Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
File: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft (raw, json)
Hash identifier: IQsj/u/+ya9hruSexoeOANGX/r269ERMpwA8QXbwNTM=
Subject key identifier: 70:37:3F:C6:C1:B8:C5:5C:73:E3:77:F2:A6:66:B0:F1:F7:44:F1:96
Authority key identifier: 4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
Certificate issuer: /CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Certificate serial: 0196A01ADB60894F5ABDFBBCFF4FF617EF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
Manifest number: 11BF
Signing time: Mon 05 May 2025 11:00:36 +0000
Manifest this update: Mon 05 May 2025 11:00:36 +0000
Manifest next update: Tue 06 May 2025 11:00:36 +0000
Files and hashes: 1: 1D0kryG-hg5X4kNtLF0_L_6fbtc.roa (hash: Zop4UA3qvwcLs+PgF6ZAbdQWhdOq1xNbvhqjWudAWN0=)
2: S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl (hash: vu7AmXQgkzHWxzqsPClMsAgiM0mGL1nkzJJDT3jRlQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:db:60:89:4f:5a:bd:fb:bc:ff:4f:f6:17:ef:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b72066d7e6ca8ad2ffa62a69b067923a42df96f
Validity
Not Before: May 5 11:00:36 2025 GMT
Not After : May 6 11:00:36 2025 GMT
Subject: CN=70373fc6c1b8c55c73e377f2a666b0f1f744f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:0a:ed:f7:61:25:e3:04:7b:3e:67:88:01:
3d:e0:ae:38:62:6d:4a:92:b0:43:e1:72:e3:aa:22:
97:f5:e7:a3:85:16:a7:f4:16:de:4d:ee:e7:e4:ef:
66:e4:fc:9b:3b:86:1f:95:26:55:57:bb:0b:6d:f2:
1c:9c:b4:ae:29:36:e6:f7:1c:2d:bf:49:2f:be:96:
70:98:4e:08:87:57:cb:62:5b:f5:f0:a7:5f:07:8d:
64:7c:1a:de:6d:1a:8d:ee:f7:ba:87:88:89:2d:9a:
ea:01:4e:96:8b:3c:21:e2:f5:39:0f:03:42:fe:4a:
44:0a:53:ce:a2:b9:53:dc:11:a7:a6:f9:41:ca:0a:
f4:c3:94:a0:2b:02:c7:34:64:fa:ea:fd:d0:08:28:
38:f7:f1:80:e4:79:f7:4e:cf:30:b4:2e:03:24:78:
93:63:36:c8:49:a4:58:af:62:22:8f:67:27:d9:d8:
fd:da:7a:16:ce:ef:a2:16:b1:a7:85:13:25:b7:42:
2d:4d:58:5b:ef:5b:7d:eb:77:8f:85:15:9e:96:6f:
06:d6:c8:43:b7:f9:ea:ae:e6:c3:82:fc:d6:34:5e:
d7:2d:8a:25:43:d4:0a:b1:1b:02:cc:fd:a8:0d:92:
99:85:3b:34:c3:bb:5f:6c:40:08:da:11:ef:e1:6d:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:3F:C6:C1:B8:C5:5C:73:E3:77:F2:A6:66:B0:F1:F7:44:F1:96
X509v3 Authority Key Identifier:
keyid:4B:72:06:6D:7E:6C:A8:AD:2F:FA:62:A6:9B:06:79:23:A4:2D:F9:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a64b09-64df-470c-a64d-1f6991877b26/1/S3IGbX5sqK0v-mKmmwZ5I6Qt-W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:25:1d:67:3e:87:17:b5:e2:7f:62:ce:19:9f:62:d9:bc:e8:
93:15:26:70:70:cf:39:39:0e:83:da:25:c8:2c:7c:7c:d8:a5:
2f:54:57:75:61:33:be:fb:14:95:4c:20:e8:21:46:4a:4f:8b:
9f:08:ae:c2:11:ac:25:80:d3:47:de:42:f5:83:01:1e:6c:dc:
be:71:e9:e0:04:92:f4:96:2e:ee:75:90:09:a0:68:5b:4e:82:
17:b5:01:bb:38:5c:01:90:b9:4e:af:0b:8b:51:2b:07:ec:a5:
67:c6:13:3b:d0:7b:7c:f6:e9:0b:8f:e6:32:fe:f8:aa:c7:a3:
e5:29:aa:bc:5d:02:f0:ed:39:e8:11:09:88:8c:eb:f5:c0:78:
f2:f6:f8:38:b5:d5:cf:ba:58:7c:18:28:e9:7f:53:77:12:3e:
b4:b3:4d:4c:95:7f:73:f3:64:83:96:c7:87:f8:b9:a9:a0:6b:
2c:60:80:0b:48:0a:d9:d9:97:67:a5:36:db:7b:ec:1c:66:93:
ae:a4:ca:e4:7d:90:74:f7:e5:d7:a1:e8:e0:b4:7b:ea:96:2d:
aa:e3:c6:64:f2:a4:25:7e:38:69:aa:9f:07:a1:31:c0:fd:c0:
ab:33:36:ac:b8:50:52:ec:2b:66:4b:47:b8:92:8f:a0:8a:ee:
93:ce:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:46:45 2025 by rpki-client