Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: XP5DXyTqscce/5D4429XC7b3puQW4DbSWgKn+xrlahQ=
Subject key identifier: 20:B8:FB:93:D1:8D:9C:7C:27:65:03:0B:54:FD:BF:64:F0:39:1F:4D
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 0196D2BF6DC6B3E8546066CB09967EAC6845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 1541
Signing time: Thu 15 May 2025 07:01:22 +0000
Manifest this update: Thu 15 May 2025 07:01:22 +0000
Manifest next update: Fri 16 May 2025 07:01:22 +0000
Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: 701xJ9UsuKVQqDPjShb/JsL3Cm5NKI9XDn/Unam0ycM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:6d:c6:b3:e8:54:60:66:cb:09:96:7e:ac:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: May 15 07:01:22 2025 GMT
Not After : May 16 07:01:22 2025 GMT
Subject: CN=20b8fb93d18d9c7c2765030b54fdbf64f0391f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:ed:1e:ce:56:3a:14:57:e7:d3:31:3b:bf:
26:d5:bf:01:f3:83:32:f0:81:28:ef:5d:01:bc:80:
41:ab:84:2c:4a:9b:e7:fb:01:4e:cb:5e:66:44:a9:
47:51:b2:49:30:e2:01:62:6d:c1:d3:82:60:55:67:
75:62:e7:d7:78:93:44:1a:2a:68:6a:37:37:03:16:
70:f9:3f:dc:a0:bf:b8:24:92:e5:f6:79:a6:e6:71:
35:69:d5:4f:fe:b9:2c:83:01:62:9c:22:5b:41:e4:
c2:78:68:b7:c7:a1:01:91:4f:7b:38:66:12:c6:e0:
5b:63:f2:6e:41:27:4d:74:46:37:79:0c:78:6f:ed:
98:bd:d7:97:00:67:82:5e:3d:83:96:6f:36:ff:b3:
6d:c2:cc:79:cf:ae:4a:98:88:2f:d6:db:2b:bd:dc:
57:65:3e:66:fc:55:9d:b9:50:69:28:f8:da:01:cc:
d2:26:d1:84:b6:62:d5:3e:7a:8e:7b:05:aa:6f:45:
4c:5e:1a:a7:fb:0f:c7:5a:b9:91:8d:fd:a2:05:ed:
d4:a8:79:89:59:d8:fe:41:6c:23:4f:01:db:14:73:
d3:10:ca:ad:af:90:43:2c:50:3b:71:79:75:04:d2:
b9:47:e2:58:45:76:2c:b4:2c:72:83:f6:09:db:40:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:FB:93:D1:8D:9C:7C:27:65:03:0B:54:FD:BF:64:F0:39:1F:4D
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:a9:14:47:d9:08:f0:67:d3:e1:82:82:f4:5a:49:c7:e6:
22:85:db:f1:36:e2:53:db:95:24:ce:35:c0:df:da:a4:8b:0a:
92:d3:7f:86:70:f8:14:43:f5:b3:a5:4a:14:ef:9e:70:65:5f:
f7:76:41:e9:75:00:f7:ee:9c:58:2f:99:dd:25:12:39:56:26:
83:af:e8:16:c4:6c:80:09:99:10:b2:c6:df:5d:0c:66:9e:ac:
dd:09:97:b6:37:db:2a:12:91:fa:9c:35:2e:16:dc:e2:90:54:
3a:30:b1:87:fb:75:4f:3a:f5:d5:05:65:04:28:ac:31:a6:94:
1a:e6:94:16:e0:f5:d6:df:c6:e0:82:06:47:b7:16:a1:8a:70:
cd:07:64:55:2e:03:3b:4d:09:dd:28:77:f6:05:fc:da:05:64:
96:e5:02:ff:6a:cb:ba:cc:9f:15:6d:5a:f3:5d:53:29:17:a6:
67:77:c9:19:b7:8e:3e:1d:9b:8e:38:64:1e:ea:9c:20:56:a3:
8a:86:00:66:c5:52:74:a8:3e:b6:26:94:81:90:e8:ce:1d:f1:
ff:df:bc:68:dc:69:33:23:67:7c:a1:f3:6f:89:3c:cb:63:eb:
a9:23:57:30:3d:cf:55:00:35:53:74:44:d1:31:d1:83:ff:0f:
7d:0a:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:12:35 2025 by rpki-client