
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: wry/berbD07lexHvAw8OdGWoVqOJRp3IfXYuNsiadVE=
Subject key identifier: 56:16:87:A4:E3:AD:23:C5:DC:D4:37:FB:E0:D7:32:CF:58:44:54:B6
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 0196C6159ECA267A973C21A068364E445991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 20:00:27 +0000
Manifest this update: Mon 12 May 2025 20:00:27 +0000
Manifest next update: Tue 13 May 2025 20:00:27 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: 2hjyZI5WK+FnLFJRMsBHGnOU8cTn8taksF7dgvDp+mA=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:9e:ca:26:7a:97:3c:21:a0:68:36:4e:44:59:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: May 12 20:00:27 2025 GMT
Not After : May 13 20:00:27 2025 GMT
Subject: CN=561687a4e3ad23c5dcd437fbe0d732cf584454b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:e8:66:3f:ee:a2:f5:8a:5b:80:f3:63:be:
10:ad:70:fc:19:40:b2:c3:2b:53:f4:8e:c1:b2:93:
22:d8:4e:39:82:f3:dc:70:28:94:92:90:73:3a:d9:
4e:bf:a6:cc:e5:84:13:62:4f:1d:90:62:2d:1a:83:
bf:3b:c7:01:b0:ec:be:a4:6e:e7:64:fb:38:98:a8:
ce:80:5e:08:8b:ef:f6:c4:e8:e9:a6:3b:bc:95:82:
18:3d:b9:36:c7:1c:4a:eb:34:6a:1c:6b:5b:07:9a:
cf:bc:77:94:f8:ab:61:74:44:60:0a:56:7f:ab:89:
3e:f8:7a:dd:22:ad:d5:31:03:9e:a9:46:1c:85:39:
97:74:d8:50:59:96:8b:be:87:77:fa:f4:64:6b:ab:
90:96:aa:05:73:c0:34:b9:5c:b3:47:70:f3:73:59:
9b:4b:cb:c5:2a:56:75:2e:a9:a2:0a:c6:57:1d:83:
eb:70:fa:69:bd:6d:b8:ea:e0:56:cd:07:49:76:3f:
f7:a3:50:b0:a6:51:4b:55:06:64:bd:6e:0a:ac:63:
28:5a:44:1b:bf:f2:0f:23:a0:73:3c:80:37:2e:89:
04:ed:4c:46:49:a0:d1:03:4e:2f:97:9e:3f:57:da:
b2:f7:97:ed:97:a1:8b:11:29:9c:17:fb:de:f4:91:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:87:A4:E3:AD:23:C5:DC:D4:37:FB:E0:D7:32:CF:58:44:54:B6
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:4c:45:b1:ad:29:03:d1:51:22:9c:10:57:53:69:f9:00:59:
09:bc:7c:8d:4a:e5:3b:60:58:e9:e4:8a:0a:54:c7:f6:99:59:
aa:e0:48:2a:34:5a:68:f1:96:e2:16:5b:40:01:66:a1:55:7f:
f8:54:21:a0:73:6a:f8:d9:d0:08:e6:74:e4:cc:a6:08:1a:b5:
9a:b4:b9:d9:fb:8c:ef:69:fa:71:2c:0c:54:f3:01:e1:1a:6d:
d6:ec:b2:56:a5:bf:e8:06:d2:07:40:62:7d:04:0d:be:ac:aa:
3b:c2:50:bb:1b:a0:53:6b:cf:75:0b:16:7c:84:d4:0e:c4:dd:
12:ef:2a:34:27:03:62:c3:72:8f:fc:8d:5f:06:0e:e3:a8:72:
16:fd:63:3e:8c:14:fe:a8:b0:2b:3d:e6:49:7a:eb:1d:dd:0c:
35:c1:ca:8a:49:2e:5f:ab:94:e3:f8:8f:f9:04:a9:97:76:ce:
62:82:7f:e8:8d:eb:d3:b6:e0:32:a5:75:62:15:f4:e2:de:23:
fa:bd:2d:74:9f:5d:9d:36:63:0d:47:13:23:9d:00:5e:83:19:
77:5b:e4:4a:62:93:81:25:9f:ac:90:78:c2:d4:6e:14:30:fb:
50:b6:04:b7:b3:21:2a:f5:e4:05:c9:cb:26:fe:6a:33:92:ab:
81:4f:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:46:02 2025 by rpki-client