2025 18:01:00 +0000
Manifest this update: Fri 09 May 2025 18:01:00 +0000
Manifest next update: Sat 10 May 2025 18:01:00 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: ugLXwsK2PZ8J4TVQgIGKjLck5WuZKsSM5FsN5wH8xBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:35:2e:07:1a:05:5b:57:0f:b2:3d:83:5f:f7:61:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: May 9 18:01:00 2025 GMT
Not After : May 10 18:01:00 2025 GMT
Subject: CN=eec9305980be40d445f606414e2230822af70456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:f0:36:44:e9:1a:d0:a7:c4:64:10:17:79:
bb:c6:1b:31:31:10:2f:1c:b6:69:cf:ec:10:5c:46:
fc:ac:9f:5e:eb:c0:7a:6e:16:dc:14:68:da:5d:34:
56:d4:9a:a6:da:7b:47:3e:be:ee:d2:e8:61:72:ea:
ea:c1:98:c0:f5:19:46:9f:d8:54:46:29:0d:47:b1:
bc:8d:5f:38:b1:fd:30:8e:da:d3:d6:3b:e4:63:4a:
6d:d4:7b:b7:d4:7b:a7:4a:ca:e6:f0:a3:67:64:0c:
59:f7:3a:11:f7:15:67:8d:05:fa:ac:73:3d:06:db:
86:14:52:34:c6:be:bc:85:ac:ba:11:68:e1:cb:e2:
df:9b:13:09:dd:a7:ca:c3:b0:d8:04:4a:52:dc:ee:
00:7e:1a:53:ed:09:49:c7:cc:da:db:7f:b6:3f:2b:
d6:ff:de:b7:af:8f:81:92:4e:4c:9a:11:66:8d:8b:
fc:86:a0:e9:e2:53:e6:b9:5f:bb:70:12:7b:13:de:
21:3a:9e:43:09:57:6d:22:01:cc:eb:8f:26:58:1f:
9b:7c:79:e8:76:88:28:5c:28:ee:f1:33:a3:4d:97:
a1:93:ac:a9:a9:c4:0d:25:39:7c:6c:39:21:7e:46:
ec:d0:10:55:3e:b9:24:e6:67:9e:0a:2d:17:9c:6b:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:30:59:80:BE:40:D4:45:F6:06:41:4E:22:30:82:2A:F7:04:56
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:20:aa:65:38:d2:ca:b6:25:09:56:b3:5a:63:54:94:5d:
02:55:5a:63:09:42:0a:ef:12:4a:1a:f3:20:db:7d:b5:83:f5:
3a:5d:5a:8c:fc:9c:c8:91:73:91:f0:f7:15:d0:80:5a:af:3c:
e9:49:b5:06:5e:32:0a:3c:14:fd:ed:96:5a:bf:6b:91:39:a0:
22:6d:a4:ed:b5:b0:d8:d1:a0:7e:b6:4c:09:cf:a3:08:5d:19:
ad:d8:c9:29:f8:da:db:d9:75:90:f6:9d:e6:2f:50:03:70:12:
9b:8a:e7:c2:e7:2a:79:10:af:cf:55:54:42:4c:58:dc:40:ac:
ed:b4:80:71:6e:76:09:47:89:24:35:49:b1:da:bb:5d:7b:f1:
7b:7d:14:a8:fd:50:6c:c5:5e:3d:8e:a6:95:ea:7a:95:19:58:
be:5c:97:8a:1a:ff:da:e5:ad:20:b6:fe:fb:cc:ab:85:be:e2:
d1:85:56:5e:8f:85:11:b4:f0:db:01:72:4b:d6:aa:97:e4:bb:
e8:5f:97:83:8d:2d:8a:0a:65:ca:2e:47:81:62:cf:d4:3d:8a:
3d:d2:e9:c4:22:72:ee:ba:76:e4:ee:32:dd:5e:e6:8d:1f:b4:
06:5e:4e:a5:b6:0b:e7:eb:c4:d6:d4:6a:c6:bb:9d:dc:2a:ed:
2c:3c:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:50:49 2025 by rpki-client