Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: XTa0ixsb+EJIKWNtwG0ahubuYrOeE0Nf3hUUp89GRK0=
Subject key identifier: 54:21:FB:C1:8D:02:3A:55:74:7A:CD:15:FA:34:4B:EF:E3:D8:46:6D
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 0196BFDD33C5EB60A522F64E4DA078155182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0C17
Signing time: Sun 11 May 2025 15:01:07 +0000
Manifest this update: Sun 11 May 2025 15:01:07 +0000
Manifest next update: Mon 12 May 2025 15:01:07 +0000
Files and hashes: 1: 1-Mg08ooGsj9VN-8i0khJXBw3jVQ.roa (hash: cP0po0zW+LQnzjrZSQHX9u1ecovx/li0WZt0UNimdaw=)
2: E1tiJF9pbO0eSBPSwr1et8cPjUs.roa (hash: KqE7+MnUHX3Ki13WWK14Wm5uLKCL0/xXzqRQ5h2lQNo=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: ZwMB7L9PohWBGEcR/RP6q33iCnWlQpBPFpMg9OWPuC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:33:c5:eb:60:a5:22:f6:4e:4d:a0:78:15:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: May 11 15:01:07 2025 GMT
Not After : May 12 15:01:07 2025 GMT
Subject: CN=5421fbc18d023a55747acd15fa344befe3d8466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:28:1d:c7:65:d6:7a:26:a9:20:ff:b3:36:
82:42:da:0d:57:a1:62:c6:77:b4:4a:85:d1:e5:60:
14:11:97:50:a0:b6:f6:a3:c4:13:e2:92:f4:9a:80:
cd:16:33:d4:e7:fa:f4:b0:91:43:64:53:77:ca:bc:
71:dd:e6:80:96:20:65:92:b0:de:e5:91:e7:72:6a:
c3:54:a3:c4:78:2a:72:13:95:f6:96:5f:de:54:93:
95:30:e1:b8:97:e7:47:29:36:5f:48:58:8d:86:51:
c8:f7:8b:8e:7b:31:63:9d:81:78:0f:0d:6d:93:ca:
26:db:a4:65:3b:b5:2b:7c:a8:53:f3:f9:d6:bf:dd:
3a:ea:f7:45:71:56:ea:7c:74:93:44:1d:40:d9:42:
a5:32:0c:34:7d:c9:f6:0d:1e:b9:25:b7:96:95:c9:
47:77:46:94:60:57:ae:60:b0:54:b2:bb:41:fc:33:
b6:37:c9:80:d9:44:38:dc:35:07:af:e6:7f:85:ce:
97:08:3b:32:ff:37:83:b2:f7:91:3c:83:d3:7e:6b:
94:bf:f7:50:fd:6b:cf:2e:80:9e:a2:cf:b0:03:65:
d2:32:25:c1:be:7a:63:dd:8a:ca:06:de:1b:df:be:
ac:dc:17:be:fc:59:fe:ff:11:92:fd:c9:c1:34:7e:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:FB:C1:8D:02:3A:55:74:7A:CD:15:FA:34:4B:EF:E3:D8:46:6D
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ba:7c:83:2f:b4:86:19:89:e4:0e:ab:02:0d:5b:f7:40:3d:
07:8e:50:7c:16:cb:ef:61:ec:77:56:71:d7:12:af:a4:5d:48:
25:4a:18:b4:f2:41:58:f1:f3:15:db:e8:db:4a:3a:51:fd:52:
b9:29:11:94:9d:6c:61:b0:df:2f:6a:18:35:c5:4f:9f:d8:9d:
90:1a:8c:ab:b5:5c:4f:29:d6:00:09:e6:7d:54:36:4c:d3:92:
5d:ff:ad:ed:7c:99:74:f2:10:d5:7e:e3:36:02:7d:fa:41:a5:
e2:2f:e2:8f:d4:17:d7:0a:cb:12:e7:ee:77:c5:c8:dd:8b:28:
42:e7:be:c3:a6:af:77:03:21:02:01:9b:e4:76:d5:ea:12:f6:
c4:4e:8f:27:9e:14:63:18:78:da:0d:9d:c8:d0:65:90:2f:09:
3d:05:9c:c9:fd:75:f6:5e:9f:80:e3:03:ea:69:e9:17:b4:ac:
b4:d6:4d:d5:4d:be:1c:13:53:7d:7a:1f:83:a1:5a:d9:3e:17:
b7:67:0f:23:5e:ab:16:cd:ae:6a:cc:e5:cd:af:c9:43:71:e6:
15:06:89:91:a9:03:7f:2e:ad:40:90:f3:8f:08:8e:b6:ac:3d:
db:02:c4:a1:3c:23:14:7b:71:21:0b:e4:d9:2f:99:ed:1e:cc:
50:96:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:49:42 2025 by rpki-client