Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: ZkZzZ3lWgD+p5R5X5tWeF9it9eKWpFx1XA2LiITToIE=
Subject key identifier: B8:1A:8E:8C:9F:09:30:5E:2B:45:C4:4A:52:42:F1:11:AA:94:83:BF
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 0196CACE3517A3BC36FEF9F89CF495B5B01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1540
Signing time: Tue 13 May 2025 18:00:33 +0000
Manifest this update: Tue 13 May 2025 18:00:33 +0000
Manifest next update: Wed 14 May 2025 18:00:33 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: ocD51m6rVklo38RpQABISs16+zIkDZewTtRntSShFfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:35:17:a3:bc:36:fe:f9:f8:9c:f4:95:b5:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: May 13 18:00:33 2025 GMT
Not After : May 14 18:00:33 2025 GMT
Subject: CN=b81a8e8c9f09305e2b45c44a5242f111aa9483bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:82:af:ab:bf:cc:22:2a:30:e4:c7:de:e7:
35:f7:db:d5:89:4f:be:1a:f1:85:f1:09:ea:5f:0f:
12:a0:45:f2:45:4e:39:bb:31:a9:0d:16:77:db:34:
7e:02:27:bd:e7:5b:e1:39:7b:77:39:c9:8f:b8:bb:
4a:eb:07:78:5a:7c:a9:f3:57:67:43:63:12:6f:32:
22:98:36:87:e3:f0:97:e4:a5:b0:b9:90:76:31:20:
eb:54:27:61:7f:9a:9f:79:6e:62:21:eb:f1:e7:38:
f9:cf:30:95:49:d3:4f:0f:9d:fe:54:4b:e7:23:24:
81:f7:04:d9:ed:38:47:4a:d2:fd:a2:76:d0:54:e3:
a4:18:f1:86:70:7b:03:fa:d0:41:e4:02:cb:05:3f:
0b:be:4f:9d:90:cc:e5:e0:c2:03:43:ac:87:6e:72:
15:58:1f:f5:8d:a3:66:16:bc:e0:16:23:83:1a:09:
04:47:13:7f:6f:7d:ec:0f:12:23:f4:18:a0:0b:e8:
8f:e3:06:e3:48:9a:f3:bd:21:6a:77:2f:b8:78:37:
5a:ac:e3:a6:1a:22:10:24:e1:77:bb:f1:59:18:b0:
9f:9c:0d:6f:0e:f6:64:f1:13:d9:c1:1f:62:8f:e2:
e4:5d:29:48:bd:59:48:68:a2:43:a8:b2:c4:e3:7a:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:8E:8C:9F:09:30:5E:2B:45:C4:4A:52:42:F1:11:AA:94:83:BF
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2a:36:d4:c8:44:5f:5d:f6:c8:c5:33:63:18:e5:5c:3e:8e:
56:e8:c8:e4:b3:18:a3:12:37:e4:43:3f:f4:16:de:9e:8e:d0:
be:03:99:5a:c4:7c:0e:be:1f:3d:8f:30:99:1c:4b:88:98:48:
08:85:62:2a:3e:1b:4b:51:66:cd:da:64:c9:8e:55:2f:b9:d1:
55:ae:86:8a:eb:1b:b1:9b:a6:d6:a8:df:b7:5d:4e:3b:31:e2:
1d:7c:ff:01:e6:0d:41:45:c4:c4:1d:16:5b:34:e2:a3:a3:a3:
6f:92:c5:82:cf:1f:63:e1:ea:8e:ed:65:c3:e4:0e:b7:41:68:
75:e8:c4:74:90:19:bc:ee:90:02:db:7f:bb:6f:8f:44:b0:5a:
52:1e:f4:5b:34:af:df:c3:e4:ef:fa:38:41:9e:d0:ce:ca:8c:
4c:a9:da:bf:9a:f0:7e:24:46:b9:64:e5:d7:99:89:8c:52:ef:
be:e1:2f:37:c0:dc:c4:f3:7e:77:f3:a1:92:86:f5:4d:92:3e:
28:ba:e6:29:22:98:18:fd:ab:ae:ab:e9:fe:81:b7:e9:69:c1:
b1:c5:d7:a2:a0:40:c3:70:64:1c:70:81:82:6b:6a:ff:28:f6:
87:8f:57:e5:4a:09:f1:15:b8:7d:0a:c6:c0:b1:df:69:50:ee:
ae:fc:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:05:00 2025 by rpki-client